Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
File: v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft (raw, json)
Hash identifier: Xmc3sHQqRdU/pDlCNQIj9+4QMU0Bp30KiVJQnmWaqUk=
Subject key identifier: 9E:82:A0:93:3D:D1:05:7E:67:3C:54:95:6B:9D:0D:A9:0A:80:12:C4
Authority key identifier: BF:D0:70:B0:C9:AD:D9:29:72:FE:FC:56:6C:11:2D:93:71:7C:4D:6C
Certificate issuer: /CN=bfd070b0c9add92972fefc566c112d93717c4d6c
Certificate serial: 019A725FE28E4B254D5D6B89A93E21637748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 10:04:37 +0000
Manifest this update: Tue 11 Nov 2025 10:04:37 +0000
Manifest next update: Wed 12 Nov 2025 10:04:37 +0000
Files and hashes: 1: fkFOu25-CLt_pqgxFyon0OGUb4o.roa (hash: sKSFZUpWtwcAyL2D36Fml5sLNaF1815anfn4zderbaw=)
2: v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl (hash: v4d7CXNbmKEFJd1lHBv4ZRCPBFL/1uDyvQ8I8D3ApSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5f:e2:8e:4b:25:4d:5d:6b:89:a9:3e:21:63:77:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd070b0c9add92972fefc566c112d93717c4d6c
Validity
Not Before: Nov 11 10:04:37 2025 GMT
Not After : Nov 12 10:04:37 2025 GMT
Subject: CN=9e82a0933dd1057e673c54956b9d0da90a8012c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a5:20:f4:87:42:40:83:8f:97:c8:68:c6:90:
f1:0b:bd:95:25:b8:3d:a4:4b:9c:02:87:23:56:7d:
df:a2:11:f0:48:05:94:ab:46:09:5d:5e:c9:a6:58:
da:db:3b:a2:0a:80:a3:fe:41:58:f1:01:23:5a:e8:
3a:f9:2c:22:ea:a6:5d:47:f2:8f:a8:07:b1:f9:f8:
8d:62:9b:2a:33:d3:e9:09:8c:44:63:13:0e:57:e3:
cb:8d:41:82:e1:1c:5f:1f:1e:58:9b:49:d2:38:0f:
b2:ae:be:dc:d7:96:54:7b:2f:81:8a:02:9c:1f:51:
6e:f1:9e:6c:14:90:f5:ff:b5:c2:67:70:79:50:59:
35:ef:48:42:ea:59:13:6e:26:42:fd:a3:23:7f:74:
4b:94:06:41:53:eb:e6:d1:90:35:b9:4f:f8:6c:7c:
d6:49:aa:57:f0:cb:2f:7c:8a:e1:34:bf:91:5c:30:
ee:66:8a:5a:cf:cd:c3:f1:77:b6:d5:ee:01:87:ff:
51:6d:e2:38:08:7c:4a:58:4e:aa:26:5c:68:47:d4:
02:0a:ac:2b:fe:4f:67:08:e4:e0:0c:ea:3f:33:5b:
18:18:0b:a5:56:f4:8d:27:d2:88:0d:b3:ad:ea:6b:
47:ea:af:b2:ad:52:bc:a2:a4:1e:c4:6a:b3:f3:84:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:82:A0:93:3D:D1:05:7E:67:3C:54:95:6B:9D:0D:A9:0A:80:12:C4
X509v3 Authority Key Identifier:
keyid:BF:D0:70:B0:C9:AD:D9:29:72:FE:FC:56:6C:11:2D:93:71:7C:4D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:85:49:a2:17:0a:7f:d1:9f:4f:f8:e9:03:07:f7:9f:ec:2c:
4a:22:b8:cd:0d:c9:8a:1a:7f:14:68:3f:50:b9:34:b0:ce:ee:
ee:e3:e2:16:25:d2:7a:c0:21:de:57:12:3f:85:c1:aa:68:a5:
d8:7b:18:2b:5c:ba:b7:a5:f1:1c:d0:dd:b0:69:99:37:2b:f2:
43:70:28:f3:fd:3b:ed:5d:b9:fb:61:cc:c5:8c:f7:ef:ec:ee:
41:6e:72:59:2c:60:27:cd:e2:f2:aa:29:89:c4:90:9f:30:03:
e9:6c:1b:c8:51:62:f6:73:0d:b6:59:a4:b6:3a:a1:0a:5a:dc:
b7:37:a3:0e:1e:00:70:d3:31:30:c7:86:9e:fb:4e:fd:be:b2:
6b:ff:61:7c:45:f3:8a:71:99:81:10:bd:4d:44:45:be:cb:40:
c7:75:a1:4f:83:71:28:9d:f6:5b:61:3a:ff:52:c2:e1:cb:72:
e3:b2:67:5e:dc:6d:df:a5:af:02:bd:cd:7d:13:48:aa:91:1b:
dd:ce:aa:17:04:d0:3a:e6:a1:c2:bb:26:5b:e9:76:08:9c:9a:
60:9d:11:95:c0:de:c2:85:f3:3d:13:d6:81:70:f1:6a:71:fb:
20:23:0e:a0:fd:87:f7:8a:46:b7:ec:3e:71:4c:5e:e4:ce:30:
be:fd:31:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:08 2025 by rpki-client