Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
File: 9XwaqtuDIN2EMjVFjPLFy_RwStY.mft (raw, json)
Hash identifier: SucWOEAAScG0Vz1DDhb7gMuHcnbUYihp3cXbjNVqKvI=
Subject key identifier: 4E:A0:13:71:C0:A7:AF:D1:B4:E0:9B:53:79:9B:B0:51:7C:4C:41:CA
Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
Certificate issuer: /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Certificate serial: 019A71132F0ADBE3849203F17A7A30E2213B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
Manifest number: 090B
Signing time: Tue 11 Nov 2025 04:01:13 +0000
Manifest this update: Tue 11 Nov 2025 04:01:13 +0000
Manifest next update: Wed 12 Nov 2025 04:01:13 +0000
Files and hashes: 1: 1-L52zX8g4rPLbUzhJCdVOFPLumk.roa (hash: Ntd+ezNB504dHV12EX+s7XI9UTfcNDrOqmMOMqgQS/Q=)
2: 9XwaqtuDIN2EMjVFjPLFy_RwStY.crl (hash: gvrcpgpPHnTuzGyYrBt+vN75OCMykwb/qH5Wn6Db8AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:2f:0a:db:e3:84:92:03:f1:7a:7a:30:e2:21:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Validity
Not Before: Nov 11 04:01:13 2025 GMT
Not After : Nov 12 04:01:13 2025 GMT
Subject: CN=4ea01371c0a7afd1b4e09b53799bb0517c4c41ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:00:0a:97:06:46:f3:d4:97:30:26:62:48:29:
6a:c1:6f:c1:a9:03:2a:89:8e:11:4a:eb:c6:d9:48:
5e:59:c3:94:66:36:3b:14:43:f7:50:5f:a0:ff:6d:
33:ad:72:75:16:01:40:2a:24:87:56:ea:27:c6:12:
ea:58:d1:c9:ad:88:67:8e:01:10:c2:f2:87:b3:8f:
9c:3c:d3:c1:ea:81:41:29:38:64:72:63:b0:04:1a:
09:22:82:8f:ac:45:b4:fc:fa:f5:b7:ee:f2:a4:de:
f9:c3:40:a0:01:25:fb:6b:c5:67:35:d0:d9:92:77:
a4:ca:fd:06:f3:6a:18:6a:45:35:07:fb:7d:cf:ff:
52:2b:e9:ab:83:55:bd:b2:5e:42:a9:63:64:71:f5:
a1:7e:8e:fd:ee:ab:99:00:be:6a:ec:3d:0f:f6:f5:
22:01:ff:5d:f4:2a:02:14:ff:5c:70:4f:06:51:2d:
82:3d:0d:5a:99:45:7c:a6:36:73:0a:b6:95:ea:3a:
93:6b:f1:f9:85:4b:fc:04:c7:c6:d7:f8:cf:31:ee:
6d:a5:a2:33:d3:4f:26:40:c7:db:ab:64:f0:e6:ba:
20:94:39:e4:aa:25:8a:6d:d1:ef:a4:12:d7:63:81:
98:56:47:64:fa:ac:7f:8f:ad:97:34:f5:97:0a:d4:
fa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A0:13:71:C0:A7:AF:D1:B4:E0:9B:53:79:9B:B0:51:7C:4C:41:CA
X509v3 Authority Key Identifier:
keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:42:f5:74:18:02:7f:20:31:d5:75:10:63:a9:ca:73:3a:99:
6d:c1:7c:7d:74:09:04:f9:d2:54:31:21:3c:a8:4b:e1:7e:df:
35:b9:af:a4:fa:bf:cd:33:37:76:53:0e:39:e5:de:ce:bd:cd:
fb:4e:82:75:29:8d:6b:5d:09:20:36:33:a3:dd:d1:03:81:77:
e5:f2:b3:95:87:a8:34:6a:9d:ea:bf:a8:54:64:10:35:68:a3:
a5:0b:c2:c3:69:43:e3:10:e6:a5:2b:84:8e:d8:f4:d0:6c:76:
cc:c3:b3:a5:2c:e3:aa:99:28:3a:1a:ae:38:b1:35:e6:ae:38:
f9:b9:60:21:9d:4c:d0:b2:de:71:40:ae:f6:d9:60:82:ba:f6:
0a:de:7f:fc:85:6b:fb:a6:ff:f9:ea:68:07:c4:e6:32:c2:69:
f3:65:19:4e:10:98:28:5e:ce:16:48:1e:cc:e2:98:6c:fa:d4:
ea:13:be:94:e6:6b:3c:9e:53:9b:a7:66:27:52:89:a0:fb:f6:
4f:24:6d:a1:af:5d:79:4f:35:d0:14:87:30:bb:bd:2f:aa:78:
bb:b0:04:17:89:3e:75:0f:e1:5b:a5:02:16:9c:b6:d3:e6:c7:
77:b5:57:99:0e:0f:2e:80:53:18:39:d4:d6:d2:8b:f9:33:38:
c0:ad:01:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:21 2025 by rpki-client