Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: tR/IKP+1b6qZX5p9AT6g1Dt2RkUnkchGp9jHWhkhn5s=
Subject key identifier: BC:B7:36:C6:3F:5F:79:94:76:F5:C1:E8:38:1F:CD:2F:1D:85:66:92
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 019A150612EFD965FFEC208EC7AE4C491889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 0692
Signing time: Fri 24 Oct 2025 07:01:50 +0000
Manifest this update: Fri 24 Oct 2025 07:01:50 +0000
Manifest next update: Sat 25 Oct 2025 07:01:50 +0000
Files and hashes: 1: JPk8qHaA0VqJJwM_cRiEk2hiNN4.roa (hash: UcrJOHgb+5M2bbcwOpZ1qAySq77AEN4vifocol3LdDU=)
2: MaON6tltdE_nNRyafDLxcoztK6E.roa (hash: Sb8QCt7PRXcCVTxqpNcJ/gxYw3sApRrWPJqKe86QFYM=)
3: OI1uK9LvyBYMrxZk6Wtsms4rrxQ.roa (hash: r4xm6yQr/cgOXWzX1uA52pwqnclq3721sVsfso5FXPI=)
4: SWZ731YmHf9GvH8Lkc-8awFctFs.roa (hash: YMn4x1FGAr61bxn/Z7AB4iuUFTZ6bShjnEOsfqmAjsc=)
5: XtH0htLAKG6Q5dcfnWZEaEHDokg.roa (hash: 6hipGrL8gPx/AA1jsYDtYKkvzd7jAI7crI4ZoMmJgjA=)
6: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: C7B5xRmsPS2VVmroP312Em0lsCj/NbTx+qv88hMJ7Lg=)
7: jEuhOWOO-QlWKQlP_vQxpSPLQb4.roa (hash: T76BJeDOcF7APO1x6/gqGhi/5iskR6Zu3KBZKjePpuU=)
8: pADzcECo2Yf0nO80duEMuDGh3X8.roa (hash: /D3kHt6hhWjXdSU0si9ABN/nIQHXorfwBvY2dwdWWD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:06:12:ef:d9:65:ff:ec:20:8e:c7:ae:4c:49:18:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Oct 24 07:01:50 2025 GMT
Not After : Oct 25 07:01:50 2025 GMT
Subject: CN=bcb736c63f5f799476f5c1e8381fcd2f1d856692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dd:a1:fb:90:a6:bb:1e:8e:e3:24:f0:42:56:
1b:93:31:b0:cb:31:de:e8:cb:45:58:8d:24:08:e4:
65:a6:35:d6:44:c4:0f:ff:94:c6:a7:15:8d:45:c3:
a8:06:4a:b0:8e:d7:25:49:10:83:8c:aa:84:be:d4:
c7:e2:d1:a6:ef:99:d6:62:16:0f:7a:04:8f:de:64:
03:5c:01:b2:db:2e:3e:19:51:59:c7:33:9d:c2:27:
a9:53:ae:e3:d4:39:40:11:8f:a2:61:94:ae:ca:38:
72:0a:76:ce:fa:1c:0e:f3:f3:ab:a4:fc:04:45:44:
fa:94:84:90:e1:17:89:56:32:a0:09:79:3c:bd:cb:
72:09:67:1d:56:75:36:35:e7:d1:0e:cf:3d:e5:ec:
93:4e:80:1f:fb:0f:90:04:b8:ed:a3:53:1e:95:c8:
cb:05:10:3f:54:b9:21:da:c1:c5:74:7f:14:18:2f:
6b:37:28:2a:bc:ff:3e:da:f0:33:27:58:ad:92:d9:
eb:14:27:9b:c9:1a:b6:b8:52:b9:b4:87:97:a2:86:
0c:c0:2f:de:da:4d:e1:71:6f:0c:ac:7e:7e:fe:5f:
aa:0a:be:98:eb:2e:9e:15:b4:9f:33:d2:9d:a0:48:
c6:0b:6d:b3:90:81:6d:f5:4c:f6:cd:6d:d3:36:89:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B7:36:C6:3F:5F:79:94:76:F5:C1:E8:38:1F:CD:2F:1D:85:66:92
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:93:65:c6:b0:ab:fa:55:cb:01:e2:28:9d:1b:30:ef:47:ec:
cd:5c:fe:7b:2f:63:62:d0:13:52:cc:80:9f:9d:9e:52:c3:e2:
69:10:bf:2b:4e:b6:f9:f8:17:c9:81:1f:b3:68:6b:69:b9:bf:
f0:60:9d:17:7e:ca:8c:fc:62:50:7a:6c:7c:ec:ed:b0:04:60:
a8:97:78:63:02:f9:23:68:80:ab:25:76:d8:83:61:63:b1:fc:
c8:ae:c5:7d:51:48:0a:7e:f0:02:17:20:a6:6c:e1:3e:aa:b1:
d0:65:80:52:a8:2c:e8:a1:6c:62:d9:a4:6c:bb:ea:93:fb:f3:
89:da:79:07:06:a3:54:bb:76:5d:cf:88:81:8a:9e:21:06:ea:
dd:cf:2e:d0:09:d9:e9:58:07:a5:91:45:d8:42:b3:3c:4a:c5:
ab:ed:06:cf:50:9f:27:36:6c:6b:8b:c8:c5:9e:ff:cf:fc:09:
1e:17:8a:3d:c1:d0:62:06:21:e4:c3:12:64:9b:a5:cd:f2:fd:
e8:89:f6:e3:65:21:db:4e:f5:7e:77:17:69:6e:34:20:9f:55:
bd:9f:5b:07:b4:97:c1:0d:0d:ea:27:f2:61:a8:2d:75:a5:d1:
3f:52:86:63:ab:7f:1d:2f:d4:12:8c:ea:f0:d8:1c:ac:4c:01:
e5:4c:7b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 09:54:39 2025 by rpki-client