Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
File: 9RKnWcZemEm7fFMtXrtESZpRW_8.mft (raw, json)
Hash identifier: 0pT986IyheiFBiJqcSREIoJMjyPBZVBvgwALW1jrWGw=
Subject key identifier: 9C:0C:33:E1:27:84:E2:13:F9:1C:3B:5B:B9:B3:AC:CA:C0:4A:BA:C1
Authority key identifier: F5:12:A7:59:C6:5E:98:49:BB:7C:53:2D:5E:BB:44:49:9A:51:5B:FF
Certificate issuer: /CN=f512a759c65e9849bb7c532d5ebb44499a515bff
Certificate serial: 019A7149B60E40B93D9AE7EC1A2DF23D1411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
Manifest number: 06EC
Signing time: Tue 11 Nov 2025 05:00:47 +0000
Manifest this update: Tue 11 Nov 2025 05:00:47 +0000
Manifest next update: Wed 12 Nov 2025 05:00:47 +0000
Files and hashes: 1: 9RKnWcZemEm7fFMtXrtESZpRW_8.crl (hash: s6Fpuue3OpKbKaMYdG/szcjQM90mF5550SAzvEnD71s=)
2: PHx_cn3cwOP0zIbd-tSOarri2jU.roa (hash: jvXJa9wGshKFR0UvbJd8wg24Fv3g0IRm/OGSnIujd88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b6:0e:40:b9:3d:9a:e7:ec:1a:2d:f2:3d:14:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f512a759c65e9849bb7c532d5ebb44499a515bff
Validity
Not Before: Nov 11 05:00:47 2025 GMT
Not After : Nov 12 05:00:47 2025 GMT
Subject: CN=9c0c33e12784e213f91c3b5bb9b3accac04abac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:50:c5:e9:f7:ce:f1:48:fb:91:56:1b:98:
a0:51:8b:a3:5c:55:f6:0f:c3:51:76:d2:b1:20:ff:
47:b9:46:0f:af:7d:f6:6c:74:41:56:81:e2:78:33:
f5:9f:5a:5a:44:3b:36:fb:c2:77:19:3f:84:e6:6f:
c4:5e:8a:9a:06:76:33:fa:76:19:e6:e8:ca:01:3b:
ae:33:14:47:d6:eb:1d:43:8b:9b:0a:05:fd:3e:ea:
f0:23:4e:5e:aa:24:3c:ab:57:5a:93:fd:1a:50:e6:
a5:ff:be:d1:c5:81:59:11:7f:0f:86:7a:46:76:44:
16:a1:f5:b4:49:85:6b:3f:ac:b6:59:fd:53:24:5f:
4d:db:3c:c7:77:cd:d3:0c:1f:50:b6:1d:c9:4a:09:
71:b1:52:aa:6e:de:4f:37:11:3e:85:31:3b:1a:48:
2c:19:f7:ed:6e:71:0b:7b:9f:6e:52:63:b8:aa:a8:
01:82:61:a7:fc:61:bc:09:51:d1:6e:04:6a:47:43:
57:97:e5:2b:36:36:e6:e4:b6:1b:fb:68:ff:c3:a7:
46:db:bb:ba:65:17:0f:25:ab:27:70:80:3f:b8:1f:
74:fd:a2:41:79:7b:76:90:d5:ba:5b:55:9a:f9:8c:
50:50:64:02:05:96:5a:96:86:40:85:39:97:f8:0f:
66:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0C:33:E1:27:84:E2:13:F9:1C:3B:5B:B9:B3:AC:CA:C0:4A:BA:C1
X509v3 Authority Key Identifier:
keyid:F5:12:A7:59:C6:5E:98:49:BB:7C:53:2D:5E:BB:44:49:9A:51:5B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e2:a3:3f:4b:4b:42:74:ae:81:d8:55:1d:f6:bb:79:c6:8e:
85:2b:b6:94:ba:57:5f:f1:fa:d5:f1:07:eb:9c:57:23:93:54:
13:97:57:dc:19:ba:ad:78:89:d5:11:1b:a3:87:de:b8:77:d1:
6b:8f:ff:61:5e:16:94:cb:38:3b:ad:b8:37:6f:40:8c:9b:80:
3b:04:be:b0:50:59:7d:ba:c5:c6:09:6e:b9:a4:c9:c0:f4:bf:
c3:49:5b:e0:1d:54:2e:ea:00:95:30:f5:a7:67:90:89:2c:45:
83:51:17:4c:94:3a:19:c8:8d:f5:a5:23:ee:25:fc:10:a9:fd:
84:8d:8f:70:7d:c2:34:ad:4a:4b:76:e8:0a:7a:2f:b5:a0:1a:
03:90:5e:29:75:35:dc:58:c5:d6:eb:c5:07:1e:14:58:cf:2b:
54:0b:9f:ed:61:c4:ea:88:d5:36:27:b3:b3:7c:6c:b6:53:d0:
b8:82:89:e5:36:7c:71:06:c8:30:79:69:62:48:e2:82:29:e3:
c4:81:46:86:b5:4d:41:d9:38:10:41:9a:fb:7e:15:32:00:f9:
76:88:00:36:f7:8b:0d:84:5d:09:bb:f8:63:1b:4c:e5:df:6b:
48:6e:db:3f:5a:c6:25:2b:8f:df:41:2c:de:ac:d2:f6:86:9d:
2b:bd:5f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:44 2025 by rpki-client