Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
File: 9EufgJPdiJ5HfO-np1VjkqZrOHA.mft (raw, json)
Hash identifier: 8oAsXyo/lbx+0gqIFsZ/Hm8ZWi3Q9ENeGQr4aeSo58E=
Subject key identifier: 94:24:36:6F:DD:46:BB:92:66:13:4B:5F:14:2F:8A:EF:21:08:FC:CF
Authority key identifier: F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
Certificate issuer: /CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Certificate serial: 0199FFC895953C6F5335D07A60BEF6002DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
Manifest number: 0C03
Signing time: Mon 20 Oct 2025 04:02:39 +0000
Manifest this update: Mon 20 Oct 2025 04:02:39 +0000
Manifest next update: Tue 21 Oct 2025 04:02:39 +0000
Files and hashes: 1: 2iT_kM3PkUEf8NeJ29enDVY5XmM.roa (hash: Dzh4bklpE4pirUMSN3Hq/Ic2ypp5OVgKHU7vTB3ErEs=)
2: 9EufgJPdiJ5HfO-np1VjkqZrOHA.crl (hash: f891ZgZPmX05H2XTryEVAHqxb9Dd9V+oxSab7dEElig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:95:95:3c:6f:53:35:d0:7a:60:be:f6:00:2d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Validity
Not Before: Oct 20 04:02:39 2025 GMT
Not After : Oct 21 04:02:39 2025 GMT
Subject: CN=9424366fdd46bb9266134b5f142f8aef2108fccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bc:05:09:a9:83:ea:8b:87:9e:d0:23:88:17:
36:a8:6a:6b:7d:19:18:90:42:50:14:b6:da:1f:af:
9c:a3:4d:59:86:92:db:34:e0:c0:cb:0c:f3:97:72:
6b:88:b0:32:ae:3a:1e:c0:ad:b5:ac:5d:d6:54:da:
53:a6:b1:ae:cf:ba:55:18:62:6e:e8:c2:1c:5b:d7:
a9:41:17:96:5b:0b:85:21:5f:e5:ba:57:e6:0e:1a:
3e:57:14:bf:af:ed:a8:f8:6c:0c:1f:51:f1:ed:87:
12:34:a8:d5:7b:f8:03:36:93:70:2a:96:17:21:ce:
af:0e:f6:9b:df:cb:16:2b:72:4c:43:c1:a0:e7:5e:
ab:e8:cd:19:36:01:21:37:3c:c0:43:7f:11:99:46:
69:f1:ae:eb:82:fa:52:e4:08:31:21:cb:97:cc:ed:
a7:d0:31:a7:f2:d1:f1:8b:b2:00:63:20:2c:10:12:
11:32:88:81:3f:55:d0:5a:69:3f:7a:e6:e1:fa:5c:
e0:20:68:4a:38:cd:30:25:67:a3:ae:2c:0c:3e:5b:
e1:a6:aa:b2:05:99:91:ad:8a:79:e8:81:d5:fb:99:
f5:7f:b0:c3:49:5b:0c:c4:1e:14:2b:04:f9:23:0a:
d9:d7:1c:80:54:e1:96:9e:7c:78:1f:26:8c:57:c2:
13:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:24:36:6F:DD:46:BB:92:66:13:4B:5F:14:2F:8A:EF:21:08:FC:CF
X509v3 Authority Key Identifier:
keyid:F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:4b:f6:74:cc:a6:10:29:ea:87:bb:d8:7a:54:31:05:a7:cf:
b2:35:30:ec:1b:cb:e1:20:93:66:0d:0f:db:0a:c6:9c:f3:7e:
85:de:32:07:99:0d:5c:08:8f:41:f8:04:78:a8:e7:0e:ea:3f:
a3:db:8f:7c:da:9a:68:b3:f0:1d:ec:fa:c6:6d:68:5c:9f:ee:
af:05:ce:0d:60:4e:95:a9:3d:ce:70:0e:4b:d6:53:f5:6b:dc:
94:a5:72:56:c1:36:2c:52:64:ea:cc:f2:ac:cd:0a:31:9c:36:
6f:a3:5e:41:ba:80:e3:d7:c9:0d:be:de:85:f9:4f:c2:7b:24:
d9:0a:54:c3:76:b2:8f:b1:da:06:96:50:02:5b:8f:2c:27:ca:
d0:81:61:b0:23:16:56:80:e2:2e:fc:f8:1e:d9:80:6f:f7:2d:
eb:d1:68:92:52:31:1e:4f:ee:5d:a5:66:dd:bc:18:e0:e7:79:
28:12:25:d6:2c:0b:5c:99:17:e2:04:1e:66:c5:a4:e8:48:7d:
bb:0c:d0:43:84:a4:85:5c:83:ab:e6:d3:b5:45:67:6f:24:df:
9b:68:7d:38:9a:a6:1e:fc:6c:32:ad:e7:99:60:aa:38:dd:3a:
ef:08:23:61:ec:fc:5d:1d:85:46:b4:30:31:82:c3:7c:d6:04:
e6:26:d9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:47:20 2025 by rpki-client