Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
File: 9WYBbYeCMBKLWOJ51mHBleY5lYg.mft (raw, json)
Hash identifier: bCIdWopWYxx9nzjLh67pOcoJ693qgT+Jw2PXR5q32/k=
Subject key identifier: BA:D2:26:50:5C:06:8C:21:65:BE:F1:FA:01:B6:4E:38:32:43:2A:C7
Authority key identifier: F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
Certificate issuer: /CN=f566016d878230128b58e279d661c195e6399588
Certificate serial: 0199C4FC1FDAA653F06306DEE51112884A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
Manifest number: 065F
Signing time: Wed 08 Oct 2025 18:01:21 +0000
Manifest this update: Wed 08 Oct 2025 18:01:21 +0000
Manifest next update: Thu 09 Oct 2025 18:01:21 +0000
Files and hashes: 1: 9WYBbYeCMBKLWOJ51mHBleY5lYg.crl (hash: ZWLGSohQSLIaKf6rxJySL3GvXDIQ08iBmha72vOamwk=)
2: FK1-eXhRSe8ffp_S_lHbaTgBt8o.roa (hash: isewhw2bUh3V4X01VwpIosa0D4eXIb8LPC/N4oNejio=)
3: d9_S0MdBcLLQhVMY4GIXLkmlz3w.roa (hash: JIdW7E8RpIHlAxf+ndeNBtGoppjXWf7rJVf8yChsf7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:fc:1f:da:a6:53:f0:63:06:de:e5:11:12:88:4a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f566016d878230128b58e279d661c195e6399588
Validity
Not Before: Oct 8 18:01:21 2025 GMT
Not After : Oct 9 18:01:21 2025 GMT
Subject: CN=bad226505c068c2165bef1fa01b64e3832432ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d0:4a:28:d8:c7:7f:81:8b:06:2b:96:58:94:
aa:a4:15:e3:24:a5:65:f9:60:93:c8:8e:f8:19:87:
fa:8e:64:fa:94:2c:0c:2d:1e:82:e1:f9:05:b7:7f:
30:5c:17:36:a0:5f:7c:82:77:7d:3d:3e:89:ef:b7:
d9:70:8d:3f:f5:cb:d4:24:52:79:9a:a3:1a:ba:be:
04:62:8b:6b:22:0b:55:aa:29:97:4c:a5:01:86:40:
5c:e3:70:f0:c1:c8:5a:80:cc:7a:ab:29:88:9b:26:
6a:ba:f2:40:89:94:ec:9f:5c:49:6e:b9:c4:16:7f:
e2:33:c3:35:e8:c1:73:fb:bb:4e:f1:b5:c8:f7:d0:
7f:94:d9:32:ae:66:fe:e1:c1:45:dd:f3:8b:69:64:
ca:24:37:87:10:d3:ab:e4:61:00:61:92:09:cc:bc:
24:30:7f:d3:0d:70:e1:13:cf:41:47:39:af:3a:54:
c8:db:93:86:b2:8b:d6:ee:9a:6d:ac:de:df:25:c0:
d4:3f:13:3b:1e:9d:b2:52:27:c8:69:20:ec:b9:62:
c5:29:82:1f:7f:b3:7a:96:89:60:5c:e7:61:71:fe:
8f:4d:40:59:3e:44:81:28:4b:69:2c:8c:3d:a8:e2:
17:92:e7:73:f9:ac:01:a9:36:0c:48:fb:1e:f7:67:
1c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D2:26:50:5C:06:8C:21:65:BE:F1:FA:01:B6:4E:38:32:43:2A:C7
X509v3 Authority Key Identifier:
keyid:F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:27:6d:ae:dc:97:63:a4:ed:30:98:47:bb:e1:6c:e6:f9:9f:
fd:63:c6:f3:8f:35:f3:7b:11:87:9f:1f:87:44:8d:a1:d5:0e:
13:18:c2:78:31:2f:98:8f:e8:7c:f3:01:32:ce:0c:5c:c2:b1:
32:69:de:ca:42:29:81:bf:6f:aa:ea:ec:db:99:a8:5b:66:b6:
e5:0b:a6:d9:f7:98:c3:d1:47:a9:95:63:ba:80:1c:9e:a4:60:
d0:6a:ed:d7:dd:93:4e:b6:21:66:01:d2:b0:45:09:c1:0b:90:
e8:5d:13:3b:f7:cd:c6:02:20:85:76:15:75:a0:78:35:8e:4d:
72:b1:fe:3a:a5:a4:d0:cf:38:a8:1f:9b:a8:90:c1:50:d1:03:
8f:a7:8f:5e:83:b0:98:33:c7:12:e6:27:1f:2a:55:db:07:2f:
35:99:47:28:c0:9e:90:9b:e7:f3:54:74:dc:94:2a:27:ae:35:
d8:61:a0:f3:68:b1:fb:e0:3d:8d:3d:39:25:bf:a1:90:54:d8:
34:ee:9f:63:ba:5a:42:89:b5:e9:10:7e:23:62:c6:94:22:8f:
ea:26:b8:6b:f0:90:d7:af:15:62:18:fd:6a:ef:5e:8b:b3:bb:
6e:ba:2b:59:ad:2c:17:39:c7:c6:b2:62:9d:cd:dd:b4:ae:b4:
a9:21:c7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:16:15 2025 by rpki-client