Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
File: 9U47eX9Lo36_cYmkwU8FINfPMNc.mft (raw, json)
Hash identifier: jLMrTABJTTaGTo+e+0c6pZ3+eZCrNmwEPTFqzrwGqH8=
Subject key identifier: A4:E2:97:99:6E:D3:39:3C:D2:AF:DE:CC:0F:88:22:4B:18:CF:15:A9
Authority key identifier: F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
Certificate issuer: /CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
Certificate serial: 019A28F94D94FC1C6DA758883FF0BC6F6572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
Manifest number: 0412
Signing time: Tue 28 Oct 2025 04:00:18 +0000
Manifest this update: Tue 28 Oct 2025 04:00:18 +0000
Manifest next update: Wed 29 Oct 2025 04:00:18 +0000
Files and hashes: 1: 9U47eX9Lo36_cYmkwU8FINfPMNc.crl (hash: fWq9z0LZE9bo+sLFNUcv7lmQwNpWShNEE+PMDyYmGCQ=)
2: UmpOhRez3moOZWrjBKIN45JkCE8.roa (hash: rPkye9amYErKpRGECf5NJc6OYwjs4QcPoervOMLXjak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:4d:94:fc:1c:6d:a7:58:88:3f:f0:bc:6f:65:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
Validity
Not Before: Oct 28 04:00:18 2025 GMT
Not After : Oct 29 04:00:18 2025 GMT
Subject: CN=a4e297996ed3393cd2afdecc0f88224b18cf15a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:30:91:4f:80:ad:0e:11:25:90:d7:f2:16:6c:
ad:62:95:56:cc:02:cb:b1:47:09:25:73:4b:c5:56:
5b:db:91:b2:c7:97:2d:92:a7:ac:e9:d1:25:c1:dd:
38:c2:54:82:3a:db:f1:6c:fa:a5:92:a2:31:91:02:
ab:88:59:9e:be:cf:c9:c3:6e:19:b6:46:00:75:f9:
e1:1e:40:c8:f4:53:a3:58:0d:64:6e:b0:a3:e9:e8:
94:7a:45:f6:76:42:79:b5:ce:d1:bb:4f:92:f2:bf:
21:9a:ac:44:6b:66:b3:d8:53:8c:78:73:4d:2e:4e:
4e:6c:de:6e:2d:12:3e:7f:03:a5:2e:cd:d6:60:8f:
19:0f:7f:d2:ba:c0:4d:c5:4e:13:8f:26:ab:32:b5:
1b:65:c8:37:72:36:cf:4f:8f:9d:bb:4e:9a:17:66:
8f:75:0c:f0:2e:5d:3c:b7:d0:b5:58:73:ec:57:d1:
82:23:52:ed:27:3d:db:6e:0a:9a:66:87:f3:b4:c9:
d7:8e:a3:8a:d0:9d:70:97:87:1e:9b:a1:60:1c:ad:
62:51:07:ae:67:41:2e:34:20:ea:9a:28:d8:40:0a:
71:10:e5:76:7b:99:9d:35:57:2f:17:80:f2:e9:5d:
6d:4b:05:84:c0:b8:b7:9d:26:ef:7d:c4:d1:d9:b4:
2d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E2:97:99:6E:D3:39:3C:D2:AF:DE:CC:0F:88:22:4B:18:CF:15:A9
X509v3 Authority Key Identifier:
keyid:F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9a:2f:e0:7c:36:34:46:dc:80:60:c8:84:6e:de:b0:13:e3:
52:d7:f9:32:31:09:4d:a4:6a:2c:57:1e:24:23:1a:62:0c:68:
eb:3b:37:c5:08:4e:2c:52:cd:7c:04:a9:05:57:31:0f:38:b4:
dc:b4:9d:1e:bd:b2:2c:37:a0:fc:0d:7d:71:f9:95:a0:da:a5:
d9:4f:15:16:72:9e:24:64:1b:72:c7:24:72:a5:8f:ec:b4:b8:
2a:a2:2e:9c:9a:95:c4:31:f9:05:5a:77:30:70:07:9b:c7:45:
3d:5a:02:cf:a2:9a:c9:88:52:34:15:57:00:b0:3b:94:d2:2b:
06:5b:3b:4a:f9:88:cb:28:5d:32:2f:8f:7f:37:54:a4:09:75:
b3:24:c0:a6:ca:d8:0c:69:86:cc:1e:d9:a6:c9:60:41:fd:6e:
5b:29:a3:f9:76:68:0d:86:17:f9:5f:78:15:25:ed:7e:25:c9:
12:9b:8a:05:d0:38:d2:ec:75:e6:ab:a0:ac:73:4a:a4:4c:a9:
99:bd:a0:f8:8e:7a:a4:85:68:5a:24:42:fc:91:48:9c:63:1c:
be:5c:48:59:ba:25:3f:54:57:76:a2:02:c9:cd:0e:00:4e:03:
ef:e8:82:d7:a5:71:2d:4b:6e:fc:44:94:47:49:1a:d4:ef:13:
31:47:e6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:45:14 2025 by rpki-client