Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
File: 9SMu6AX3jlku_yzKYVORCeWjRn0.mft (raw, json)
Hash identifier: tGGeyX/ZsgPt/OGhsihDSLWTEEz6GDPt3pjiq1WQ7ng=
Subject key identifier: C9:51:65:C7:E8:98:63:24:59:04:04:50:74:B6:33:94:F2:2D:9C:C8
Authority key identifier: F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D
Certificate issuer: /CN=f5232ee805f78e592eff2cca61539109e5a3467d
Certificate serial: 019A725C504A3ADD4D49B030EE0D259CDE8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
Manifest number: 054D
Signing time: Tue 11 Nov 2025 10:00:43 +0000
Manifest this update: Tue 11 Nov 2025 10:00:43 +0000
Manifest next update: Wed 12 Nov 2025 10:00:43 +0000
Files and hashes: 1: 9SMu6AX3jlku_yzKYVORCeWjRn0.crl (hash: WC3oYsHFwl1jKPPj4QNCxdnrnPhDQm3QcDjy0jkf1SE=)
2: mUlVQVQA_6DZI0Ul4lrD7MOPmCA.roa (hash: KLYv7255AIBTzhsrUwU5ETXppAJnyWMdZ4HLY5/fahk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:50:4a:3a:dd:4d:49:b0:30:ee:0d:25:9c:de:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5232ee805f78e592eff2cca61539109e5a3467d
Validity
Not Before: Nov 11 10:00:43 2025 GMT
Not After : Nov 12 10:00:43 2025 GMT
Subject: CN=c95165c7e89863245904045074b63394f22d9cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:cf:23:a5:ab:44:e6:f5:4a:c4:95:a0:ec:
f6:e7:c5:36:f7:eb:c7:00:c7:e2:96:0c:11:39:3e:
67:70:57:14:5e:71:7b:44:7c:8c:1b:32:5d:0a:a6:
09:2b:61:36:d8:62:d5:6b:0e:c8:f5:a1:6d:2d:3c:
aa:29:36:7d:d1:cd:57:2b:e4:80:39:e5:0b:09:7c:
ce:df:b5:bb:b6:08:44:60:a0:c7:a7:13:cc:7d:59:
94:72:40:a4:e5:31:7f:7a:a7:e2:95:b6:f8:02:2d:
9c:ce:96:81:bf:af:f0:af:0d:58:30:2c:5b:6a:f0:
fd:82:e6:b1:15:3c:c3:64:5b:27:76:c5:44:b9:b4:
88:b9:07:a8:8d:e4:6c:1d:8b:80:67:e4:9f:43:09:
e1:d8:3f:93:af:62:fa:ba:06:f0:f5:ee:67:7c:84:
0e:b4:fe:dd:4d:d1:7d:27:23:1d:98:2f:ed:e1:c6:
b4:85:b3:cb:83:4a:dc:98:da:f0:52:d9:25:e0:b0:
f3:04:6b:10:42:64:85:f8:c1:ba:50:d4:75:fc:a8:
e2:0c:bb:ac:cc:ab:ac:f1:ca:3e:a1:d6:0e:39:4a:
2d:e5:67:7a:cd:3b:13:21:82:f2:6b:51:ba:b7:6a:
d2:3e:14:e8:1d:91:19:88:69:a9:71:28:b8:9c:4c:
13:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:51:65:C7:E8:98:63:24:59:04:04:50:74:B6:33:94:F2:2D:9C:C8
X509v3 Authority Key Identifier:
keyid:F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9d:fe:11:9d:d7:49:b9:1c:a5:cf:0b:03:bc:e0:22:b0:50:
9a:cf:cb:5b:4c:c9:32:2d:c1:03:50:5f:d0:f0:4c:62:42:a4:
7d:85:f3:4c:7c:9e:df:c9:99:73:45:ba:89:4d:59:81:83:34:
63:3a:50:14:93:ad:1e:28:24:66:93:ae:3a:33:4b:62:b6:e1:
d7:b9:54:69:ae:49:96:8c:7a:26:a3:c8:da:61:74:34:95:42:
dc:87:f7:29:0b:fb:81:18:30:bc:c5:01:9b:4b:b5:90:0e:78:
b5:09:06:4b:df:20:06:28:3a:1f:f6:ab:9f:9d:e6:f5:c9:dd:
0f:c3:97:c2:14:49:45:9e:3f:35:76:03:ed:b6:f5:22:48:32:
f7:ab:c2:2d:a9:46:ea:fa:d5:e2:2a:dd:57:e1:38:78:64:ca:
1c:86:51:ec:94:62:ad:55:2e:b2:cc:b4:57:49:e7:67:06:aa:
7a:54:50:06:46:62:e1:58:53:ea:55:37:e1:42:94:bc:6f:f5:
af:84:6e:54:ce:2a:45:80:db:bb:c4:22:69:08:cb:44:bc:a5:
4c:af:40:91:8b:a2:16:ea:13:94:0a:47:5b:34:62:31:aa:f3:
f6:cb:e4:b3:4d:9f:53:52:2f:5d:a0:37:ef:7a:f5:fb:27:31:
b4:e1:a2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:26 2025 by rpki-client