Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
File: 9-VkfNC39yK-1FafN7i_j5JTjPU.mft (raw, json)
Hash identifier: WDXXHKMwT4+pdwWCVNmE2r2o7AYXl7dxX674O0qCA2A=
Subject key identifier: 57:DF:64:CF:A1:38:D2:24:3C:7A:82:6F:D0:91:E2:DC:87:CE:D6:5C
Authority key identifier: F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
Certificate issuer: /CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Certificate serial: 019A72939FE039091F0B92C06E2D50E3556C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
Manifest number: 1341
Signing time: Tue 11 Nov 2025 11:01:08 +0000
Manifest this update: Tue 11 Nov 2025 11:01:08 +0000
Manifest next update: Wed 12 Nov 2025 11:01:08 +0000
Files and hashes: 1: 9-VkfNC39yK-1FafN7i_j5JTjPU.crl (hash: ep+1YXkNxr4JxLKmDSeZriUKasaowXBqX6smSBffgIw=)
2: DBhdVQnWbQeKdQzgQiCpHErXzhE.roa (hash: ke+PE6qJEQ9z2GmlNhQtn8qkPU8ewvFXiEh0aYxuqOo=)
3: q1OrwBnOgNGg_tS0zZoAzPBHw1c.roa (hash: aaFqVy4+hGHKy39rpTWrEUIWgkLIuK6ZgSAREjkESF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:9f:e0:39:09:1f:0b:92:c0:6e:2d:50:e3:55:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Validity
Not Before: Nov 11 11:01:08 2025 GMT
Not After : Nov 12 11:01:08 2025 GMT
Subject: CN=57df64cfa138d2243c7a826fd091e2dc87ced65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:44:c5:21:64:ca:d2:14:e4:b5:86:d1:76:
03:c8:96:7d:16:e9:10:32:c4:7b:aa:85:d4:64:1d:
75:27:0d:bc:8e:d4:79:7b:da:86:68:08:79:3b:33:
83:36:1c:49:f0:7d:93:e6:f1:f2:08:75:64:75:e3:
6e:38:f9:93:7d:38:86:b0:3a:d2:aa:e7:63:29:8b:
6e:26:a0:ff:12:22:22:f6:8b:69:6d:ea:9c:1f:29:
09:e8:d7:f3:7a:e1:35:10:1d:b3:36:32:d6:2a:14:
6f:a3:c0:6f:a7:9b:8e:28:76:43:6b:80:6b:ab:9c:
e2:58:c2:31:29:c6:65:aa:50:35:58:6f:55:77:ec:
ae:ea:a7:98:0c:fc:a2:3f:9e:21:24:a8:9a:93:c2:
bb:fd:07:75:46:49:51:9b:32:a7:ef:f7:50:8e:67:
98:96:02:de:46:a1:7b:ac:21:0d:6c:94:f1:f1:5e:
79:c5:67:b0:45:d6:63:43:79:9b:d4:45:39:44:e3:
3e:3b:a3:27:4e:70:0a:b6:9f:ef:b9:71:4b:16:04:
c5:95:f3:e3:c7:09:78:df:03:49:a1:b0:4f:26:17:
5e:b3:c7:89:52:09:18:5c:fc:86:33:48:b5:b1:ff:
1d:17:31:65:b9:2b:72:ff:be:55:87:1b:fb:1d:2f:
1a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DF:64:CF:A1:38:D2:24:3C:7A:82:6F:D0:91:E2:DC:87:CE:D6:5C
X509v3 Authority Key Identifier:
keyid:F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:91:d8:82:2d:24:85:8a:07:c5:18:de:79:80:54:ec:66:52:
97:13:ab:e4:15:72:13:db:58:46:e3:38:4a:97:cf:5a:55:32:
f0:04:7d:55:42:31:64:ef:3f:e0:7f:1e:f6:3c:88:bf:97:1e:
e2:8b:80:3d:60:88:96:2e:fd:7d:c1:20:db:39:3c:5f:1f:b7:
73:1a:c7:c4:4e:48:54:b8:59:2f:29:a6:7c:a3:d7:fd:c8:d4:
40:78:82:8f:37:63:c8:47:18:02:30:86:91:b2:77:e5:e9:3f:
96:d3:71:d2:6f:9f:8f:e8:63:ee:88:c0:22:6e:19:5f:d2:11:
bb:df:30:33:a1:6c:68:5c:cd:ff:ac:85:80:3b:86:b3:03:9c:
14:4b:8a:bf:dd:de:58:7d:4e:5b:3b:a1:e2:78:9a:18:46:a8:
6f:03:75:22:3a:7f:49:6c:ae:74:34:43:e2:c8:7a:cb:17:82:
9b:12:7a:df:35:44:9b:6e:4b:8f:5c:fc:2f:d6:4b:0e:c0:f3:
fa:10:d6:75:b5:e0:70:70:44:ae:09:c7:ca:53:eb:a4:19:84:
f1:7f:0b:9d:b5:91:3b:b5:e1:30:70:0c:d1:be:dc:fa:76:ab:
17:1b:ee:3f:8f:4a:ec:9a:b6:88:61:90:65:0a:b0:3b:33:3e:
26:bc:c7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:38 2025 by rpki-client