Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
File: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json)
Hash identifier: mmws6VFi9aFv9SJvzphJJrGsCd/4pz2lgaYxolKbpGs=
Subject key identifier: 46:EF:9E:C6:98:EE:05:53:E0:23:C5:23:2E:A0:8D:63:0E:AF:5C:DD
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Certificate issuer: /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial: 019A72266D0D9D15947F5CF30A382AC911F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
Manifest number: 0E00
Signing time: Tue 11 Nov 2025 09:01:52 +0000
Manifest this update: Tue 11 Nov 2025 09:01:52 +0000
Manifest next update: Wed 12 Nov 2025 09:01:52 +0000
Files and hashes: 1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: OtE9eU7K0RQIJngIsVKFW0Y6jISbip8zYQlpapxRVho=)
2: lTwG7fexEhfG1KlVMWVQwuwbbtc.roa (hash: bfD7+ofvPCOaA8CmUpbLhJtSVYv9giSBukJUfQkg6wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6d:0d:9d:15:94:7f:5c:f3:0a:38:2a:c9:11:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Validity
Not Before: Nov 11 09:01:52 2025 GMT
Not After : Nov 12 09:01:52 2025 GMT
Subject: CN=46ef9ec698ee0553e023c5232ea08d630eaf5cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:27:16:3d:36:c1:2a:66:c8:8d:bb:ea:17:04:
51:6a:cd:4c:06:b0:ce:a3:4d:92:65:3f:61:48:53:
b1:95:27:8d:52:7a:ef:0e:85:6d:8e:45:68:85:4f:
d2:e3:d5:ca:a3:f0:3a:8b:7d:98:63:d8:ca:2e:05:
e2:e0:93:30:89:c3:d9:23:62:73:34:1a:51:8b:97:
d3:b0:2f:98:d0:e5:06:28:53:2a:8d:1e:61:ff:69:
30:c4:a1:c0:f1:8c:53:ed:15:af:63:49:f0:28:df:
51:10:92:c2:29:02:60:fd:33:c8:c9:bc:6a:3f:ff:
60:be:21:21:0f:b2:35:4b:06:8b:26:31:6d:d4:fc:
93:bf:41:3b:de:88:f4:ac:96:8d:a4:1e:b7:ca:21:
77:d4:22:f9:00:11:51:ce:b2:0a:1e:a4:1f:d2:41:
9b:66:c5:33:73:70:1e:69:43:9e:98:e2:fb:e0:67:
e7:f8:32:13:ba:8e:64:7f:b9:95:74:ed:39:5e:e2:
39:bd:e1:c8:09:ae:0d:bb:55:11:f9:7f:f6:d0:7e:
28:4e:ce:64:c6:cb:c0:47:b5:ca:a5:36:a5:31:62:
0c:70:69:bc:e0:e2:2d:b8:ae:8a:31:3c:e5:65:e5:
ed:33:e6:5b:70:55:0d:63:22:73:67:4d:d2:3e:6b:
6a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EF:9E:C6:98:EE:05:53:E0:23:C5:23:2E:A0:8D:63:0E:AF:5C:DD
X509v3 Authority Key Identifier:
keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d3:ee:37:15:f6:80:15:1a:1b:ca:5b:46:ed:7e:e8:8c:7f:
30:11:5d:10:c4:7f:aa:ff:20:65:85:0e:99:2e:98:46:7d:03:
d6:50:0a:84:92:f8:92:02:41:31:0b:fe:f2:8d:0e:3d:c2:1b:
cb:93:c6:3b:02:f2:21:36:df:2d:dd:6b:2f:8e:5b:b9:ad:25:
41:11:b5:b9:43:28:90:1e:d2:05:92:0d:59:5a:c4:77:63:8f:
f7:fa:a5:19:c6:a9:25:64:24:93:23:62:4e:61:44:8c:27:64:
84:a7:1f:e1:55:02:5d:c5:c7:08:73:d8:ff:cc:ab:6d:84:20:
ef:31:0f:15:f2:64:f3:b3:8d:6a:75:eb:ac:5d:02:36:3d:e6:
7a:f9:50:a1:f7:d6:ab:c3:8f:82:58:54:4f:3a:ed:09:3c:f2:
4f:bf:00:12:c5:1d:a5:b1:23:0e:85:fe:46:cd:a9:43:2c:a1:
13:8b:a1:7b:eb:8d:bd:b5:6c:4a:0e:45:b9:3b:7a:66:77:3c:
e9:2e:5e:57:05:3a:0b:c1:10:cc:55:b7:43:38:ca:0c:37:61:
f3:7c:81:27:7d:5f:7f:ca:3f:6b:2e:56:fd:5a:a3:74:5d:0d:
47:b7:90:30:14:df:4d:3f:78:45:12:8a:86:1c:05:18:ac:4b:
e4:40:7b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:03 2025 by rpki-client