Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File: mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier: fUWKnqXpGs7kHAarJAGI22ArH0lfwTeP5yObf0KhdEc=
Subject key identifier: DE:34:66:33:EB:6B:F6:0E:0F:51:27:3A:71:10:6C:60:AC:B0:F8:6B
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 019A7226718931A86A1DFE7FB8D55BFFF9CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number: 16B1
Signing time: Tue 11 Nov 2025 09:01:53 +0000
Manifest this update: Tue 11 Nov 2025 09:01:53 +0000
Manifest next update: Wed 12 Nov 2025 09:01:53 +0000
Files and hashes: 1: eehHZCCtBF4ofvtvmkP_R--u6i0.roa (hash: Qv+/+I4mInj8ZQpbVci07W/0Cj+7zt+KBmz4hdMjJLU=)
2: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: /veRW5UwisAR+9ZWBsSGGjsMiJSEpf3EzjQQVPrq09E=)
3: wV8X6d9n1udO8_7qelBMs7zayK8.roa (hash: XNyzV/UvtP9ucrS5ao0e9xxzI7L3zFMzQVzB5P+BXHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:71:89:31:a8:6a:1d:fe:7f:b8:d5:5b:ff:f9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Nov 11 09:01:53 2025 GMT
Not After : Nov 12 09:01:53 2025 GMT
Subject: CN=de346633eb6bf60e0f51273a71106c60acb0f86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6f:0d:2a:00:c1:d9:6f:76:c0:9c:54:11:7e:
a5:8f:68:da:fb:94:86:9a:da:e2:03:8c:26:71:1a:
40:50:f5:18:3b:a7:b5:c5:0f:49:4d:f2:81:46:2d:
43:df:35:a7:80:d0:c2:33:b2:8f:3e:c8:4d:4a:0f:
33:11:c1:c9:49:06:91:a9:bf:ff:94:0f:06:95:8c:
09:30:9e:ea:e8:c1:c6:c7:9f:e0:3a:b4:4b:d7:2a:
3c:38:df:3c:63:74:21:56:e3:06:f1:99:05:de:19:
06:4b:25:db:f6:aa:ec:04:36:c4:5c:90:38:21:67:
00:00:37:aa:80:80:e4:95:26:f6:e1:02:8e:03:71:
fd:b3:d1:f4:7b:07:50:ed:37:08:61:33:70:cc:07:
43:b0:8d:e2:63:28:e1:b7:1a:43:bb:e7:ac:a2:47:
35:ff:52:c8:0c:d4:0a:2c:0d:cb:6b:ab:15:8d:a2:
a6:fd:52:33:bb:ba:b6:ca:af:8e:81:c2:16:37:18:
7c:c3:b3:af:a1:af:95:95:24:a7:97:15:b9:96:75:
2f:e3:e9:7b:a7:26:97:eb:be:29:b7:a6:c0:0d:3b:
ef:06:09:34:eb:e5:32:5a:17:af:34:7c:1f:2a:79:
98:fa:a1:a6:be:76:d2:f6:0a:39:80:f9:b1:f4:ab:
fc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:34:66:33:EB:6B:F6:0E:0F:51:27:3A:71:10:6C:60:AC:B0:F8:6B
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:9d:ee:13:93:54:6b:00:0f:6b:8c:bf:2f:08:9d:fc:81:65:
6c:c6:4c:a2:ca:cd:77:96:73:dd:74:b3:b4:40:39:5a:8a:da:
91:7d:c1:9a:d6:2c:c0:e1:f0:80:1f:4a:24:96:82:3e:1f:1a:
ed:a0:6c:ee:e8:e1:ab:e9:d0:17:24:87:5f:a0:23:01:3b:ba:
a2:9e:a9:d2:cc:02:50:9f:e9:db:13:da:d3:a1:37:f5:2a:85:
53:15:f7:6d:c2:e6:e1:64:d1:07:33:ef:0e:13:9e:2e:6d:cf:
54:aa:c5:3c:de:df:1c:10:5f:6a:68:84:4c:1f:d0:ed:0e:f6:
85:55:ba:47:98:d9:1c:7a:e8:bc:05:f0:8f:59:c2:90:97:14:
26:79:72:bf:c1:99:19:e1:90:a9:25:7d:11:c7:e6:e5:84:c4:
64:c4:22:a8:75:8f:75:2f:1f:4d:4a:11:d4:35:93:a8:39:12:
1b:35:03:39:fc:48:73:60:64:72:85:da:1d:34:0b:57:9b:6a:
16:80:05:cb:51:e6:8c:68:72:5d:b3:7a:68:59:25:85:87:fb:
6d:1c:00:42:ef:87:e2:41:68:39:da:3d:06:d1:de:93:88:85:
88:ba:e1:09:42:17:eb:6f:97:64:40:4f:50:82:25:01:50:00:
2c:bd:6b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:59 2025 by rpki-client