Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft
File: 9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft (raw, json)
Hash identifier: Y2lL+JjsbS+lV54tiTtsBCBZuLxC7KZgqL1UdxUb1D4=
Subject key identifier: 01:18:AF:3E:07:5A:10:B3:1F:61:12:3A:AB:70:A9:D0:2A:CF:E9:A3
Authority key identifier: F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE
Certificate issuer: /CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee
Certificate serial: 019A725C6DB8A3B324440BBC5A12DBDFF2F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft
Manifest number: 12E4
Signing time: Tue 11 Nov 2025 10:00:51 +0000
Manifest this update: Tue 11 Nov 2025 10:00:51 +0000
Manifest next update: Wed 12 Nov 2025 10:00:51 +0000
Files and hashes: 1: 9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl (hash: m/JA9fhg7F5DjLJUHTrkwOsFLTorG8Xq1zZY+OjHon4=)
2: NdVRxEIMNBunZfZP9qXNSfaySc4.roa (hash: KRJlcuUveV33SEu3V+UuJaoqvZJ1ZgJGxVWpQ++tEBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:6d:b8:a3:b3:24:44:0b:bc:5a:12:db:df:f2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee
Validity
Not Before: Nov 11 10:00:51 2025 GMT
Not After : Nov 12 10:00:51 2025 GMT
Subject: CN=0118af3e075a10b31f61123aab70a9d02acfe9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:f2:00:99:89:b1:35:31:c6:08:49:4a:97:
d6:20:68:4b:c5:aa:ce:15:5f:db:3e:86:aa:85:ba:
6b:d2:14:63:d2:39:78:19:6d:ae:46:17:01:c9:8b:
c7:2f:7f:8e:8f:b3:00:79:09:b3:52:47:d2:52:65:
be:6a:66:c8:26:2b:1a:2a:6b:c6:bf:16:51:28:27:
58:70:0e:c6:1f:e2:25:31:fa:95:32:1b:cd:b5:18:
f7:90:c7:e5:a6:ba:0a:34:fe:71:83:50:04:6b:92:
03:b5:e3:da:7d:e5:d3:b9:0c:fb:1f:ae:5c:b2:7b:
51:e0:b4:db:bc:cd:85:cb:0e:34:77:3c:5c:92:ce:
97:92:99:3c:a5:76:ff:d3:8f:92:a9:3f:95:03:d7:
cd:43:e1:ff:45:bb:5f:19:bc:90:95:8b:b3:8f:f7:
5f:ee:ca:6e:15:a3:48:1a:50:ec:73:2c:ec:f4:21:
3a:74:58:88:f5:cd:e4:a0:dd:b9:78:87:78:70:c1:
f4:bc:86:55:be:f2:88:9b:21:2a:28:04:80:fb:fd:
9e:9e:86:d7:1a:fb:d2:9e:cd:45:04:1f:47:df:31:
04:71:43:c4:fd:8f:3a:53:4a:b9:c2:25:5e:14:df:
14:a3:7a:96:e5:3a:21:cd:43:70:68:12:fb:c5:e2:
eb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:18:AF:3E:07:5A:10:B3:1F:61:12:3A:AB:70:A9:D0:2A:CF:E9:A3
X509v3 Authority Key Identifier:
keyid:F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:05:1a:c3:b2:60:6d:48:8a:2c:c0:71:f3:5f:a7:9c:65:89:
63:6d:5a:c4:a7:a5:e7:2e:4f:31:c0:94:7b:dd:04:eb:35:72:
70:d3:7c:f6:a2:72:b5:2b:d0:f1:e6:94:ce:0d:78:f7:c2:a0:
da:c3:ad:ef:89:bd:3b:9d:ce:a2:35:60:62:65:d0:a3:96:30:
3a:35:af:4e:27:01:52:22:36:06:5a:e0:8e:d7:9b:f6:83:81:
8d:89:6b:cd:52:3c:5e:74:88:15:2a:70:70:fb:17:8d:36:3f:
97:b0:6d:79:d8:36:24:65:b7:7c:4c:01:5c:22:3b:b4:24:45:
6a:4a:fb:3e:93:6c:5b:4a:5e:66:8b:93:ec:99:96:18:b2:f4:
62:88:78:7e:47:32:36:bd:ee:40:15:70:4d:10:8d:40:0b:0f:
f9:e6:08:de:d3:65:d6:e5:cd:8b:76:83:4b:61:55:52:4f:ac:
6e:64:fe:d9:18:a0:e3:5b:0c:7f:02:d0:b8:96:84:4a:96:07:
dc:93:1f:12:1e:b4:ca:86:3d:15:70:42:60:56:91:04:a5:6a:
94:66:a2:70:28:ec:22:b5:4b:eb:72:38:9a:3f:b4:3b:0a:24:
28:ae:2a:74:ab:73:73:31:f2:28:37:b7:53:52:d8:b9:21:b5:
86:41:22:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:38 2025 by rpki-client