Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
File: 9q7W1c5BV5fBKF9-9v0EPGRm594.mft (raw, json)
Hash identifier: 5JDhSPz91NaFoEWuwHyUYAiyurb1gNSaWerxUaKlmnw=
Subject key identifier: E0:9B:63:90:C2:A5:A0:52:28:03:0B:6D:86:73:85:6F:F4:6B:4A:C6
Authority key identifier: F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
Certificate issuer: /CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Certificate serial: 019A71B950C94392AFABBFA77DA6264A2FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
Manifest number: 0C13
Signing time: Tue 11 Nov 2025 07:02:41 +0000
Manifest this update: Tue 11 Nov 2025 07:02:41 +0000
Manifest next update: Wed 12 Nov 2025 07:02:41 +0000
Files and hashes: 1: 9q7W1c5BV5fBKF9-9v0EPGRm594.crl (hash: 95xhQUBQr7EfVsOgGXtI0ER6gQzF/SqTAp6jOd0xMeg=)
2: ziQt4Au1b87EcX3IQE4F3MWkDm8.roa (hash: KUoOZI3FZormf07wPCHQ5jctubRO3hNmnfHFtLKB4fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:50:c9:43:92:af:ab:bf:a7:7d:a6:26:4a:2f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Validity
Not Before: Nov 11 07:02:41 2025 GMT
Not After : Nov 12 07:02:41 2025 GMT
Subject: CN=e09b6390c2a5a05228030b6d8673856ff46b4ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e8:5c:a4:68:13:60:df:2f:6b:8f:7a:7c:2c:
e1:b1:d9:5d:da:7f:e0:35:e2:32:f8:fb:8a:24:a6:
8d:80:82:f6:52:e1:e4:69:2b:36:22:da:61:0f:9b:
7f:cf:1b:a2:7a:e0:d3:13:29:53:92:4e:83:d5:ea:
82:0d:53:ab:cd:b0:d2:f0:7e:d6:57:e8:9e:e6:13:
68:1d:55:2c:a1:7f:69:ec:2a:1d:b2:bf:c9:bb:f3:
2a:89:b3:e4:bd:98:91:0b:23:50:81:75:87:01:ca:
ec:8e:44:fd:5a:a6:2e:f8:12:12:86:68:e9:3f:db:
d4:a8:d8:43:ba:9b:c7:21:12:85:16:01:c4:92:57:
6c:ee:5d:b4:5e:51:b5:16:42:0c:c5:e9:d9:ea:3d:
4d:53:a8:43:92:90:10:8c:73:36:0a:5d:a5:be:49:
94:ad:56:5b:ce:4a:25:13:1b:80:28:63:c4:f5:05:
c9:7a:fc:35:61:cd:a0:64:66:1c:1a:1e:51:47:0a:
b4:31:c4:71:35:24:4f:95:7a:25:5d:46:f5:1a:7c:
b0:3c:f9:cd:52:11:8b:16:2f:91:75:5f:37:be:5f:
66:13:f8:71:e3:c0:c7:cd:51:f9:35:77:9f:a2:f3:
61:7c:6d:b0:cd:cd:be:54:fd:71:ef:c6:fd:d6:cf:
0e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9B:63:90:C2:A5:A0:52:28:03:0B:6D:86:73:85:6F:F4:6B:4A:C6
X509v3 Authority Key Identifier:
keyid:F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d1:47:e5:0a:94:dc:9b:58:57:b8:b2:9b:54:82:7f:8c:eb:
25:e8:39:cb:0a:fe:d0:be:73:bd:9b:8d:92:e0:31:4d:4c:8b:
d6:26:26:5e:ee:6a:37:ed:a5:b3:4c:a7:7f:69:0c:65:fe:da:
68:e1:72:79:45:a9:a9:8a:0b:e7:ad:6c:93:b7:37:5b:b0:d8:
c1:73:b4:92:12:c7:13:36:0e:c4:ac:8d:c5:cc:fe:65:09:7b:
e6:ca:a6:73:ce:bf:52:ca:9a:99:cb:98:25:ae:8c:94:07:3b:
1c:f3:f9:2f:f6:d0:40:bf:8b:60:de:5e:23:6e:2b:35:aa:91:
e3:5a:0f:fd:64:b8:dd:c5:d4:a7:3a:17:d7:9d:08:3c:97:b4:
f5:70:49:ff:79:ec:43:ee:52:79:85:d3:22:b1:ef:58:a7:57:
ea:91:6e:64:7e:d7:6b:c0:71:b9:7c:7f:74:6a:3d:af:00:54:
02:e9:59:ed:02:8c:4a:6e:60:ed:02:6e:af:88:ce:f3:94:03:
4b:13:7a:42:3a:60:b7:98:06:47:87:73:36:98:9a:42:a3:32:
98:c5:e9:be:21:7d:b5:9b:66:ed:90:fd:33:f0:09:d8:12:47:
b1:8e:24:1a:3e:64:86:bc:c0:a3:ab:1b:7f:0d:09:eb:bf:c3:
ec:06:91:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:10 2025 by rpki-client