Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: P1Cds1AqV4P2+3HXkxshP7vJAOoH0aPiBVxCb70yBeQ=
Subject key identifier: 90:76:FB:39:03:2B:09:68:BE:FC:1D:16:AA:DC:E3:E4:9A:28:4A:BC
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 0199FE7E28172433399524E0637099877952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 0F11
Signing time: Sun 19 Oct 2025 22:01:44 +0000
Manifest this update: Sun 19 Oct 2025 22:01:44 +0000
Manifest next update: Mon 20 Oct 2025 22:01:44 +0000
Files and hashes: 1: Fhu6eteSMh-I7iJVqiXmMyG026Q.roa (hash: F9PD+ubtwzitBN7aKci6vGXmXOFiGygMSM+2xXKhmeU=)
2: O79Bxg0BR0VFMQ_a0ZyezMPMz0M.roa (hash: wV2tjiSpv38ZVgcsHYOWBKswr9oGmugpMMubTRaOGF4=)
3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: KKjl2MOwhx5xv2DekHTW0NRbn2FejYrkTQ9YFoPI5qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:28:17:24:33:39:95:24:e0:63:70:99:87:79:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Oct 19 22:01:44 2025 GMT
Not After : Oct 20 22:01:44 2025 GMT
Subject: CN=9076fb39032b0968befc1d16aadce3e49a284abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9f:67:84:08:2a:3e:f7:be:91:ca:52:07:cf:
88:d4:e8:bf:4d:06:db:d4:bb:2f:dc:61:06:82:c9:
ac:a9:ec:27:4e:6b:55:c8:2a:a6:d7:dd:42:9f:42:
e7:6c:f9:cd:7a:5b:0e:2d:e7:53:66:ac:bb:e6:e5:
3d:0a:75:e3:1c:5d:00:e9:3c:6d:27:f6:8a:81:4e:
a7:48:f0:b5:68:06:bf:2b:cc:d3:40:51:4b:f4:72:
92:b1:43:61:82:67:55:02:17:da:6f:05:9e:55:9b:
38:69:f0:52:fc:c0:12:74:03:1b:5c:79:98:4b:c1:
f6:14:91:f4:b7:1b:46:2c:84:68:53:ce:98:50:24:
0e:b3:77:4e:35:2f:96:a1:8e:f2:75:10:5b:73:44:
37:72:fa:ad:19:2a:e1:ce:d8:3d:07:00:90:79:9a:
ed:40:0a:b6:2d:87:df:18:3b:f2:17:9a:20:3a:d4:
62:aa:c9:8c:81:eb:bc:cc:20:6b:25:e5:2e:35:a5:
c5:ad:96:94:a3:96:32:87:ed:39:6a:b0:bc:6c:ef:
76:81:9e:d9:3d:ed:89:4c:ae:75:4d:47:6c:c8:e9:
e7:45:8d:51:0b:e4:9e:b5:87:08:87:d5:7e:af:17:
f6:36:81:b1:65:b9:82:22:d8:bd:24:e9:a5:b6:57:
a0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:76:FB:39:03:2B:09:68:BE:FC:1D:16:AA:DC:E3:E4:9A:28:4A:BC
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:66:30:05:6f:e3:79:2b:85:26:ba:50:e6:3e:25:a1:3b:42:
63:00:a5:e3:4d:6a:de:05:3e:a8:ed:17:1b:da:6a:d2:46:67:
26:12:e1:0c:c3:14:f5:fc:e2:aa:13:76:2f:cf:f4:91:ff:f6:
c1:0f:8e:17:6a:f9:95:52:2f:36:38:67:b7:6f:8f:a8:4e:fa:
37:28:85:03:8f:99:a9:c1:9d:95:06:e9:7b:c2:f4:1a:45:fe:
0b:3f:6b:6e:73:23:84:67:1a:7d:af:12:5e:a7:1a:04:96:5e:
30:43:df:dc:6d:a0:9c:74:e5:d0:92:54:ae:16:c0:ed:23:05:
96:fd:b2:f2:9d:6a:80:2b:ed:76:b1:7b:01:73:94:3b:98:98:
07:02:7a:cd:d6:43:25:db:84:90:64:6d:47:ff:6c:d9:06:b9:
5e:2d:ae:4f:24:36:77:47:91:07:61:c5:df:38:03:89:e4:93:
a0:17:09:c6:9a:0c:03:f5:2a:83:70:e6:22:16:c5:ef:27:31:
5e:5e:84:e3:39:a1:fd:a3:11:43:dd:13:3f:31:9c:67:f7:00:
c3:a0:60:c0:b8:39:8d:cd:9e:97:63:57:df:8f:54:27:34:88:
ea:5c:0f:77:cb:61:a9:85:89:e9:ca:cf:dc:fb:c0:8e:d6:58:
bc:7d:98:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:25:48 2025 by rpki-client