Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: v6f413tg9RWUYJ19kZy56+TrJjY2f4CLuIBfbr6HHMw=
Subject key identifier: 3D:E0:FC:29:BD:83:A9:01:39:1C:2A:16:EE:27:89:C6:8F:56:09:BA
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 019A29306C82C974C005BB0844314A51AEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 0E07
Signing time: Tue 28 Oct 2025 05:00:30 +0000
Manifest this update: Tue 28 Oct 2025 05:00:30 +0000
Manifest next update: Wed 29 Oct 2025 05:00:30 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: WEBj1qykkAPRJYv+ipUA5DWf8p9/l3cm1g6y9jlqbkw=)
2: B8bTTGpK1L-pMyO-WGFk_7H-LC8.roa (hash: r0JNxuBgg4on067YK5COQPlyCkk+tp458uDvr2IE4z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:6c:82:c9:74:c0:05:bb:08:44:31:4a:51:ae:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: Oct 28 05:00:30 2025 GMT
Not After : Oct 29 05:00:30 2025 GMT
Subject: CN=3de0fc29bd83a901391c2a16ee2789c68f5609ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0f:56:36:76:5c:9c:97:4d:4c:ae:5a:16:48:
0f:2e:01:93:fa:e1:67:20:d6:d8:5c:06:97:11:a4:
3e:4a:10:39:ab:a2:4e:3a:79:91:5f:62:57:75:19:
7c:2d:cc:a4:2f:c4:e3:f1:40:b3:48:1f:72:f8:50:
b2:4b:86:ce:c0:1e:e6:89:32:d9:34:7b:9e:ce:0c:
d3:cc:e7:3a:ce:cd:7a:e8:d6:dd:b4:c2:13:04:43:
c2:5e:90:7d:33:a7:85:4f:c2:58:2d:11:f7:bd:d8:
be:d0:57:ac:c2:1a:c3:62:7e:8d:ed:4d:58:e1:65:
f1:f2:65:ea:73:a3:7d:76:96:b2:41:da:79:35:d9:
02:81:24:be:55:b5:e3:ac:f4:30:67:82:2a:d5:35:
70:6a:07:d6:f8:ac:26:51:21:ff:ec:1f:dc:0a:5e:
90:62:eb:82:aa:59:bb:03:a5:96:96:13:4f:9a:7f:
12:f3:ab:d9:e9:fd:38:28:04:3b:62:4e:64:48:fc:
fa:57:aa:ac:10:db:42:c4:3a:26:3c:f8:a7:52:af:
40:8b:22:38:29:96:0b:e9:3c:6d:5d:51:d4:80:e4:
79:6f:b0:25:ca:d3:ea:57:88:61:bd:1b:fa:84:82:
49:c8:1b:7f:80:fa:12:f2:c4:8c:32:8f:49:59:e4:
22:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E0:FC:29:BD:83:A9:01:39:1C:2A:16:EE:27:89:C6:8F:56:09:BA
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:81:11:b4:a7:b8:6c:e7:8a:f7:db:14:85:d0:6a:a9:5b:d9:
78:c6:99:a8:de:72:c2:16:5b:15:e6:64:ee:cc:8a:19:94:32:
43:55:a8:c9:8b:c0:10:6c:cc:77:56:9d:89:ba:66:6b:69:b2:
48:c6:09:52:55:47:fb:eb:18:9d:34:d7:6f:7f:78:0a:c4:fa:
71:7d:b5:a0:63:31:23:fe:a3:75:ef:4b:39:07:92:1e:b7:bd:
12:88:15:4f:8c:fd:7d:f7:f3:d6:cb:50:65:35:84:cd:97:8b:
e9:97:65:b7:aa:6c:9f:69:ab:42:73:9b:6c:2d:a6:3b:14:df:
01:76:dd:cc:68:d9:14:cb:d5:0e:76:17:18:40:a6:d1:4f:85:
ad:3b:88:be:aa:30:8f:bd:09:c3:09:f2:90:5e:5a:54:8b:11:
73:cc:5c:3e:29:28:e3:5b:e9:5b:3a:46:ce:ae:0e:1b:90:a0:
5a:e0:d7:3d:dd:d1:ab:14:05:5f:b5:62:cd:b4:04:18:f8:85:
2e:97:e8:a7:f4:b8:ca:27:f0:c3:2e:16:dc:8b:64:3a:4a:37:
33:34:51:0c:3a:f4:23:40:b7:a5:34:0d:5a:55:e0:7d:2e:4d:
95:20:76:a5:e2:3b:ca:02:b0:ab:31:5a:b7:1e:32:3b:18:aa:
32:2f:b0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:12:56 2025 by rpki-client