Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
File: 9aEH8WvGsAt2TDms_WMzY2RtWZY.mft (raw, json)
Hash identifier: nzlIAhLS5LXx7hBqJ/YN1WJ3xzkNQLHPmED72KEweeQ=
Subject key identifier: 6E:E4:E2:B7:90:D9:92:B4:77:50:7A:EB:0D:15:7B:B6:A1:DB:B7:B0
Authority key identifier: F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
Certificate issuer: /CN=f5a107f16bc6b00b764c39acfd633363646d5996
Certificate serial: 019A711323D0E1BD57F553D3589070CC2457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
Manifest number: 0440
Signing time: Tue 11 Nov 2025 04:01:10 +0000
Manifest this update: Tue 11 Nov 2025 04:01:10 +0000
Manifest next update: Wed 12 Nov 2025 04:01:10 +0000
Files and hashes: 1: 9aEH8WvGsAt2TDms_WMzY2RtWZY.crl (hash: bFPiIi1Mrx7gs36fM2yp9bNDq46YkU4llO/b/rWbn3w=)
2: i8fQ4SDQp7cMewdMesiICFs9ZAg.roa (hash: bCMQ7OQEomrpckp+sy5Q02dQCcDmXIN8SQy3NDUMNVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:23:d0:e1:bd:57:f5:53:d3:58:90:70:cc:24:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a107f16bc6b00b764c39acfd633363646d5996
Validity
Not Before: Nov 11 04:01:10 2025 GMT
Not After : Nov 12 04:01:10 2025 GMT
Subject: CN=6ee4e2b790d992b477507aeb0d157bb6a1dbb7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:94:92:cd:6f:36:92:58:34:f0:95:a2:38:
48:e1:91:30:36:3e:8c:0d:89:3b:a0:9b:be:11:9b:
e1:93:ae:24:0a:6d:cc:d5:b6:61:c3:aa:08:1d:80:
41:3b:54:ba:3b:c9:f8:b3:80:b9:c8:a0:9f:17:b4:
0e:b8:f1:f9:a8:bc:2e:70:5a:13:38:97:5a:4e:a2:
72:57:ff:7d:b0:9c:73:9e:e3:f5:e0:16:3a:a4:c7:
3a:d9:9a:53:09:20:9c:3a:70:f9:9e:dd:55:c7:dc:
ff:4c:75:75:88:d7:a7:fc:d4:87:67:60:52:1b:72:
c6:22:ee:ee:4b:b9:b0:4e:03:fb:45:8b:2e:35:b1:
c6:10:08:96:90:a0:86:69:7c:bb:b9:29:29:89:1d:
54:68:f4:d8:5c:40:82:9f:ba:3f:d1:e7:b3:1f:a2:
44:09:6c:8b:8e:db:ab:aa:c7:39:87:3c:77:d2:25:
4b:0b:86:1a:2d:ec:91:88:89:7f:65:d6:2c:64:30:
75:2b:8b:33:dd:63:42:ae:8f:c3:cf:f3:33:0a:88:
26:90:ba:24:80:a9:ee:c3:b8:5a:0b:53:ec:76:8c:
61:98:91:b5:f0:b2:64:f0:aa:48:e6:60:88:ab:1e:
0c:01:35:74:e5:c9:06:1c:66:ec:74:6c:3a:7f:85:
44:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E4:E2:B7:90:D9:92:B4:77:50:7A:EB:0D:15:7B:B6:A1:DB:B7:B0
X509v3 Authority Key Identifier:
keyid:F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f9:eb:64:c9:a6:29:c8:a0:3f:2b:3e:69:22:4b:61:27:b7:
2b:b7:db:02:4c:46:e6:da:6b:23:69:6a:ec:c6:f2:12:38:82:
6a:90:3d:8e:8e:2f:18:19:3f:e9:73:24:20:e4:0e:02:9e:13:
a0:b5:d7:9a:14:19:0f:20:85:e5:38:65:a4:e4:6c:7e:bb:7a:
09:72:2b:c5:45:d9:80:72:e7:76:bc:8a:4b:72:3d:26:fe:35:
e7:4a:4f:95:d1:48:15:fa:59:9e:a6:31:c4:c7:2e:b1:55:6d:
6a:45:b9:5c:6a:91:c0:10:6c:d1:42:6b:d8:66:7f:8f:0e:49:
49:37:33:03:9d:35:51:42:fd:67:76:42:1e:7d:69:34:1a:3f:
ee:b8:4b:9a:0d:9c:5c:1e:5c:50:5d:76:ba:16:e3:96:11:7e:
a7:5f:53:35:67:b7:f4:59:9c:8e:0c:0b:a4:b7:a0:a2:04:60:
91:0c:04:96:d6:88:3c:10:fd:e5:ec:c7:cf:ea:e2:7d:65:98:
56:97:35:7a:37:f4:4f:8c:c0:d5:1e:48:69:6b:66:17:ce:7f:
e1:ed:5e:04:4a:42:93:ff:0a:2a:12:7e:6e:12:96:83:b9:0b:
85:e2:17:cf:24:38:d9:2b:fa:2c:07:b2:42:f9:ec:19:58:01:
08:e4:1e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:54 2025 by rpki-client