Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
File: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft (raw, json)
Hash identifier: QLLKaOhJ3GRxXd7MoPr4gQ1V4W27iGz7Myw/Y+qciL0=
Subject key identifier: 28:3C:64:7B:F9:BA:A5:32:4E:58:89:54:DD:CE:D8:CA:41:2F:6E:15
Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
Certificate issuer: /CN=f4b207ef8024244bbb4a0106af19270150c9f624
Certificate serial: 019A73381DB8C9F20C41C7736FD45CC4C395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
Manifest number: 0697
Signing time: Tue 11 Nov 2025 14:00:48 +0000
Manifest this update: Tue 11 Nov 2025 14:00:48 +0000
Manifest next update: Wed 12 Nov 2025 14:00:48 +0000
Files and hashes: 1: 7DAxFJT5VyzcSgHTnJmDdUKxQNw.roa (hash: 37ijJqs68GCjjpypVGN9wvpiuMLosaLv3KKoBIsmUtU=)
2: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl (hash: 5ypFsC47+2jIvPNNFBCZFfCJxVDbfc90fea5LLUrYlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:1d:b8:c9:f2:0c:41:c7:73:6f:d4:5c:c4:c3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624
Validity
Not Before: Nov 11 14:00:48 2025 GMT
Not After : Nov 12 14:00:48 2025 GMT
Subject: CN=283c647bf9baa5324e588954ddced8ca412f6e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:2e:eb:25:f6:af:a7:b5:c3:31:7a:3a:0c:
98:3d:90:c5:9a:6b:5f:97:8a:1a:88:6b:3a:f0:60:
3c:98:d0:da:74:3b:f3:77:51:20:17:e0:f0:3e:33:
93:e1:68:3c:cb:c3:aa:e0:c4:82:76:a3:57:b1:78:
b3:dd:68:e7:08:c8:73:7f:dd:ab:10:0a:be:90:cf:
8f:7a:d4:60:ce:b0:38:bc:21:7c:4a:35:f2:ea:f1:
a5:47:82:c3:70:fb:f4:db:b9:88:da:12:4f:ab:ce:
52:69:5d:62:92:ec:cb:8a:d6:a9:5e:ec:e5:fd:b8:
0d:6b:17:f0:4d:fc:11:d1:0a:ad:a7:dc:89:5e:9f:
a2:48:bb:b2:da:2d:d7:e6:43:89:a8:1d:30:ac:7b:
f5:53:70:52:af:b9:d6:cd:6e:36:e5:c1:2f:1c:a9:
c0:b8:23:5f:d2:45:ad:66:a4:cd:d4:6c:31:00:30:
59:42:34:12:ce:18:ee:0b:b9:2d:2a:7d:2d:a4:0e:
1e:6a:5c:8e:71:0b:22:17:3d:e3:1f:44:99:69:54:
fa:59:ee:1e:e4:36:6f:b9:56:61:c8:b2:65:34:38:
de:05:84:36:a1:1a:e2:3b:00:b9:8a:54:68:48:cc:
bb:fb:58:bd:4f:cb:a1:d3:c5:87:f4:ef:37:c3:87:
d1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3C:64:7B:F9:BA:A5:32:4E:58:89:54:DD:CE:D8:CA:41:2F:6E:15
X509v3 Authority Key Identifier:
keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:78:0c:11:20:9c:17:ce:64:2d:8b:f9:4c:6f:62:24:9b:5f:
b2:82:ca:df:13:21:e2:87:68:20:aa:dc:54:62:09:8e:d5:59:
48:ca:12:e4:d6:7f:4e:1b:09:80:36:f3:bb:dc:93:ca:98:ed:
14:b4:01:95:f1:31:55:92:4d:62:a5:28:ac:1d:6a:30:aa:0f:
39:99:98:fe:f4:02:52:de:36:19:e3:16:55:95:38:5b:d4:33:
91:17:fe:26:0b:9f:93:03:d9:e2:2a:fb:87:5d:1b:55:97:6e:
8f:37:f4:5d:dd:b1:84:d7:0d:93:70:37:6a:1a:3e:7e:b7:1c:
f5:1d:04:e0:b6:1f:cc:8f:e1:0b:3c:07:f9:29:87:2c:41:5c:
d8:76:53:bf:a2:99:36:b6:87:b6:f6:2b:05:f2:5d:73:d7:5d:
a2:11:50:8b:7c:67:49:2d:62:68:1a:75:72:e7:a9:49:2f:07:
a4:38:ee:c6:11:9c:b1:ad:5c:7d:29:0e:0b:56:0e:94:17:56:
60:27:f1:f4:6a:66:6c:02:04:c8:c6:a3:87:5d:61:2c:a2:cd:
37:c8:85:8c:64:5a:93:6a:b3:47:50:08:1c:9b:06:aa:03:eb:
50:49:b6:19:40:58:14:a6:be:66:fe:31:2c:57:c7:47:f5:0e:
eb:8a:56:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:28 2025 by rpki-client