Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
File: ex9VfuJjyzWaGeos1_oOjJE563Y.mft (raw, json)
Hash identifier: LqAR40ZvccsM8BJ1L3yHr3FCf+kY9b9F/mBxXLetIYU=
Subject key identifier: 6A:0F:FC:99:E0:DB:14:54:31:A6:DE:5D:E2:D4:54:F7:B3:00:DA:A8
Authority key identifier: 7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
Certificate issuer: /CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Certificate serial: 019A71EE62D35C15DCC4283B11F69B01C71E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 08:00:39 +0000
Manifest this update: Tue 11 Nov 2025 08:00:39 +0000
Manifest next update: Wed 12 Nov 2025 08:00:39 +0000
Files and hashes: 1: 6Sxszx8NiFM_JbWUMjBDeEvUps8.roa (hash: 8MVKcBrtv6jJ845AEcn3hP00h2PQrFrI39BtX0LnXv4=)
2: Ha78yg7qqGZ0v8W1DWmHUAWoLSA.roa (hash: mO1w4kIt1AKbmRPhw4OwRAWPyk0O9BdOZhhOqd4nLR0=)
3: ex9VfuJjyzWaGeos1_oOjJE563Y.crl (hash: f5Vu2M8aIi88skaZVvzoWZgLNXU0kmHAEysvI8MNKng=)
4: xVoWPteOkysGzMqfxgi3XvQDa0c.roa (hash: y5AR4qkIxHvuU7VtfK3TX7mIOGmTaWSa06ypi+bML3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:62:d3:5c:15:dc:c4:28:3b:11:f6:9b:01:c7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Validity
Not Before: Nov 11 08:00:39 2025 GMT
Not After : Nov 12 08:00:39 2025 GMT
Subject: CN=6a0ffc99e0db145431a6de5de2d454f7b300daa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:24:da:9a:8f:48:5e:5e:f3:9f:fb:6e:d9:
3e:36:c4:10:21:9a:17:53:5e:1c:12:94:b6:28:77:
6c:5f:c3:6e:4f:80:10:b8:e1:6d:ad:fc:fd:2b:9c:
15:56:d6:a8:b2:32:b1:a0:96:8c:e6:aa:2c:89:63:
f0:8b:9c:71:47:da:9c:42:c0:76:77:d6:13:88:68:
75:7b:8f:95:f0:a5:12:1d:a2:d6:7a:f9:92:8c:4f:
09:06:db:fd:d7:3c:73:03:4f:ed:ce:9d:0c:2a:e7:
d2:8f:7a:b8:bb:37:ab:38:ef:5a:be:44:f6:e0:1f:
a4:56:5d:da:e3:ab:ed:d6:98:df:7b:36:b4:a6:5d:
1a:34:c1:ba:52:86:45:7b:29:a9:bb:ca:23:e1:8b:
6c:9e:de:5d:c0:df:b3:5a:d2:fe:8a:8f:54:7c:86:
2b:01:4d:7d:b2:2a:58:5a:95:bb:8e:fc:fd:4e:e3:
9f:25:c0:79:cd:1b:74:6a:67:d1:c4:85:ee:ca:9b:
65:d7:bc:ad:a8:42:d6:db:18:98:cf:16:e3:26:ea:
ec:75:a0:f5:d1:45:11:db:28:4c:ad:bf:f2:b8:61:
18:65:e5:79:54:ea:39:88:ef:1a:d7:ca:ab:a8:0f:
06:29:c3:2e:b3:b1:79:1f:f7:05:64:14:04:1e:77:
f5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0F:FC:99:E0:DB:14:54:31:A6:DE:5D:E2:D4:54:F7:B3:00:DA:A8
X509v3 Authority Key Identifier:
keyid:7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:77:b7:50:73:af:aa:32:29:5a:a8:5e:ae:8a:59:5c:8c:1d:
8f:5c:f7:80:9f:30:07:31:d3:02:35:44:ce:c7:45:2a:8c:0b:
d3:08:c1:06:42:13:0b:51:38:e7:44:aa:d6:45:d1:b1:50:8c:
a1:44:8c:e9:82:97:67:4e:19:ca:ce:d2:87:11:61:c2:48:d1:
a2:e1:2a:83:12:9c:f4:39:ef:74:af:c2:95:33:9b:31:36:49:
4a:96:dd:4d:73:02:94:74:e4:7a:45:f0:19:e1:3c:eb:15:c8:
60:6d:0c:cc:97:eb:68:07:70:74:ed:4d:dc:83:03:2c:11:1d:
3d:f2:49:20:e1:9f:7e:92:fc:df:6c:03:6d:7f:5e:4e:5d:08:
0c:a5:8f:46:20:5a:1d:14:fa:e0:cc:bd:b2:04:83:5b:92:ee:
12:87:11:fe:42:f6:f6:ea:3e:84:36:f3:d9:fa:70:c1:35:ca:
b1:07:b6:15:9d:04:de:62:74:c8:62:6d:fa:ca:fa:d3:99:8c:
03:13:02:e4:92:16:3b:6a:82:59:91:a7:38:f5:32:17:a6:52:
be:c9:ab:73:15:26:69:71:77:04:b2:9d:d6:03:81:2a:53:7d:
6a:2e:df:f4:05:34:9d:ae:a9:68:86:28:f6:cc:f7:e2:90:1e:
f2:34:13:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:16 2025 by rpki-client