Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
File: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft (raw, json)
Hash identifier: zJwo0lCR524k/Rfk/OfAfg8yW12gI5v+FAgvkOJgn7U=
Subject key identifier: DD:89:1F:16:FC:F2:3A:3B:64:EA:CE:5D:85:7B:02:38:4F:CF:3C:DD
Authority key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
Certificate issuer: /CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Certificate serial: 019A706E5BA8C2E21F16CEBB62C2E2E22EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 01:01:11 +0000
Manifest this update: Tue 11 Nov 2025 01:01:11 +0000
Manifest next update: Wed 12 Nov 2025 01:01:11 +0000
Files and hashes: 1: 1-WLV8VecHIiJX48ZCRXCPnkSV1w.roa (hash: LW+UjxgXYW+oRlL0a5q0N9JKog1QwqgaxgEIN56GOWA=)
2: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl (hash: 3oO9Yg290cy+tixDUwDxFpqihJuGmyxLh/lHyGU4Jjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:5b:a8:c2:e2:1f:16:ce:bb:62:c2:e2:e2:2e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Validity
Not Before: Nov 11 01:01:11 2025 GMT
Not After : Nov 12 01:01:11 2025 GMT
Subject: CN=dd891f16fcf23a3b64eace5d857b02384fcf3cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e2:9b:a2:10:4b:af:31:ce:43:3e:da:e2:47:
65:db:93:0f:1d:f2:ec:e3:d4:0c:94:80:40:e0:95:
da:f6:32:5f:40:5d:15:bc:98:14:03:9e:59:dd:76:
bb:b5:12:1d:e2:0f:f3:a4:09:c0:22:c7:46:2d:b6:
e5:39:da:b9:c6:b2:d7:8a:9e:0c:59:bf:68:36:39:
5c:fd:68:8b:64:56:d6:d1:cf:5c:8d:54:90:ad:18:
f6:19:74:15:83:39:95:24:82:95:47:76:65:b0:cd:
3b:f8:71:bd:4b:85:b7:09:10:24:12:48:07:d2:89:
3c:1d:dc:05:09:93:64:78:f1:7a:07:4f:32:78:88:
3c:71:03:d8:9b:53:a9:0a:a5:21:6a:78:17:08:96:
08:4c:ec:69:ee:be:79:a9:14:ec:e5:05:60:5d:55:
ba:49:e7:d5:06:60:1e:55:ed:96:f8:fe:ec:07:2a:
3a:a5:cf:0a:1f:cd:5b:8a:46:d5:a9:c8:01:4d:70:
93:ec:f9:79:66:27:f8:33:13:5b:5b:0f:72:aa:db:
41:f9:c5:91:ef:7a:04:5a:a9:7f:bf:a2:a8:ce:c1:
71:c9:89:d9:c5:34:77:70:ba:79:f9:15:1d:4e:5b:
7f:52:18:0b:b4:50:f5:24:89:b4:25:3c:d6:38:ea:
68:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:89:1F:16:FC:F2:3A:3B:64:EA:CE:5D:85:7B:02:38:4F:CF:3C:DD
X509v3 Authority Key Identifier:
keyid:F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:33:fd:e5:04:84:e1:af:b2:c0:0e:4a:b6:b1:78:d1:17:e7:
89:69:cc:7d:cb:92:c8:42:99:4c:0f:5d:13:2f:5f:05:d1:1d:
e9:5a:d3:9a:2e:c9:a7:d9:cf:c1:c3:e8:e2:5d:5a:d4:a1:a2:
2d:c8:2a:b0:8a:d5:aa:6e:f4:9e:16:8a:a8:9b:6c:2b:a0:6e:
e0:8e:7d:55:75:42:7f:eb:6e:74:b3:db:da:95:d6:fb:5f:e4:
5f:94:84:49:fb:9d:f7:c9:b9:64:6d:9e:6f:3b:75:ae:1f:65:
13:f2:62:86:d8:ad:cd:51:2d:9d:99:c8:60:d3:4d:67:3b:9e:
e6:76:3b:40:34:7d:44:ab:a1:18:fd:19:a8:04:9c:5f:5f:88:
ce:0b:d3:dd:12:74:2d:42:0d:61:62:8e:e9:4c:b4:47:eb:92:
2a:ef:30:28:b8:cd:e4:98:a3:c6:ec:e3:70:49:f2:04:88:d1:
6a:62:bc:cd:ec:53:cf:76:5b:92:e0:50:e6:62:1b:ee:5d:dd:
1e:af:66:3a:12:a6:43:8d:9a:6d:6e:02:bc:ed:ef:fa:26:95:
cf:86:e0:32:f3:90:cd:57:7c:07:aa:dd:c4:73:af:89:18:a1:
b2:03:ab:4c:79:76:6a:d5:77:1e:55:12:ee:58:5f:b8:5f:8e:
f8:2f:61:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:07 2025 by rpki-client