Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
File: 9rrOePyQJ42C8ehmiooZ7pmCzcM.mft (raw, json)
Hash identifier: ph63iTcYVom3T8Z1iMzz5UBbf2ouM8wE7gelyG/zZOs=
Subject key identifier: CA:C2:02:CA:DE:6B:F4:DA:DF:7B:82:EB:7E:B1:AF:1D:33:20:34:D9
Authority key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
Certificate issuer: /CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Certificate serial: 0199FEEB9B878636F12298DFC32BA605AF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
Manifest number: 0907
Signing time: Mon 20 Oct 2025 00:01:17 +0000
Manifest this update: Mon 20 Oct 2025 00:01:17 +0000
Manifest next update: Tue 21 Oct 2025 00:01:17 +0000
Files and hashes: 1: 9rrOePyQJ42C8ehmiooZ7pmCzcM.crl (hash: dSOdB1TOPeYzL+n28G0aBFGyeELxR9MBPhUv//ZhaH0=)
2: Re-MnmstUpcAurL3wCFgIhLu13s.roa (hash: vb/Pgmd/HetEo03wgkmW9gqUHrd1AuiVR8CC1XhD05w=)
3: Sev5X02oiIv7Gv_3mq5yAVy5Txs.roa (hash: 0c/Q4ud2dbzbznUS25t1/df9lnnZpZNmLVMc8gJSoDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:9b:87:86:36:f1:22:98:df:c3:2b:a6:05:af:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Validity
Not Before: Oct 20 00:01:17 2025 GMT
Not After : Oct 21 00:01:17 2025 GMT
Subject: CN=cac202cade6bf4dadf7b82eb7eb1af1d332034d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:ee:2e:69:4b:a6:24:74:3e:68:dc:ea:c2:
66:13:f1:8e:a4:fa:24:bc:b2:62:74:79:fa:37:b3:
59:30:91:40:bc:9d:b9:c5:43:2b:ce:82:bf:1a:03:
ae:40:2b:55:af:27:e7:21:e0:e1:e2:20:f3:ce:bd:
5b:b0:ac:75:c7:67:fe:89:7e:7c:7f:14:a6:b5:99:
96:8c:da:8b:6e:21:94:82:c2:ab:3e:9c:3d:56:4a:
bf:fd:fc:4f:0b:4a:7f:8c:dc:3d:f3:93:75:5e:ec:
cd:47:9e:a5:73:57:a0:12:32:04:b2:24:86:b6:62:
b2:3b:40:23:63:a3:55:bf:5d:ac:4d:f9:09:ab:ad:
c0:d6:4b:46:67:dc:da:99:12:b1:20:80:75:86:f1:
ce:a4:19:2a:f5:e9:94:51:52:14:e7:68:cd:16:9a:
d8:a3:77:54:6d:fa:55:bb:d1:bb:3b:fd:f7:a3:15:
41:a1:1f:bc:15:16:31:fd:43:d0:ca:0e:5b:96:22:
82:60:80:53:30:09:9c:a8:bd:88:98:66:81:50:a3:
fe:20:53:90:fd:42:2e:00:3c:49:83:80:fb:03:2f:
34:b2:92:d7:97:2b:71:6b:de:1a:ff:93:f7:ed:8f:
73:12:d6:43:95:61:14:d4:92:94:59:8b:9d:1d:e9:
e7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C2:02:CA:DE:6B:F4:DA:DF:7B:82:EB:7E:B1:AF:1D:33:20:34:D9
X509v3 Authority Key Identifier:
keyid:F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e4:7b:e0:e9:8c:80:86:27:17:cd:52:d6:28:09:54:99:aa:
d3:d6:00:7c:0e:70:b3:fe:3a:08:1e:e8:9d:85:c8:a7:66:97:
a5:bb:82:86:ca:72:a6:7d:33:65:6b:31:2f:fc:5a:ad:2c:75:
25:5f:01:fd:07:52:91:fa:aa:59:b9:23:7d:7c:6c:64:fd:a8:
d4:17:ee:4e:d9:1d:86:07:7f:4a:a0:35:82:a2:bd:fa:52:c6:
ef:94:ce:18:72:26:bb:95:59:bf:eb:5b:61:8c:df:cf:53:a3:
16:18:65:f7:08:fa:45:18:db:fd:b4:6b:86:69:52:26:94:d5:
f9:ae:e2:06:ae:c4:3b:39:48:4f:2c:5a:0c:17:ab:e7:7f:0b:
a9:76:10:90:7a:36:0f:39:6f:1a:e1:32:46:b1:48:80:51:6c:
40:85:f6:72:c2:07:56:81:e6:20:96:8e:d9:e4:42:31:25:df:
ee:18:05:c8:3e:53:7c:4a:ac:3e:14:7e:71:50:41:8c:50:c9:
d5:88:9b:af:0f:5c:2a:a2:ae:43:5b:92:08:b4:23:80:1d:18:
d0:34:b5:c0:ae:36:ad:3a:c0:fc:6f:c4:7f:dd:70:84:0d:e6:
f6:72:ef:03:b6:be:96:20:90:d0:6f:dd:49:fb:4e:90:00:e0:
05:c1:63:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:13:11 2025 by rpki-client