Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
File: 9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft (raw, json)
Hash identifier: Ue4ok6+Hbz6OJa8gbbhkLDhSSuyrN1UtxehZLuPgyfQ=
Subject key identifier: E0:E4:05:15:BA:A6:99:78:D5:B9:CB:DC:CF:25:C0:46:7F:B7:2E:48
Authority key identifier: F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5
Certificate issuer: /CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5
Certificate serial: 019A725CCCD92775506EF6DC82BA918EBD34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
Manifest number: 084E
Signing time: Tue 11 Nov 2025 10:01:15 +0000
Manifest this update: Tue 11 Nov 2025 10:01:15 +0000
Manifest next update: Wed 12 Nov 2025 10:01:15 +0000
Files and hashes: 1: 1fzx311S5jcwOa4F8HMO1WGGMRs.roa (hash: Nf7uyvKCbxyvq+ckjdshr/ayknm9CnDDcdCg9xx36FM=)
2: 9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl (hash: mvj1tgmshTbqOwShNSJm75ZcK0kejio6jhDcnOdXl54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:cc:d9:27:75:50:6e:f6:dc:82:ba:91:8e:bd:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5
Validity
Not Before: Nov 11 10:01:15 2025 GMT
Not After : Nov 12 10:01:15 2025 GMT
Subject: CN=e0e40515baa69978d5b9cbdccf25c0467fb72e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a1:aa:3c:56:2a:b1:4e:fc:03:bc:ee:b0:ee:
b3:cb:c4:24:b8:a3:e7:43:70:f2:ee:6a:58:35:fa:
cb:4a:4d:0c:88:5d:b2:43:78:51:23:b2:a1:4b:9b:
d5:92:f3:3e:f1:fc:90:c7:40:ab:15:e0:76:8e:a6:
d1:6f:ca:46:9d:01:62:c9:1a:21:ab:c0:bc:14:3b:
a1:39:dd:e0:e9:4d:5a:df:15:3e:ea:b0:06:a2:9a:
73:aa:af:89:0c:04:e2:07:e5:88:60:a8:65:ea:56:
e3:27:08:18:c4:02:d2:12:a4:d5:ff:67:54:d9:cd:
df:21:a1:bc:bd:6b:c9:3f:b2:04:80:a2:ba:a3:e2:
c2:75:45:06:70:7c:55:0e:bb:80:e7:bf:18:15:4f:
29:f3:51:49:5a:e0:f0:c6:e6:fc:4c:5e:8e:b3:ef:
e2:86:9e:2a:41:d2:34:42:4e:10:9a:fd:b9:a1:13:
d2:ee:a1:b4:e0:c5:33:63:98:13:11:b8:cf:09:9d:
60:79:0b:e5:99:e3:3a:90:e1:74:8a:35:7c:9f:89:
12:18:8d:dd:a7:9e:3c:82:20:38:4f:fb:d6:58:2b:
e1:b9:a5:4a:6d:a0:af:07:7c:98:88:35:97:c7:1f:
fd:e6:57:64:13:e7:76:a5:4b:a1:6e:ea:a8:8f:08:
f8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E4:05:15:BA:A6:99:78:D5:B9:CB:DC:CF:25:C0:46:7F:B7:2E:48
X509v3 Authority Key Identifier:
keyid:F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:7a:2c:ce:db:95:7f:53:2e:5a:61:97:b4:a5:c9:05:77:9f:
21:8d:46:ff:1c:76:13:72:b5:36:b5:ab:71:0f:8c:6b:f1:d5:
f3:84:08:a6:7a:91:46:83:a6:36:9c:4e:a6:c8:6a:69:8e:87:
b5:04:f8:9f:e1:de:dc:69:c3:3f:1b:3b:ba:91:a5:f3:a1:09:
45:fb:18:2a:5d:82:ec:93:b8:d5:2b:64:04:99:d0:be:f5:39:
49:09:13:14:e9:78:b3:42:3d:01:05:a2:a7:35:42:db:eb:a8:
48:23:83:2d:86:41:c1:1c:0e:91:d6:45:18:c8:d7:09:67:b3:
dc:31:ad:8c:55:84:6b:c2:69:90:c3:a2:49:9c:69:c3:41:56:
8e:10:c1:0f:b8:92:73:29:b2:47:e8:7f:61:24:10:79:39:8f:
66:f9:f7:1a:13:1b:58:77:7f:06:75:28:57:38:db:60:2f:cd:
0a:a1:c2:a9:52:c2:86:c9:82:99:01:a2:7f:46:68:99:d3:7f:
c6:8c:ac:f4:61:cc:63:b0:8e:6c:8b:50:84:52:0b:f1:b6:a4:
15:e2:e8:f2:a0:6c:59:11:5b:78:96:e1:e3:95:1d:6a:05:ec:
37:f5:0c:5a:a2:fd:63:78:c6:4b:5d:2c:c8:9f:3f:1b:6b:f8:
8b:d1:32:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:15 2025 by rpki-client