Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft
File: 9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft (raw, json)
Hash identifier: wbnYsNdCKlFPX4Ajl3lnNkFoW11IstIy0aek1nloKaU=
Subject key identifier: 48:D9:57:4C:D1:4A:24:6A:27:FA:88:3A:9F:06:C6:05:A7:7B:A4:2D
Authority key identifier: F6:B5:4E:15:71:4C:23:F3:5F:DC:F5:A3:16:C6:B9:9A:35:41:05:88
Certificate issuer: /CN=f6b54e15714c23f35fdcf5a316c6b99a35410588
Certificate serial: 019A7301410FAF613E34ABF0F92414C53971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft
Manifest number: 11CB
Signing time: Tue 11 Nov 2025 13:00:53 +0000
Manifest this update: Tue 11 Nov 2025 13:00:53 +0000
Manifest next update: Wed 12 Nov 2025 13:00:53 +0000
Files and hashes: 1: 5VpJh85q40wiF3tIcwBqbUYfHXs.roa (hash: FZq736wENvopOQrubygsWoOWFmhs6QXxNgIM0epTpuM=)
2: 9rVOFXFMI_Nf3PWjFsa5mjVBBYg.crl (hash: 2LVYuNVmKdeGzT68CbAArKZZ5J17mcmpbbo7CO7brZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:41:0f:af:61:3e:34:ab:f0:f9:24:14:c5:39:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b54e15714c23f35fdcf5a316c6b99a35410588
Validity
Not Before: Nov 11 13:00:53 2025 GMT
Not After : Nov 12 13:00:53 2025 GMT
Subject: CN=48d9574cd14a246a27fa883a9f06c605a77ba42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:4a:d3:88:f7:26:9e:f1:53:58:5e:b2:2c:
4e:7b:1a:9c:5f:40:dc:e7:18:0f:c1:f0:7f:9b:61:
98:8d:a0:dc:a1:31:60:6d:a7:2b:35:76:99:ef:34:
4a:cd:46:b3:64:82:c1:a1:bc:40:6a:9e:ea:ea:af:
ba:29:1a:71:f2:13:43:8d:c9:26:82:42:f2:ae:c7:
fb:ef:ca:47:f2:70:93:a6:6c:3e:31:d5:cb:1f:f5:
78:0a:68:0d:31:47:b2:2d:bc:18:0c:f5:51:54:56:
29:6d:c8:47:8c:c0:0d:fe:61:57:bf:42:40:d7:3c:
d2:a4:ea:e2:92:e3:49:a4:63:d1:24:f8:0d:9e:58:
e8:1f:aa:c8:7d:ed:cb:f1:d1:02:be:8f:55:99:8b:
ee:ca:a1:8c:f0:f2:cf:2b:e4:e3:97:70:06:ec:12:
77:19:e3:b0:3d:4c:05:b9:32:8f:d4:7e:9e:29:c3:
b2:b4:e0:9d:b2:c6:c3:00:93:96:66:d9:e1:14:6b:
70:61:ee:e2:3e:04:bd:fe:05:ea:37:b1:8c:2c:f7:
89:5a:9c:fe:bb:64:44:5f:53:82:af:bc:74:0d:10:
8e:43:9f:90:dc:4c:af:a2:9f:ef:55:3d:c3:95:2d:
d5:0d:65:d7:9b:56:2a:be:fd:8b:ce:2b:f5:fa:8c:
eb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D9:57:4C:D1:4A:24:6A:27:FA:88:3A:9F:06:C6:05:A7:7B:A4:2D
X509v3 Authority Key Identifier:
keyid:F6:B5:4E:15:71:4C:23:F3:5F:DC:F5:A3:16:C6:B9:9A:35:41:05:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:38:97:9a:1f:2c:4b:c6:de:5c:27:5a:e7:b8:ca:fa:62:fc:
e8:f9:41:1e:34:d0:71:8b:9d:5d:5a:bc:f9:ee:da:61:98:c2:
33:6b:bc:b1:43:57:eb:55:d2:8d:31:bf:a3:a2:3d:a2:8e:6f:
5b:02:3c:f8:3f:cb:c0:0f:91:a5:66:eb:54:4b:46:0c:0d:39:
6d:b7:0b:85:8b:1f:77:6c:6a:f1:fe:1c:1c:07:e9:f9:e1:63:
ab:f4:80:0a:7a:95:33:a2:c9:49:8c:24:ad:59:ab:19:a6:08:
cf:66:f1:a9:20:ba:30:d9:90:a0:9e:a5:b8:4f:c0:ed:e7:d4:
22:d6:b0:d0:f9:f2:d4:2d:a0:1b:f5:86:09:fd:b1:82:41:aa:
73:0d:49:bf:a6:a7:8c:a1:50:8c:e4:28:92:1b:c1:c5:65:36:
32:36:ff:8f:9b:fe:5d:a9:26:45:d5:32:1a:59:85:d3:f2:fd:
36:d7:07:94:dd:43:44:78:68:4a:9c:9a:81:22:9c:7c:75:d3:
ea:7a:81:16:a3:f3:5e:46:47:18:25:e8:e6:19:9c:ad:91:00:
58:62:03:9b:a3:03:9d:b4:03:b8:23:f9:51:6c:76:50:95:d8:
af:35:5a:be:15:99:ae:d5:7d:c1:2c:4a:f6:15:16:fe:5c:29:
99:be:5d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:00 2025 by rpki-client