Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
File: k9xL8fiRK-t83uQJMCmIxhE4jpE.mft (raw, json)
Hash identifier: ParRZwty2RjPms8Om3cf+yqaUMQnI2ZTNYqs4W6OvCw=
Subject key identifier: 83:9D:79:06:27:C2:83:36:6A:4C:43:62:30:4D:14:17:B4:72:B3:53
Authority key identifier: 93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91
Certificate issuer: /CN=93dc4bf1f8912beb7cdee409302988c611388e91
Certificate serial: 019A730120BE4F66FBD675EEFADC1FB5C468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 13:00:44 +0000
Manifest this update: Tue 11 Nov 2025 13:00:44 +0000
Manifest next update: Wed 12 Nov 2025 13:00:44 +0000
Files and hashes: 1: aEy_zqNzomjBOnysb7pwIws5H9M.roa (hash: 5K5cuFuAW+cdRm7n0/ZKC9QHmYwbcOfw6xnQYUg53PE=)
2: k9xL8fiRK-t83uQJMCmIxhE4jpE.crl (hash: lvsri541nLFlDdbxViNiTFgEeDSrKd/ApPLIxnT760M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:20:be:4f:66:fb:d6:75:ee:fa:dc:1f:b5:c4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc4bf1f8912beb7cdee409302988c611388e91
Validity
Not Before: Nov 11 13:00:44 2025 GMT
Not After : Nov 12 13:00:44 2025 GMT
Subject: CN=839d790627c283366a4c4362304d1417b472b353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:77:83:61:a9:ab:04:5e:30:cb:a2:bc:6a:5d:
ed:16:67:aa:1a:95:72:53:65:08:05:4a:c2:54:64:
67:20:46:00:c8:93:b3:e4:73:ce:8f:59:c5:b8:0d:
d2:f7:94:39:e1:5c:fc:10:16:a1:8c:a6:83:0e:c0:
c6:7e:6e:1c:22:e4:41:9e:82:1c:30:57:63:fc:03:
50:95:ac:33:6d:e0:6b:b5:11:cd:31:51:f2:98:bf:
d0:68:85:6d:c9:ef:aa:22:58:b6:70:48:97:30:c7:
a3:11:be:33:15:74:fb:88:0b:c8:49:b3:e8:78:0b:
71:0c:91:f5:26:7d:b7:96:e8:59:d8:75:31:1b:6e:
60:a5:53:f1:d7:58:ed:83:fe:da:7f:2f:11:d3:ca:
ac:a6:a6:62:48:41:61:aa:c0:9f:29:54:91:43:17:
1a:36:d5:f1:89:68:d4:87:12:a5:57:6a:eb:f2:a6:
17:86:f7:a0:2d:9e:6e:1b:98:27:e8:09:bc:01:e0:
d5:f1:1b:78:06:6a:85:42:99:b0:72:51:a5:90:0b:
c8:35:15:1e:da:4a:ed:8c:eb:f1:c2:36:0b:a0:15:
71:de:74:61:bf:92:07:2c:d9:82:b1:51:9f:31:a6:
40:af:ff:49:0a:15:26:f4:24:92:ab:f6:d3:08:dd:
1d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9D:79:06:27:C2:83:36:6A:4C:43:62:30:4D:14:17:B4:72:B3:53
X509v3 Authority Key Identifier:
keyid:93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:cb:f3:76:fb:3c:fa:73:65:25:1b:7c:dc:4c:a2:3a:23:c5:
04:81:4f:5e:a8:28:86:e4:a8:8b:1d:b1:fa:46:33:09:76:36:
4a:54:36:43:41:5f:18:69:56:2d:86:2a:ac:fe:0d:46:92:5a:
1e:8f:d6:8f:96:85:5f:f0:fe:ae:03:2e:7a:ea:93:6f:86:dc:
4f:fa:9d:84:4d:94:28:b2:7d:ae:ba:a0:d9:a9:f5:12:13:48:
ec:8c:50:72:03:f3:a9:14:d5:2c:ae:15:ea:d9:5c:fd:6e:77:
9b:1a:ff:b7:c1:d5:14:ec:b5:09:c1:a6:ac:57:a8:3c:8a:30:
d3:a1:5a:a8:8e:b8:ed:51:c7:25:b1:c4:27:d3:ef:f1:03:c9:
40:37:03:87:fd:07:46:41:28:af:cc:ea:ab:17:f7:9f:4a:dd:
02:bb:b7:bc:9a:d5:05:a9:8a:9a:4d:23:87:4e:59:c3:4a:5b:
e6:30:58:43:c6:09:72:5e:d8:5c:69:f1:12:86:dc:67:87:aa:
91:ff:46:a5:ae:33:29:8d:e9:1f:11:b6:f0:a4:78:43:0b:32:
4b:5f:fb:51:dd:50:35:de:2f:8b:f1:9a:de:d0:34:4f:32:69:
e3:8d:dd:13:91:8a:dd:13:e0:b7:39:10:8a:58:9e:dc:92:0e:
65:35:6c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:15 2025 by rpki-client