Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
File: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json)
Hash identifier: BjWiZyxLv3MtU2vEopT4IvgEmx6fM4eqo+Z5c/Xr02M=
Subject key identifier: 4C:41:B9:40:62:E0:5B:C2:16:43:D4:6A:CA:07:69:52:47:DB:55:8B
Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Certificate issuer: /CN=f709528b8828b4d826355e2c52237d642071cd54
Certificate serial: 019A5BD4BD8B0307E04F47D062D7EADF8B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
Manifest number: 06F8
Signing time: Fri 07 Nov 2025 01:01:00 +0000
Manifest this update: Fri 07 Nov 2025 01:01:00 +0000
Manifest next update: Sat 08 Nov 2025 01:01:00 +0000
Files and hashes: 1: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: NkXeRmaQMB1YA8RKkvbzjoW1bjV+rliThOMYucgJelM=)
2: iKhGCzGlkdUH-YeR40es_shy-iQ.roa (hash: UctZx1wGvAAr9xLOczqP8p1as4JR/y4gz7WSAX7sYrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 20:27:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5b:d4:bd:8b:03:07:e0:4f:47:d0:62:d7:ea:df:8b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54
Validity
Not Before: Nov 7 01:01:00 2025 GMT
Not After : Nov 8 01:01:00 2025 GMT
Subject: CN=4c41b94062e05bc21643d46aca07695247db558b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8a:46:cb:94:c2:58:40:69:56:33:54:a0:2d:
0e:f3:d6:78:76:81:fd:5c:54:e7:95:e8:b7:f0:a2:
79:98:f3:7c:ef:b0:38:31:1f:84:a8:9d:38:f9:0e:
75:11:50:cd:b8:c4:1c:28:62:11:e4:07:55:38:72:
4f:8b:12:45:29:f1:0d:ed:5e:c9:c1:27:a2:bc:5f:
b3:2e:30:2d:68:06:3e:af:6e:e7:40:8c:85:22:5c:
63:d9:57:ec:28:06:75:9c:83:0c:af:cf:c4:c0:ca:
d2:e1:79:99:6a:c2:cb:e3:44:bb:5f:6d:38:8c:e5:
75:9e:2d:b7:c5:cb:b5:9a:51:a7:e1:b2:07:e6:c9:
86:fb:f2:65:ab:25:78:eb:8c:45:0e:f7:9a:4d:5b:
92:71:d3:e0:f9:34:cc:b0:cd:00:b2:dd:3d:38:e1:
41:11:07:41:b2:3a:87:29:ae:4e:1d:8a:2d:bc:a7:
d1:06:bd:2c:71:7d:c3:63:8f:66:0e:33:da:b1:10:
a7:16:04:30:df:4b:90:75:6a:45:dd:24:3e:ae:44:
11:21:19:8f:01:bb:52:e0:e3:db:3f:19:e4:34:f5:
2b:be:53:d8:81:9e:a0:cf:0f:b1:59:9f:a4:bf:ab:
b2:cb:a8:aa:cd:8a:b9:28:a7:69:e6:53:04:4f:99:
0d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:41:B9:40:62:E0:5B:C2:16:43:D4:6A:CA:07:69:52:47:DB:55:8B
X509v3 Authority Key Identifier:
keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d5:ee:9d:7c:d5:89:e2:56:cb:2b:e7:6f:2a:05:70:8a:0b:
9a:be:f5:de:bc:e4:fa:18:46:a4:a4:d9:49:e7:07:ef:a6:14:
7e:38:2c:1d:63:fd:a9:aa:28:42:d6:12:1e:91:1b:f3:49:dd:
2e:0d:fb:d6:51:61:be:8d:f4:71:7b:a1:37:81:ed:e0:31:3f:
2d:7c:49:9e:7c:ba:d4:52:d0:5e:6f:61:9d:a5:65:89:f2:c6:
5c:91:06:05:55:84:f7:d0:4b:70:17:73:f8:be:ed:ef:ec:54:
09:4b:cc:ed:e0:46:e2:bc:d7:f3:f2:28:17:e5:14:23:9e:3b:
2d:d7:c7:79:f7:b2:48:45:6d:ee:1d:33:57:b2:8d:25:1d:9d:
6b:1d:59:ae:15:6f:1c:a1:d5:83:2f:c5:69:2d:76:52:e3:34:
f6:e7:c6:2a:ee:58:29:50:06:c5:e2:7b:cc:9b:58:52:5b:0e:
68:3a:3e:78:a5:2c:ff:60:bd:00:6f:69:06:15:e6:ee:a2:1c:
cb:01:e1:52:31:5e:11:7c:ce:eb:e9:7d:a2:69:fa:b1:74:30:
76:2f:72:df:d3:14:20:db:23:1d:e1:16:10:3e:53:5f:b8:6b:
5d:b6:74:6c:8b:ff:1a:72:d7:1b:28:0d:79:23:ed:c4:96:26:
41:fd:c7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 04:14:41 2025 by rpki-client