Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
File: 9fgHODUdz8da-ZaZOikpw3E0ogg.mft (raw, json)
Hash identifier: XT9tRj0X7886RrwvzOTkvkcfZoQjUySPp4E1djjnhXE=
Subject key identifier: CE:E9:B1:19:C5:F2:6E:F3:65:20:F4:FC:A8:AE:49:3B:47:51:7F:D2
Authority key identifier: F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
Certificate issuer: /CN=f5f80738351dcfc75af996993a2929c37134a208
Certificate serial: 019A003560E0CD9B48B2C25EA8416B9FF324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
Manifest number: 10DE
Signing time: Mon 20 Oct 2025 06:01:29 +0000
Manifest this update: Mon 20 Oct 2025 06:01:29 +0000
Manifest next update: Tue 21 Oct 2025 06:01:29 +0000
Files and hashes: 1: 2Qdf3KbNG5NqoZJX8HW2axOKIks.roa (hash: aZGBYQ1YtddzlVOGQVr+1nQgozPaUhvPhqEz391ISKs=)
2: 9fgHODUdz8da-ZaZOikpw3E0ogg.crl (hash: auV+hQt2Wv5miQ1rZIceDmd87rMMKPbDrCBYx0OWZwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:60:e0:cd:9b:48:b2:c2:5e:a8:41:6b:9f:f3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f80738351dcfc75af996993a2929c37134a208
Validity
Not Before: Oct 20 06:01:29 2025 GMT
Not After : Oct 21 06:01:29 2025 GMT
Subject: CN=cee9b119c5f26ef36520f4fca8ae493b47517fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:69:e7:d7:db:01:14:a5:dd:73:51:cc:91:0d:
b0:0f:b1:90:19:4a:0f:8f:6b:14:18:b4:4d:cc:90:
60:df:79:f0:ec:2e:08:c7:e9:79:65:60:ca:c1:f9:
12:62:e2:eb:d1:b7:8d:70:cf:e3:b1:9b:95:5a:a2:
58:e6:49:6c:c2:ed:3d:cf:31:40:78:31:06:4f:08:
02:61:2a:d9:5f:83:28:a8:32:d5:82:e1:b2:b3:79:
71:17:92:78:7b:dd:d5:2f:29:0a:d2:41:ea:76:21:
71:b5:a3:bb:b6:f8:10:ca:ff:83:41:5a:6b:29:08:
8e:56:f3:58:2d:ee:eb:a6:12:35:7f:85:b1:41:f6:
76:f4:3b:20:0c:32:87:e1:6f:59:e7:2e:3d:19:f1:
35:19:1a:18:2a:95:2d:24:5b:4c:6f:f4:47:32:39:
46:aa:b4:32:1c:bd:f9:f5:25:58:96:dd:eb:32:89:
f8:64:0b:30:29:0c:46:1f:76:ff:29:f5:c8:69:17:
66:1b:fe:1f:94:07:19:42:b5:b3:06:5f:5a:67:02:
3c:82:45:bd:c7:5b:46:a6:51:49:31:eb:50:db:2a:
b8:14:51:13:eb:2b:c7:be:de:cb:e7:24:d0:1f:c1:
72:a2:59:b4:03:b4:6a:a2:f8:0a:7f:0a:0c:5b:59:
fc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E9:B1:19:C5:F2:6E:F3:65:20:F4:FC:A8:AE:49:3B:47:51:7F:D2
X509v3 Authority Key Identifier:
keyid:F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:65:1c:f0:0e:e3:00:59:76:dd:61:82:28:c6:4e:8e:8b:00:
3a:96:1b:32:de:35:a3:19:60:95:8d:ea:f6:19:d6:a0:e6:d5:
db:76:98:da:25:97:36:29:a9:d0:72:ed:9a:5c:64:a8:fa:86:
f2:49:4b:67:39:20:b6:ef:45:24:63:a4:6b:38:ce:61:73:0b:
bf:04:a9:b9:46:59:62:ab:46:e7:41:03:35:4e:b6:6e:a6:b7:
ab:5a:aa:91:ea:6f:2c:9e:a9:23:ee:d1:5d:c4:0a:6c:09:48:
93:6c:f6:2c:cb:44:2a:c6:bb:ca:bd:20:9f:d8:72:90:1e:8c:
2b:f7:b4:5b:6f:03:37:81:e1:18:d9:fe:2d:52:c5:e2:26:a6:
c9:bb:7d:07:14:9f:73:3a:71:c9:b9:ce:01:9d:26:1c:16:f3:
c7:15:7f:c2:b6:9a:ae:e9:30:a1:c4:1e:4a:47:1a:0c:b9:7f:
e7:5d:3b:71:1f:96:b9:0e:86:3c:d6:e7:5e:c1:ed:70:8a:24:
7d:db:15:c9:58:94:f6:cb:14:ad:d6:f9:1b:58:29:f6:68:6b:
5b:30:fb:cc:b5:48:1d:ab:f4:06:c3:38:a8:25:09:2b:a5:b2:
a5:c2:bf:d6:3f:38:79:7a:58:f0:93:f8:13:d1:0f:75:ac:98:
cf:2c:a1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:53:20 2025 by rpki-client