Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
File: S11Foqu5YNK851js5zOxJtyn5xs.mft (raw, json)
Hash identifier: X/CPIDu9DRTtS5A0F1KVdXl/5XY8lnsbCvmC4HDXXbo=
Subject key identifier: 9E:36:13:1A:68:D7:BB:D1:B5:F9:84:24:5C:26:0A:C5:10:1C:0F:6A
Authority key identifier: 4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B
Certificate issuer: /CN=4b5d45a2abb960d2bce758ece733b126dca7e71b
Certificate serial: 019A729397B66D1BA3B46D01639827C27627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
Manifest number: 15E9
Signing time: Tue 11 Nov 2025 11:01:06 +0000
Manifest this update: Tue 11 Nov 2025 11:01:06 +0000
Manifest next update: Wed 12 Nov 2025 11:01:06 +0000
Files and hashes: 1: S11Foqu5YNK851js5zOxJtyn5xs.crl (hash: a0saaJ54hi5lzHthAGvTPtblOV9MTyoyy95DxLFv2Nw=)
2: u4XkgPABKlmzAjFlFb35_bSOoZM.roa (hash: 5OhzujGDvwa+oBk89U1CXUeSGEyZAhhsIH31ZmjrM8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:97:b6:6d:1b:a3:b4:6d:01:63:98:27:c2:76:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b5d45a2abb960d2bce758ece733b126dca7e71b
Validity
Not Before: Nov 11 11:01:06 2025 GMT
Not After : Nov 12 11:01:06 2025 GMT
Subject: CN=9e36131a68d7bbd1b5f984245c260ac5101c0f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:6c:0e:28:63:a2:23:bc:1a:73:ff:b3:81:
8c:47:3b:53:f4:55:ab:c1:e0:91:22:ff:8d:9f:92:
54:28:84:71:e0:db:7f:43:c4:f8:b3:69:88:f6:66:
ae:99:72:54:57:c6:96:bb:42:f9:18:22:a2:9c:f5:
20:aa:a2:67:a9:5d:d4:1c:7d:ac:96:21:5f:4e:3d:
50:fc:f8:64:a7:55:03:7b:e3:bb:63:df:c6:31:ba:
b3:4d:26:41:f7:b1:3e:4d:50:d9:82:24:b1:bb:8f:
9d:7c:e7:70:ae:5c:d0:46:44:4e:5d:f4:be:99:99:
3b:f7:96:7f:5f:e1:32:2a:0d:73:2a:1e:fd:5b:dc:
1d:d6:3c:23:c9:7c:ee:99:2f:e9:5b:72:31:33:4f:
43:42:a5:60:d4:ff:3e:cc:b0:47:eb:f7:d0:6b:c6:
32:f0:4f:a8:8b:4a:be:a9:fc:51:0c:30:3b:5c:03:
12:51:86:92:b6:86:cb:79:a9:66:ab:b8:ed:b4:60:
63:e0:f1:70:b8:62:37:98:0c:46:33:06:1f:c5:45:
3e:5f:92:11:66:4b:72:e7:1e:98:5b:38:dc:c4:21:
9d:58:6d:88:2d:13:6d:e9:69:7c:09:4c:c0:c4:1f:
b5:04:b2:85:70:09:d8:d0:dc:c5:28:62:21:1f:e7:
03:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:36:13:1A:68:D7:BB:D1:B5:F9:84:24:5C:26:0A:C5:10:1C:0F:6A
X509v3 Authority Key Identifier:
keyid:4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2c:cb:04:00:2c:d4:20:ba:a4:cf:4b:eb:79:8f:10:21:f2:
01:c9:10:4b:d9:2c:a4:e0:9d:6c:be:55:91:de:10:ee:cf:e4:
e9:95:eb:d7:fe:28:38:40:56:dc:e8:67:76:fa:f8:d7:30:e5:
cf:ad:73:6e:76:70:d8:36:67:5a:cb:3c:c0:f3:62:ed:84:54:
99:8d:ad:d8:35:38:d2:58:aa:fe:a9:19:2c:cb:ab:20:a0:ae:
97:ed:b5:fc:e2:54:6b:7c:d5:d0:5d:84:0b:d5:4a:67:c0:6f:
63:23:b7:60:e6:16:cd:3c:fe:3c:1e:1e:0b:ee:d1:f4:4e:7a:
da:3a:57:46:6a:a2:99:82:7d:0a:76:40:d5:c8:2f:3e:a0:70:
c8:7c:12:2b:59:4c:9f:32:b1:d2:c1:af:e5:d1:89:4c:1d:cc:
9b:70:3b:b0:2e:2f:d3:bb:7b:3f:d1:26:07:de:7d:3a:24:2a:
ef:a5:c4:fd:4a:af:a9:4d:e6:be:bb:7c:ad:b8:75:56:a1:2c:
f9:64:6d:63:44:cc:52:ea:42:b8:64:45:90:92:7e:04:a7:a5:
a9:d7:01:3a:6c:6f:72:e0:79:44:4f:09:e6:09:2b:f9:56:e5:
0d:2b:ce:ee:16:cd:e3:a4:c5:39:87:3c:8a:01:cf:0c:59:8f:
4a:cd:ef:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:30 2025 by rpki-client