Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
File: m9_8i9uESXC44oubS-bywG39eYU.mft (raw, json)
Hash identifier: Ujui8YLlCFmqVP/wtv3UX5Sd3QdfZ4uRR6OTdSrkyPU=
Subject key identifier: 3B:D0:43:07:8B:0D:E5:79:1F:2C:19:AE:4B:25:97:E4:66:21:B5:FD
Authority key identifier: 9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85
Certificate issuer: /CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
Certificate serial: 019A706DF42526F1FD19331ACD5C39049030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
Manifest number: 14F9
Signing time: Tue 11 Nov 2025 01:00:45 +0000
Manifest this update: Tue 11 Nov 2025 01:00:45 +0000
Manifest next update: Wed 12 Nov 2025 01:00:45 +0000
Files and hashes: 1: QAk6JCs2jjSqyiQ-YA0VdOCDCeI.roa (hash: FpR2ZM6Bp7jsZvcIkRbwo6z9Bs9HecznXsZ9i9f2MH4=)
2: m9_8i9uESXC44oubS-bywG39eYU.crl (hash: 8tOr2BcggjYxiiLrflZLJuIHjojWbbSxcF66xSWZtTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:f4:25:26:f1:fd:19:33:1a:cd:5c:39:04:90:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
Validity
Not Before: Nov 11 01:00:45 2025 GMT
Not After : Nov 12 01:00:45 2025 GMT
Subject: CN=3bd043078b0de5791f2c19ae4b2597e46621b5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:35:08:d2:4a:08:ca:01:8f:63:a8:c3:bf:
52:c6:59:f4:b2:c2:6d:ef:9a:d8:c7:7e:c2:9e:1d:
e1:03:ea:9e:16:c4:62:48:38:bc:81:b1:e1:0a:a6:
1f:98:86:ad:bd:66:51:14:ff:24:cb:00:8d:81:d6:
c1:f9:02:33:4b:02:8b:b9:92:e8:1c:2f:63:46:20:
5b:d9:35:08:c2:be:d4:0e:52:fc:03:1f:bb:9b:81:
cc:8c:cb:03:4a:d8:91:d1:57:cf:84:dc:b3:85:c9:
e4:fb:67:ec:af:88:06:fd:38:eb:88:f9:78:d4:23:
1f:7e:62:42:50:68:60:d8:c1:5a:ec:ae:18:56:1e:
5e:8f:f6:fc:80:97:9f:2e:bb:f4:e3:6f:fb:b0:ed:
c1:c6:6c:ce:93:c4:b3:bd:31:5c:d9:67:2b:2a:60:
a0:4f:49:56:d7:41:bb:3a:0c:d8:e0:06:1d:9a:5f:
75:37:c4:1f:a6:5e:ab:b8:e3:3a:72:8f:67:b5:b5:
f6:c7:1b:42:18:a6:4f:49:8a:1c:e1:6f:25:61:d8:
f7:ff:53:d7:a2:ab:8d:be:73:32:40:c6:14:d7:da:
e2:91:39:0d:2c:40:43:29:42:b1:2a:5d:bb:df:94:
67:da:1f:80:50:09:c6:33:c8:31:64:bf:e5:23:fe:
82:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D0:43:07:8B:0D:E5:79:1F:2C:19:AE:4B:25:97:E4:66:21:B5:FD
X509v3 Authority Key Identifier:
keyid:9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:27:b3:4f:16:e3:c8:54:0f:5b:2b:27:e2:62:4c:ea:85:5c:
25:f3:c1:ec:c0:ae:6a:bb:1d:26:bb:e2:af:09:57:61:09:74:
82:0d:73:5d:42:b6:0a:0c:7e:0f:71:01:5f:3a:9a:e4:8c:39:
fb:74:01:ea:0c:02:61:32:c6:1d:4c:24:02:01:73:1f:c7:10:
28:53:c8:c7:11:d3:78:2d:03:20:1a:5f:02:0a:46:e1:51:9f:
07:55:78:b6:a3:8c:f1:c4:18:42:9b:02:bd:f8:43:2e:c4:a0:
3c:b0:50:7e:0c:2c:a1:10:2b:9b:30:20:06:48:3d:f0:54:7c:
96:cf:2b:a4:a0:96:b9:d8:7b:66:98:f0:85:8d:ca:7a:9d:70:
e4:76:a5:94:58:e8:c6:66:c2:e8:2c:fa:a0:18:7a:9c:2a:37:
5b:ef:57:14:e7:d8:99:80:c6:5f:53:a9:d2:df:21:46:f5:d3:
71:ad:0a:a8:66:fa:97:c1:2f:69:7b:5f:57:28:f6:65:d6:92:
9a:2e:03:49:f8:82:33:45:90:19:5f:41:57:00:f3:d4:8c:0c:
45:2c:9c:ab:29:38:13:be:9e:b9:16:14:5f:01:4b:8a:ab:8c:
f6:ce:b8:12:af:54:ee:0c:95:d0:00:e3:d7:9a:e3:a0:1b:96:
1f:84:b6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:59 2025 by rpki-client