Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
File: 9VW6bis9tVIdvHBipYwW3aG58i0.mft (raw, json)
Hash identifier: HnASiUWvDDryE8r/dkNRpcsbWvq8tuaGzVCQtgpoQ04=
Subject key identifier: EE:E1:03:7E:A4:45:45:87:15:99:6C:BA:CF:38:28:09:57:CF:6B:E2
Authority key identifier: F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
Certificate issuer: /CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Certificate serial: 019A725CD8C4CDE19E785EC5B89A61519900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
Manifest number: 04E0
Signing time: Tue 11 Nov 2025 10:01:18 +0000
Manifest this update: Tue 11 Nov 2025 10:01:18 +0000
Manifest next update: Wed 12 Nov 2025 10:01:18 +0000
Files and hashes: 1: 2n7OMl3jQfBIql5u4fGHwPSLtNw.roa (hash: 1rKFkHzCGzWhEvrCyPc6hzfuk0GlXlkcWKE6261l+UI=)
2: 9VW6bis9tVIdvHBipYwW3aG58i0.crl (hash: /ZLy35pbDr+N6h62BS6mD2TqV2B3b/bLTVXp2nvRnFc=)
3: R9C9RHOYfHsQX3_4qdQpXgxkEVg.roa (hash: TG8phgVc45ubyKw+a5c8BVXvVbA9fhRO3sFvs8XmDD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d8:c4:cd:e1:9e:78:5e:c5:b8:9a:61:51:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Validity
Not Before: Nov 11 10:01:18 2025 GMT
Not After : Nov 12 10:01:18 2025 GMT
Subject: CN=eee1037ea445458715996cbacf38280957cf6be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ff:88:c5:7d:7b:f5:0b:17:3d:fd:c5:8b:bf:
f2:fa:25:28:89:a4:02:ff:69:26:3d:f9:b3:c3:da:
3a:51:a4:ee:93:4a:58:bb:44:b6:0d:9f:ec:f3:d3:
68:83:63:64:b7:a3:e6:fb:05:10:2a:68:39:81:40:
3b:ac:ee:83:e0:f1:03:95:d9:27:3b:88:c8:46:d2:
c3:75:50:b3:30:df:6c:ae:80:c1:bc:e9:1e:2a:b0:
ed:76:a5:45:66:cc:ba:2a:69:ac:62:f8:30:b0:5b:
5d:52:a8:0f:04:99:dc:71:c0:08:29:a5:6b:e0:87:
a9:78:6e:ae:ef:00:32:2e:36:66:d6:20:e4:eb:78:
21:8f:f6:8f:aa:a4:75:ed:7a:9e:ca:fd:c9:60:58:
be:d9:77:3a:67:42:c2:0e:e1:1f:ea:40:39:0d:e4:
df:e7:3b:50:02:43:34:4b:ba:c9:98:48:7c:5a:2f:
fb:f9:65:02:14:74:8a:f8:bb:45:0c:f6:0f:df:25:
7a:d7:40:ec:55:a9:07:44:be:aa:d2:a7:68:b1:a8:
9d:0d:26:87:93:05:d1:41:dd:b6:db:33:e4:84:d2:
14:6b:8c:42:72:a3:3e:8d:20:bb:f6:af:23:52:3e:
3b:51:36:18:90:46:3e:9f:dd:34:a6:57:11:5b:80:
ec:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E1:03:7E:A4:45:45:87:15:99:6C:BA:CF:38:28:09:57:CF:6B:E2
X509v3 Authority Key Identifier:
keyid:F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:91:31:0d:bf:6d:32:dc:ac:f3:05:27:1b:72:64:88:08:77:
e6:d7:b5:62:35:35:09:39:51:1b:39:7a:80:a8:14:a4:5e:b3:
dd:35:86:8c:bb:bd:a7:ac:1c:d4:76:17:e7:03:12:2f:f1:61:
c2:2f:31:fa:4c:5d:9f:ed:51:5c:d1:ef:d3:09:98:f7:a6:b7:
cf:cb:43:bc:37:8c:fc:07:9d:b7:91:9e:18:a9:20:ad:5c:77:
58:62:e0:a9:c2:f5:87:9b:77:ec:45:7a:e6:37:16:ba:e7:e3:
d2:d9:af:bc:6e:da:20:7f:e6:f2:3b:33:9d:11:75:02:5b:87:
63:aa:ab:44:e3:38:18:9a:28:25:9c:7a:bb:d4:59:44:9e:bd:
1e:86:ae:d0:8f:1c:97:5c:91:2e:e6:d0:f2:28:13:06:4d:8f:
6b:7d:47:6d:76:f5:b9:11:03:87:3a:0b:c0:2d:dd:37:46:7c:
10:e2:61:3f:3b:a1:6b:cc:a6:03:ec:73:1b:9b:e2:18:5b:39:
a7:71:91:b5:50:cd:aa:17:9a:60:95:09:f1:2b:30:37:dc:ee:
8a:89:4a:c8:e1:3b:27:a4:a3:2d:7e:f7:5a:6a:15:94:d4:57:
ab:77:c2:21:58:af:d5:72:d7:02:eb:af:e6:9b:af:33:a0:c6:
a6:c4:8d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:11:19 2025 by rpki-client