Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
File: e9WZftB1wimLRhIl4QYPV3sdfU0.mft (raw, json)
Hash identifier: hQOuOlcDOuYLmBg1EpLmn5kh3rbQVPrPW3QiXfbxJWU=
Subject key identifier: 9C:0D:E8:4D:BD:ED:05:59:AD:1A:23:EF:61:06:D2:88:03:81:9A:EA
Authority key identifier: 7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
Certificate issuer: /CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Certificate serial: 019A7301B2A83142E5C8D1BEAD3AD4E76CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
Manifest number: 0AEF
Signing time: Tue 11 Nov 2025 13:01:22 +0000
Manifest this update: Tue 11 Nov 2025 13:01:22 +0000
Manifest next update: Wed 12 Nov 2025 13:01:22 +0000
Files and hashes: 1: GcQb7Wci-pVX30WsNPMX_X8ZJVY.roa (hash: 0NLct9+IWSmNLab833+pcvKvnzISJQn90Hh82nLgM+o=)
2: LMLHHOF93hK4OUpbUUvvwD0c0kY.roa (hash: 02jA2t2eBDun8+LsbWX6msyQRXMN/G2Ajm0JM11hXxw=)
3: e9WZftB1wimLRhIl4QYPV3sdfU0.crl (hash: TmOe8urynINM9IwejnLgXsuKBPj55px996a1ZYf+fAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:b2:a8:31:42:e5:c8:d1:be:ad:3a:d4:e7:6c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Validity
Not Before: Nov 11 13:01:22 2025 GMT
Not After : Nov 12 13:01:22 2025 GMT
Subject: CN=9c0de84dbded0559ad1a23ef6106d28803819aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8b:88:17:fc:a5:7b:98:39:dc:34:e3:ef:78:
9b:42:f5:4d:8e:e2:95:4b:b6:b6:a2:85:1b:5b:91:
87:e9:94:9f:33:46:9e:53:49:85:1d:89:8a:71:5d:
4f:68:32:2e:38:6b:fb:65:18:85:94:07:24:52:ef:
db:79:3e:e1:cf:c0:59:2d:ed:c9:ad:9d:a2:34:a4:
d3:67:8b:c5:da:e0:a9:87:bf:c8:51:3e:3e:ff:57:
5a:c3:69:8e:51:0d:00:69:5d:9f:55:55:7b:30:de:
54:d5:58:37:83:a2:f3:b5:76:05:c7:5f:2b:cf:38:
2e:47:60:4a:dc:35:29:6f:a2:04:0f:39:e2:f8:c8:
95:47:6e:e8:c6:09:28:a0:5d:bf:bf:2c:08:2b:ee:
2b:4b:62:17:6d:a4:41:d2:0b:19:a2:0e:ec:f2:a7:
92:0b:36:9a:65:cd:99:79:b7:8d:0e:80:da:de:61:
a2:34:ee:88:c7:01:0c:e6:a6:a3:00:22:82:dc:8e:
4a:17:0e:67:4b:7e:4c:84:63:ef:bf:28:e0:bc:ab:
b1:5f:d8:ad:8c:58:49:20:1b:c5:8a:2b:f8:80:f2:
4c:75:41:d6:03:5f:27:59:8c:33:16:ec:8e:73:e2:
81:41:06:e0:d7:5f:3f:46:ef:90:3d:b7:ba:14:98:
00:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0D:E8:4D:BD:ED:05:59:AD:1A:23:EF:61:06:D2:88:03:81:9A:EA
X509v3 Authority Key Identifier:
keyid:7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:80:7b:39:d0:f5:92:45:fc:32:1d:84:90:31:99:66:10:b6:
e2:d0:fb:b1:8a:a4:ab:8f:7f:a8:43:d4:e5:05:58:81:4f:01:
53:f8:33:7e:eb:4d:c1:25:79:ab:eb:38:e0:b2:bd:11:72:6f:
56:d6:46:5d:56:11:11:16:20:ea:b5:23:9d:ee:15:bb:90:e3:
21:6c:a6:2e:24:fe:4c:a7:07:75:fc:cc:52:0d:56:61:b7:c8:
56:5a:ae:5f:6d:2d:53:59:5a:38:f1:a0:57:2c:c5:fa:07:e0:
7c:09:56:a0:59:95:f7:ab:96:78:35:d4:a3:4c:5f:a4:24:d7:
71:ab:48:ab:2f:3d:78:d2:d2:a8:19:65:2b:b9:22:23:c0:78:
ae:8a:8c:95:94:e2:6a:5c:9b:c5:be:b4:4c:ba:7d:b6:38:1c:
f5:d8:d9:89:5d:e2:d4:d7:6d:2f:d2:e5:69:9d:72:88:6a:89:
a8:8a:e9:35:39:bd:4e:01:11:24:79:a4:db:bc:02:ce:33:16:
45:18:39:d6:97:99:15:3e:b4:e0:17:78:29:44:eb:57:94:24:
c3:f1:b0:b2:8e:0b:e8:94:d0:4a:dc:25:4a:50:a7:be:02:bd:
82:2a:e1:bb:4c:a6:a0:9f:fa:30:46:91:01:85:de:4a:cf:de:
16:44:b2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:53 2025 by rpki-client