Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
File: 9-CSr_r5tUhOAJmap_HO8ax7QJM.mft (raw, json)
Hash identifier: mExeMsqQJbOXpjI4LieIoiht2YNODh7fU/asTH2RyzQ=
Subject key identifier: 28:7B:8E:B7:DB:A8:B8:19:3D:89:02:B6:B0:20:92:55:30:3F:C9:97
Authority key identifier: F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
Certificate issuer: /CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Certificate serial: 019A725C742D7CF0A4FD805F99A99EC45F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 10:00:52 +0000
Manifest this update: Tue 11 Nov 2025 10:00:52 +0000
Manifest next update: Wed 12 Nov 2025 10:00:52 +0000
Files and hashes: 1: 9-CSr_r5tUhOAJmap_HO8ax7QJM.crl (hash: NzSW+MbkTCkMNNoQLFfjIHm48M2yIxmTCTuqgLbPSsM=)
2: s1tohRSZu__XAcftU1RiatFR4dQ.roa (hash: VEmypovoGht5ITUXKfWFpiCHNX0Yi9nhk6KgNzb6xkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:74:2d:7c:f0:a4:fd:80:5f:99:a9:9e:c4:5f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Validity
Not Before: Nov 11 10:00:52 2025 GMT
Not After : Nov 12 10:00:52 2025 GMT
Subject: CN=287b8eb7dba8b8193d8902b6b0209255303fc997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7f:10:bc:4d:2f:12:e8:29:6f:55:26:b1:6b:
08:2b:33:b2:be:5e:7c:4e:09:f1:33:d4:65:16:bc:
d7:39:a2:20:c7:8a:f3:ce:9b:09:64:cd:f8:c5:8e:
39:79:71:02:10:41:94:4f:87:45:f8:a4:3d:51:90:
aa:f2:3d:d0:5e:bb:3e:6e:ef:2e:80:09:a6:3c:3c:
d7:87:5c:33:b3:b7:6f:a1:b3:53:02:aa:15:24:54:
6a:71:3e:9c:5b:23:a0:e8:9d:19:a6:de:20:ce:ec:
99:26:13:26:60:a4:05:b1:70:31:c1:d6:36:e0:3d:
f5:20:18:cc:22:89:62:83:31:79:5b:8f:76:bd:18:
33:9e:c2:36:c9:79:52:89:39:14:04:26:1e:f7:ad:
4f:52:27:e4:16:27:d1:2e:17:e5:81:59:1b:54:cc:
2a:dd:63:93:98:d1:a4:a3:01:ab:cf:d7:68:3a:ff:
69:5c:8f:df:8d:eb:ac:5a:61:98:2e:9d:00:38:17:
b9:9c:82:79:24:89:81:5b:24:51:d5:27:4b:ea:20:
c4:c5:c9:46:1b:b1:3e:21:16:86:02:4b:1a:ab:e9:
55:d7:71:69:82:ff:ba:f7:25:ec:6e:c5:3f:81:f7:
ab:c5:7c:c8:38:17:9b:96:4a:51:7f:77:06:a9:34:
ea:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7B:8E:B7:DB:A8:B8:19:3D:89:02:B6:B0:20:92:55:30:3F:C9:97
X509v3 Authority Key Identifier:
keyid:F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:05:96:75:4f:96:fe:be:7b:7d:7e:17:dd:c5:3c:0f:c3:da:
ac:dc:18:64:b6:41:52:51:e8:e3:9b:e6:8d:3e:6c:fc:d0:66:
49:b9:0d:0f:05:29:32:7b:33:32:6a:0d:8a:61:6a:75:53:15:
eb:79:80:17:99:c9:82:d7:5e:31:c2:28:96:d9:5f:5a:17:ef:
da:fa:39:c5:bc:cc:f4:b0:66:75:35:96:0e:0f:7b:1c:a5:73:
85:f3:8e:16:bc:92:fa:15:3e:01:70:9b:fb:ee:25:7c:0f:1b:
c3:0a:69:8c:ee:85:ed:b9:05:f6:44:3c:6c:81:68:3e:b4:43:
ed:8b:c6:6b:2c:68:92:cf:76:d0:9d:b5:d2:7b:7a:c6:cd:6a:
27:c7:e0:d6:b9:9c:76:43:26:f1:f9:f6:c8:77:b2:d4:3f:1a:
e0:80:47:db:7d:e6:6d:05:b0:1c:d6:7f:23:e9:47:07:38:7b:
c4:a8:95:9c:1b:f0:de:5b:6d:a4:85:e8:14:7a:b0:6c:80:30:
fc:59:3c:3f:be:2e:da:c2:76:f1:a8:ad:09:f1:32:e0:6e:6b:
37:bc:c5:e8:97:2d:7e:9d:0c:43:8f:98:49:18:6e:cb:b2:76:
6a:52:5a:fe:93:3b:99:61:0f:c1:45:1d:dc:5b:76:da:cd:f5:
b6:bb:5e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:46 2025 by rpki-client