Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
File: 9KvMeaNn2cASwWhKhCKZbNxD3nY.mft (raw, json)
Hash identifier: GxxBkgAZG9C+62MqNNuU0oJbLnJBrWw8gSPDXk6fue8=
Subject key identifier: EB:E2:EB:39:0D:79:98:06:DC:72:A7:38:D4:04:E7:E4:9E:F3:49:78
Authority key identifier: F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
Certificate issuer: /CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Certificate serial: 019A15E0999059A678257BC9972D01F9ACCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
Manifest number: 050E
Signing time: Fri 24 Oct 2025 11:00:32 +0000
Manifest this update: Fri 24 Oct 2025 11:00:32 +0000
Manifest next update: Sat 25 Oct 2025 11:00:32 +0000
Files and hashes: 1: 6vjl9U2iQ2PU377HYgeQNGNavVA.roa (hash: 9lo8xMTqnMTjqGzAvxVHUfsjdWxdily2JUl3SHSBWVE=)
2: 9KvMeaNn2cASwWhKhCKZbNxD3nY.crl (hash: hmKrqY9DC/UixaU+B/GrvS1lmx33bO72ZBCAI5dEEUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:e0:99:90:59:a6:78:25:7b:c9:97:2d:01:f9:ac:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Validity
Not Before: Oct 24 11:00:32 2025 GMT
Not After : Oct 25 11:00:32 2025 GMT
Subject: CN=ebe2eb390d799806dc72a738d404e7e49ef34978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:c6:6e:1a:01:1e:88:3f:6e:7d:df:2c:23:
9e:e9:68:5b:60:a3:d8:e8:0f:fd:c7:18:93:2b:88:
71:89:b0:14:48:22:b1:b8:46:46:f3:84:e2:a3:89:
a6:dd:11:c2:64:81:00:e5:fd:d9:d2:f3:88:7e:6e:
08:35:4f:e7:63:dc:6b:d1:24:c1:2c:c5:be:d4:9a:
7b:32:be:30:3a:90:7b:f0:74:d8:6f:4f:d8:8c:f7:
0d:30:9c:45:f1:4b:05:2b:f4:19:74:34:61:10:76:
a6:93:60:fb:65:07:a7:e9:7c:38:f1:bc:6f:fe:55:
d0:e8:74:85:b2:07:ba:2e:1b:86:85:bb:9a:83:ca:
ea:2e:a7:a3:b2:8e:ba:c6:8f:c0:98:63:f0:04:3e:
cc:d0:ae:37:2e:3c:4b:98:76:84:1e:32:b3:a8:fd:
52:b8:32:98:24:52:c7:d6:13:43:d0:1b:cf:7a:7b:
9f:13:e0:e5:f3:79:58:99:53:e0:d3:f2:26:7e:f0:
ce:b2:88:aa:74:08:7d:b0:0d:f7:4f:5c:03:ee:80:
69:6c:b5:9e:ae:61:9a:57:1f:c2:d1:00:92:f3:ef:
61:73:ab:4d:41:e7:77:f5:d2:48:62:e1:7d:8e:31:
94:48:bf:7d:52:47:57:e5:c5:97:cb:8f:f6:54:52:
51:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E2:EB:39:0D:79:98:06:DC:72:A7:38:D4:04:E7:E4:9E:F3:49:78
X509v3 Authority Key Identifier:
keyid:F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:14:c4:8b:f5:14:d2:53:89:63:a8:6d:f2:06:d4:8f:e1:17:
bc:9f:68:5a:59:db:35:06:e7:f7:a4:8e:e6:37:80:74:00:37:
1a:45:eb:75:49:11:39:4a:86:b5:78:38:cb:63:ef:f8:14:5b:
ca:bf:5a:f7:36:4a:2a:c9:07:7e:da:28:a9:a2:25:f1:f9:ce:
b6:3b:63:a0:0b:73:0f:b5:55:8e:13:0e:ac:c0:c6:c2:01:7a:
bf:c4:01:4c:56:1f:23:af:42:98:fa:4a:85:8b:6c:a6:aa:64:
bf:a5:5d:16:6e:90:a1:75:34:ad:94:19:51:cd:45:10:a1:10:
21:d1:71:f2:ba:ba:f6:e3:34:07:f6:41:47:c1:92:e7:92:dc:
5c:68:64:89:6b:c1:bf:13:f8:e2:3f:61:e7:8d:7d:d5:90:79:
5f:31:d4:62:87:3d:72:30:89:88:2d:d9:1d:c1:83:af:46:4c:
77:06:60:24:2f:7b:2f:36:07:6e:5e:6a:9c:c1:9c:3f:b5:9f:
f1:34:60:29:25:e8:bb:b2:75:98:80:17:46:7e:66:81:50:bc:
83:ba:8e:60:11:e2:07:b0:9a:16:a3:40:45:3d:ed:2d:f5:59:
ca:1c:01:58:b0:87:53:85:59:9d:0b:55:dd:89:0b:24:ce:29:
99:4c:1d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 20:44:51 2025 by rpki-client