Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
File: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft (raw, json)
Hash identifier: w3LbZ/r0tcE6rqwkG8k5H5UkylJhQlBKyW5j6jLIko0=
Subject key identifier: C1:15:8C:28:87:D2:6E:B0:85:41:8C:75:C6:75:DE:0D:0A:98:86:C8
Authority key identifier: F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
Certificate issuer: /CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Certificate serial: 019A72CAA285DBC057D541E2B8DFE0723D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
Manifest number: 140D
Signing time: Tue 11 Nov 2025 12:01:13 +0000
Manifest this update: Tue 11 Nov 2025 12:01:13 +0000
Manifest next update: Wed 12 Nov 2025 12:01:13 +0000
Files and hashes: 1: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl (hash: thQsQLOiyqFSYuVDV2h6muCEi8l+YTUGY9Oks5h2zUM=)
2: FhvwZmZbFQ5_XSu4XdZkFej3jvE.roa (hash: ld2MBpkdINa/HpitEI9hE8KrLNtvxY4fg+rJ1pVUK1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:a2:85:db:c0:57:d5:41:e2:b8:df:e0:72:3d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Validity
Not Before: Nov 11 12:01:13 2025 GMT
Not After : Nov 12 12:01:13 2025 GMT
Subject: CN=c1158c2887d26eb085418c75c675de0d0a9886c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:51:44:ea:36:62:4c:61:5e:03:14:d2:1f:35:
a6:4a:a1:46:d8:0b:5b:c5:92:8d:14:b4:b5:de:5a:
bd:e6:24:83:9e:01:07:5d:b5:e5:54:d9:75:41:a0:
d2:70:bb:ed:c5:e7:8e:6b:43:e0:34:9c:71:c4:71:
11:fd:3d:63:2c:33:4f:18:05:44:41:b6:4b:1c:62:
55:03:e9:1a:ab:45:cc:26:a3:0e:50:d9:89:89:a6:
a5:08:26:74:26:5f:fd:c8:89:b0:ea:87:1b:d7:4e:
ba:c9:3c:ee:a3:99:dd:f8:27:fb:55:9b:32:fb:35:
9d:6c:44:b6:8d:e8:78:53:3a:03:08:b4:c2:a4:7e:
c9:68:4e:7b:70:02:23:e0:e5:cb:98:ce:a0:ad:4f:
fb:b8:dc:15:75:d0:07:57:c7:0a:47:31:41:bc:e3:
ee:b2:99:78:29:19:9e:12:4f:8e:d3:92:22:9a:24:
2f:ca:f0:96:28:58:8a:bf:f6:b9:7b:03:71:7f:3c:
c0:5b:98:14:06:3f:dc:c1:52:26:41:d4:16:b1:ca:
76:01:b4:e3:f7:3e:c9:c5:0f:68:ca:b8:16:25:b6:
6b:c3:34:7a:d7:b6:b6:8e:cc:fc:eb:51:51:55:bb:
31:34:13:f1:c1:fa:67:6d:b7:39:67:f1:04:3e:9a:
41:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:15:8C:28:87:D2:6E:B0:85:41:8C:75:C6:75:DE:0D:0A:98:86:C8
X509v3 Authority Key Identifier:
keyid:F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3d:9c:ca:34:cb:8f:46:06:3f:d6:ab:f5:ce:d8:69:26:22:
8d:ef:0b:fc:d9:d8:ba:ac:f1:46:ba:80:45:68:6e:f3:5b:e9:
46:ca:91:87:43:84:bb:2a:29:d2:23:f7:b1:a6:d6:15:22:67:
fd:70:bd:bf:cd:11:50:aa:b5:16:28:73:2f:16:a5:7f:8f:63:
ff:be:db:44:0c:c4:7d:b9:85:4b:5c:80:1d:d1:39:0b:73:52:
67:bf:ca:f2:e4:03:2e:52:e0:57:54:aa:a1:1b:74:f3:4f:1a:
62:3d:2f:8c:c5:f9:fe:db:85:ad:1e:17:0e:f2:c8:45:e3:b8:
35:d8:ea:63:57:14:52:b2:4b:1c:2b:6e:b3:60:b2:79:53:dd:
b2:6a:b1:52:08:cd:47:fa:8a:2e:5e:c5:a0:9e:0d:e8:37:bc:
c4:39:20:13:59:cc:a5:91:69:96:4a:69:92:25:7d:b0:1c:cb:
ce:08:00:22:aa:77:0c:83:17:b2:9e:f9:7c:f0:3c:8f:c2:f9:
73:e5:02:c5:5c:76:9f:e5:19:f2:a6:46:4c:b6:95:a1:a9:da:
21:69:94:1c:50:0b:40:8f:4f:fe:21:a1:4c:a0:52:99:35:34:
e8:d6:5d:16:0c:6d:d4:1d:21:1f:f9:4e:04:b4:e8:b6:56:fd:
ae:54:f4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:21 2025 by rpki-client