Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
File: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft (raw, json)
Hash identifier: sjFEBZ9qShyDggQynli63JgFc6+YJjKQNN0pILGc4MQ=
Subject key identifier: 6E:95:4E:D2:57:0D:30:DB:D4:67:CC:42:72:2B:85:7D:D8:EA:CB:05
Authority key identifier: F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
Certificate issuer: /CN=f57331288d908dd762e4b56f003b448f01881d24
Certificate serial: 0199FFC8D3C4C9E11CEC205E5DD685EC2758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
Manifest number: 0B1C
Signing time: Mon 20 Oct 2025 04:02:55 +0000
Manifest this update: Mon 20 Oct 2025 04:02:55 +0000
Manifest next update: Tue 21 Oct 2025 04:02:55 +0000
Files and hashes: 1: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl (hash: mbwPToI4WS5EgaYfs4JVSFSj1X25WpluNAOET4siRdc=)
2: g7lGHV-1_6YLUG-EIHcKuVMeEvA.roa (hash: vuw6Cb62Uo/aOsqmXFznBzd1y3zPSLM1hJbb48SnJE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:d3:c4:c9:e1:1c:ec:20:5e:5d:d6:85:ec:27:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57331288d908dd762e4b56f003b448f01881d24
Validity
Not Before: Oct 20 04:02:55 2025 GMT
Not After : Oct 21 04:02:55 2025 GMT
Subject: CN=6e954ed2570d30dbd467cc42722b857dd8eacb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a0:98:f8:2a:ab:b0:06:54:e9:f2:82:05:43:
45:b2:24:90:1f:55:af:f2:b7:f0:5c:7e:cc:5e:71:
26:2b:6b:7e:83:f4:8e:cd:06:b7:14:f5:b1:33:c3:
4f:ee:12:64:e0:8c:a6:11:36:76:8c:ae:80:25:ca:
f0:1c:2a:33:62:6b:4b:63:3e:33:36:66:e3:75:93:
39:59:b9:bd:ec:ba:1f:6e:b0:60:91:fb:db:5b:97:
a3:a1:19:a2:e9:e1:5d:47:fb:74:d5:a9:77:bb:4f:
44:fd:82:ef:cc:f9:5c:d7:1f:e5:0c:5b:d0:5e:88:
6d:c5:77:66:d4:9f:13:87:29:41:2c:89:ba:20:8c:
85:91:04:ff:9d:db:8c:eb:e4:27:72:29:2d:f7:57:
55:b1:e6:32:59:49:2d:ab:0c:32:ff:c1:da:97:9a:
ad:6b:4c:c9:e8:79:3d:45:42:df:fa:10:d7:d6:21:
17:b8:60:37:44:cf:b1:ed:f3:20:30:e8:17:b2:c8:
c5:3e:1f:f5:66:47:17:bf:d2:73:aa:63:e8:0e:bd:
3c:4c:00:24:1b:c6:bb:ba:71:14:ef:85:dc:bb:11:
fc:e7:3b:4b:bf:e6:d6:e0:16:64:2c:6b:41:fb:8d:
20:dc:f3:82:df:a3:d8:f8:1b:25:70:ed:6e:f8:fe:
c4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:95:4E:D2:57:0D:30:DB:D4:67:CC:42:72:2B:85:7D:D8:EA:CB:05
X509v3 Authority Key Identifier:
keyid:F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:52:e2:c0:38:36:47:d2:d3:4b:b6:8e:3a:35:8d:52:51:68:
2c:35:ec:3d:fd:40:d7:b8:ee:3c:56:80:08:63:d9:d6:72:f9:
1c:75:41:0d:52:18:3d:b5:3b:3c:5f:c3:e1:f8:d0:74:ae:9b:
c7:26:48:18:7f:e8:13:9c:81:74:12:4c:96:c4:d8:c5:0c:bc:
ef:87:8f:1c:4f:9a:fe:cf:fb:83:3e:55:60:29:46:b4:6f:bb:
e5:56:49:bf:2c:4b:37:09:b6:81:4a:79:77:a7:0f:42:a8:0f:
23:7d:8e:d2:f1:d4:9b:41:ba:40:5c:91:f8:dd:b7:d2:d2:d5:
f5:ae:99:ab:aa:f4:52:96:6e:60:f5:38:d9:47:b5:3e:9e:67:
49:df:66:81:00:bf:06:3a:77:f0:35:e5:4d:67:36:82:41:ca:
6b:d5:14:ba:03:3b:bf:c1:24:80:ae:99:3a:fb:5a:88:6d:60:
39:dd:10:b8:b7:7f:54:79:18:94:41:a2:dd:dc:f2:b8:fe:f4:
f5:4b:31:15:fe:67:a6:5c:44:94:d6:72:60:8e:46:24:19:81:
0f:57:2a:fe:71:3d:81:42:95:29:ca:70:29:ec:4c:b1:54:f0:
bf:b3:27:f8:3d:8c:21:f8:8f:1e:6b:8e:c4:32:78:68:ae:fe:
3f:c5:74:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:25:15 2025 by rpki-client