Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
File: r9rCQfMBCxrkhLwx9YStD50gZzQ.mft (raw, json)
Hash identifier: xwqE6WD482UUISmMfCGbslQhhl6F05QXuyZGYL4Ghq0=
Subject key identifier: 36:5E:FA:5B:60:19:C5:14:BB:E1:01:35:17:2C:5C:35:D3:8F:09:95
Authority key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
Certificate issuer: /CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Certificate serial: 019A1A62307A1D9B3EAB74D3DF5EA01F0E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
Manifest number: 0CB8
Signing time: Sat 25 Oct 2025 08:00:33 +0000
Manifest this update: Sat 25 Oct 2025 08:00:33 +0000
Manifest next update: Sun 26 Oct 2025 08:00:33 +0000
Files and hashes: 1: Pyp3KZhgaPnGJ0klVfWstvZhAaA.roa (hash: 2zE2fETyOiknIdhnDsU5+xLMFz/vO5FngmYcWoMLhMg=)
2: r9rCQfMBCxrkhLwx9YStD50gZzQ.crl (hash: L9jadKw44S2PzbtFhxe+8lPcHh5hiUXHX8ZKlnfF3UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:62:30:7a:1d:9b:3e:ab:74:d3:df:5e:a0:1f:0e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Validity
Not Before: Oct 25 08:00:33 2025 GMT
Not After : Oct 26 08:00:33 2025 GMT
Subject: CN=365efa5b6019c514bbe10135172c5c35d38f0995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ca:21:48:7a:2f:b8:73:b6:8a:9e:24:9f:83:
64:f8:51:be:c1:91:91:6e:03:bd:4b:db:81:2c:99:
3e:36:2e:62:2c:40:88:54:2a:a6:30:e1:b1:4d:65:
e8:01:5c:15:8b:9b:87:d6:12:63:21:f3:db:00:0e:
2a:25:af:4f:42:fb:e1:b8:0e:ff:0b:69:56:ca:fc:
3b:46:b5:d7:2b:e4:2e:65:18:8f:ac:54:87:ab:0e:
dd:b8:d1:26:65:10:09:b9:1b:2a:49:b8:e6:b2:89:
69:e4:6d:38:5d:2e:fb:84:56:ca:69:ce:79:b5:63:
5b:ea:9a:5a:5b:ce:e9:e0:0d:2c:9c:d4:6d:ca:7b:
e5:b9:ce:d1:70:fd:e7:8b:7a:47:52:ed:87:02:cc:
c7:7e:71:77:b1:97:3d:f4:52:ab:6a:df:4f:38:c2:
d5:01:93:5f:34:10:dd:3c:c9:fc:6d:39:8a:e3:e6:
2f:2d:78:9a:95:79:e8:37:05:2c:ad:5b:81:e6:8f:
39:d3:7e:37:95:b2:98:c2:6e:8b:5a:95:2d:00:61:
7b:36:60:6b:3f:77:48:2a:91:ab:d9:0d:3d:f6:45:
04:2a:8d:a0:a0:c1:04:1a:81:57:e6:af:fd:35:f3:
72:45:7f:a5:64:f9:64:a2:bf:98:2c:c5:fb:c5:3f:
78:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5E:FA:5B:60:19:C5:14:BB:E1:01:35:17:2C:5C:35:D3:8F:09:95
X509v3 Authority Key Identifier:
keyid:AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:65:a2:3a:f1:37:fb:5b:e2:1b:27:ad:a1:11:e0:b7:c2:a8:
7e:f6:01:81:c7:ad:45:c4:85:88:f8:74:d6:4e:14:da:4e:85:
ea:20:ce:02:20:c1:de:47:02:2c:8a:97:4f:04:72:65:08:28:
29:c2:e6:d7:16:f6:1c:61:2b:04:36:36:9b:0c:49:6d:de:61:
df:fe:b8:da:52:60:c1:72:de:08:a7:a4:d2:cb:e2:00:74:6e:
bc:2d:1c:b6:ca:e8:86:ae:74:af:66:85:21:c8:b3:52:67:92:
2e:3d:3a:db:73:c4:a2:0d:b8:b2:a6:fb:91:79:b8:fb:7b:b1:
95:b1:0f:6a:88:f1:ea:e4:0e:f1:ca:86:bd:ce:dc:bc:df:9e:
53:99:ec:ea:35:6e:79:95:7d:a9:33:84:a6:b0:f7:69:69:be:
ac:e5:38:35:d0:c8:d8:66:19:44:d0:82:c1:6e:64:2a:28:b5:
8b:49:e7:b6:a7:d7:6a:47:a7:10:05:2a:4a:3e:d0:c1:0f:f7:
76:7f:62:19:c8:9b:c6:ff:b3:6e:2a:f8:37:8d:3c:08:72:9a:
30:6d:5a:76:05:69:35:a9:7f:43:c4:6c:04:3c:05:f3:05:de:
c8:d8:4f:4e:31:a6:dd:dd:3a:3b:21:06:81:80:f9:18:cb:83:
d7:0d:76:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 16:35:14 2025 by rpki-client