Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft
File: 9hUWPY_cRSP7uCJN89wgese94ck.mft (raw, json)
Hash identifier: vRUhfFnV9o9C0uZw6AnAcb8wxeAHGC9udsDAlv0yY7s=
Subject key identifier: FC:A0:FF:1D:CB:2E:86:7B:D0:4F:07:F4:EE:3F:CF:10:34:2E:46:B7
Authority key identifier: F6:15:16:3D:8F:DC:45:23:FB:B8:22:4D:F3:DC:20:7A:C7:BD:E1:C9
Certificate issuer: /CN=f615163d8fdc4523fbb8224df3dc207ac7bde1c9
Certificate serial: 019A7180A071FA51449A746374CC72009B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft
Manifest number: 32
Signing time: Tue 11 Nov 2025 06:00:46 +0000
Manifest this update: Tue 11 Nov 2025 06:00:46 +0000
Manifest next update: Wed 12 Nov 2025 06:00:46 +0000
Files and hashes: 1: 9hUWPY_cRSP7uCJN89wgese94ck.crl (hash: c0lwKIA1F5xHwJqD3G4POpv/NTMuKjItfyMpLh4CPAE=)
2: RlIkcF8LuODaxIujEnNWDk02pSo.roa (hash: kY34QFN9p9fQ3/mWC+xr3JVSNAC8iRBd/0Q4LhkJ0WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:a0:71:fa:51:44:9a:74:63:74:cc:72:00:9b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f615163d8fdc4523fbb8224df3dc207ac7bde1c9
Validity
Not Before: Nov 11 06:00:46 2025 GMT
Not After : Nov 12 06:00:46 2025 GMT
Subject: CN=fca0ff1dcb2e867bd04f07f4ee3fcf10342e46b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:18:29:fb:d7:a0:80:8f:4b:51:fb:94:fd:
16:d1:90:3a:d0:6f:f2:69:12:b3:a8:dd:fd:ad:02:
bd:99:33:2a:c8:d7:45:25:1f:98:73:0e:02:f9:2c:
09:92:6b:55:1b:d5:9a:c8:23:00:28:ae:ab:62:1e:
69:18:ad:47:2a:32:a5:2a:43:bc:c3:4c:ad:2c:6b:
9c:d5:3a:b3:29:33:a9:cf:29:d1:50:41:c8:30:64:
11:72:93:66:28:b3:2c:fc:15:d0:3b:02:67:67:1a:
d0:7a:21:40:5f:ed:11:c5:08:3d:6b:0f:b5:ac:72:
d2:52:89:d5:93:83:44:26:44:25:09:26:a1:32:06:
e6:2b:13:9a:1c:11:9f:d5:89:b2:59:c5:f5:29:e6:
2c:31:65:4c:23:f3:a4:45:e9:75:7f:c6:ac:52:ac:
c4:87:60:3f:bf:d6:67:97:20:d4:e5:1f:09:15:05:
7e:98:9b:66:ba:77:58:b8:6a:cc:8e:fd:86:05:56:
30:de:bb:b5:e9:73:e7:b5:44:70:cc:e9:cc:07:7e:
96:fd:0f:c6:56:7d:bd:3b:07:e1:77:79:ca:3a:f2:
47:92:32:e0:ea:1d:f5:7a:a5:f6:32:f7:4e:af:d2:
7f:af:67:ea:38:6b:d5:7f:1b:80:92:06:87:66:1a:
5b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A0:FF:1D:CB:2E:86:7B:D0:4F:07:F4:EE:3F:CF:10:34:2E:46:B7
X509v3 Authority Key Identifier:
keyid:F6:15:16:3D:8F:DC:45:23:FB:B8:22:4D:F3:DC:20:7A:C7:BD:E1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8b:02:a3:8a:92:3e:b8:9c:0a:f7:47:e9:92:37:b7:89:80:
21:56:a4:eb:71:10:03:bb:3e:78:6d:43:40:3b:43:53:b4:d0:
81:4b:f5:c2:c7:76:0d:f4:b0:0d:bc:f7:d6:27:62:b1:f9:d7:
7a:a2:9c:46:e9:83:74:9d:bf:76:d6:8a:83:18:37:81:51:ef:
73:a2:b5:ae:00:1e:e0:4c:54:13:3c:63:00:2e:56:3c:4f:e3:
77:0f:b0:c7:ec:9a:9f:e8:35:e3:e1:d1:6a:6e:d5:38:ea:0a:
dd:be:da:5b:b4:7f:92:47:94:9a:43:c1:59:58:0a:fa:98:52:
91:39:de:be:f7:7a:3e:5d:16:e0:0a:a4:ab:14:96:1c:69:d4:
a8:3f:c8:b0:24:40:ca:e5:1d:4d:b6:f7:79:66:87:c6:7a:bd:
00:2c:a6:23:a2:65:bd:ad:9f:37:e7:94:af:87:67:a4:6c:56:
09:83:a1:b3:8b:3c:ff:6a:73:af:a3:96:69:e2:a9:45:81:5d:
21:ac:35:18:0f:61:2d:cd:d1:fe:4c:71:11:a2:9a:e4:26:d2:
23:85:84:21:48:35:37:da:b8:14:ca:fe:92:2b:c9:19:a3:40:
0f:af:e8:c8:eb:e7:84:9a:28:00:5d:15:d9:3e:42:6c:47:b8:
21:be:87:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:13 2025 by rpki-client