Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
File: cX9V88YAexy91-ggiQVpAGdXs2Y.mft (raw, json)
Hash identifier: VUeSfQ+AUXM29HoeYBBETxsv/WTfbmBC8NvmUD3mAdE=
Subject key identifier: D9:02:3A:EA:5E:3E:15:24:9E:C6:C5:3A:2E:BE:18:FD:9B:61:B5:C7
Authority key identifier: 71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
Certificate issuer: /CN=717f55f3c6007b1cbdd7e820890569006757b366
Certificate serial: 019A1EADC9ED59D304A53D2FCAD6B7510E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
Manifest number: 0E83
Signing time: Sun 26 Oct 2025 04:01:37 +0000
Manifest this update: Sun 26 Oct 2025 04:01:37 +0000
Manifest next update: Mon 27 Oct 2025 04:01:37 +0000
Files and hashes: 1: BNamB5vKS8VYoQEENNZLcbAD0yY.roa (hash: AZc2M6A0pF1sMbjRSCCXbLIDgidX2dUycGenbS2p6qA=)
2: cX9V88YAexy91-ggiQVpAGdXs2Y.crl (hash: rAgwQyboIiTwqztFEicwXh8ghW6jy6h8Kbcs2GypcRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:c9:ed:59:d3:04:a5:3d:2f:ca:d6:b7:51:0e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=717f55f3c6007b1cbdd7e820890569006757b366
Validity
Not Before: Oct 26 04:01:37 2025 GMT
Not After : Oct 27 04:01:37 2025 GMT
Subject: CN=d9023aea5e3e15249ec6c53a2ebe18fd9b61b5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:eb:86:74:4e:50:7d:07:a3:9d:ec:97:b5:13:
55:33:19:94:54:ca:26:74:05:a1:e9:67:8f:fd:17:
51:e6:f7:e8:b3:7e:bd:2e:6a:6e:d3:71:0a:b5:3c:
a6:8c:5f:9d:e7:12:7b:02:23:01:f6:a3:9f:26:ec:
ae:44:47:0c:78:98:2e:71:16:44:df:05:08:ef:55:
5e:fc:6b:53:83:f5:7c:15:68:e7:d8:85:ff:1f:f4:
3b:f5:6d:21:af:9a:6e:2c:3e:31:4f:2c:8f:fa:bd:
41:4b:09:15:46:fe:c3:36:b0:da:d9:48:6f:6c:53:
5d:9a:67:d0:70:b4:1c:84:68:1d:36:ec:c7:ea:ec:
cc:18:47:7d:37:a0:d1:ab:7f:23:0b:7e:8c:23:b5:
55:2d:9d:c6:4d:fb:93:07:1f:ae:f0:88:0a:c1:52:
de:53:08:10:7c:8e:22:1c:c8:47:4f:cc:da:8f:6e:
ec:d1:d3:97:21:1c:8d:33:e8:bc:c1:30:88:c8:10:
5b:2d:e1:92:82:73:af:1b:32:50:87:ae:44:e5:52:
12:b6:d6:85:21:53:13:b6:69:fb:dc:d3:1b:33:7c:
cd:12:a1:a4:2d:90:df:4b:ad:b8:81:4d:34:e2:ab:
e5:84:66:d8:7d:87:20:e6:f8:6d:c4:7e:19:ce:26:
03:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:02:3A:EA:5E:3E:15:24:9E:C6:C5:3A:2E:BE:18:FD:9B:61:B5:C7
X509v3 Authority Key Identifier:
keyid:71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b9:35:7d:67:23:87:1f:c8:51:6e:76:25:2f:16:f6:fa:05:
3d:6f:c0:9d:e0:e5:03:01:ad:e0:32:08:46:52:ad:2c:1f:0b:
85:ab:57:80:f2:29:44:d1:2e:05:51:88:a3:09:8c:3d:dd:6d:
2c:da:a5:d6:3d:b4:86:e5:e9:04:7c:6b:fa:29:47:bf:84:65:
a7:bc:2c:f1:66:dd:53:99:2b:64:6f:4e:58:e8:bc:42:6f:dd:
91:14:d5:19:55:88:6a:28:dc:61:f4:70:17:c1:29:45:f2:5b:
f9:bf:50:a2:ec:8f:2e:2e:de:c8:b3:fb:56:ab:35:8b:1f:c5:
19:64:d8:59:ac:b2:a8:87:fe:11:1b:e8:a6:36:42:2d:6c:64:
9c:10:3c:78:7e:67:29:b2:1e:73:c0:5f:fd:63:c0:67:5c:a6:
01:fa:b3:a9:76:a6:ea:24:d0:d4:e1:10:83:76:d1:d9:77:f0:
8d:34:0d:ac:d8:41:c1:ee:30:64:c7:cf:e2:b3:ef:59:6c:31:
f2:2b:52:dd:28:40:1f:79:86:b8:99:d5:db:d9:71:8c:87:af:
02:b3:be:ec:3b:14:4e:9b:1f:f8:7d:4a:fe:cf:0c:5f:84:8a:
53:c1:46:91:de:94:38:18:fc:27:79:16:80:b8:f3:08:be:b7:
49:9e:23:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:09:13 2025 by rpki-client