Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
File: m9bIYDQsx5nCgHT2mXaKjsvapS4.mft (raw, json)
Hash identifier: ifLWZ8lNuRS7Uz+DaQM015BtyTQ92aEeSp1O0/EIoZg=
Subject key identifier: AC:8A:E6:22:1D:3F:C6:AE:EC:82:3F:27:7D:E9:27:F5:AC:C7:BB:67
Authority key identifier: 9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
Certificate issuer: /CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Certificate serial: 019A729386CD18688713A97CC90B86B0D759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
Manifest number: 14C6
Signing time: Tue 11 Nov 2025 11:01:02 +0000
Manifest this update: Tue 11 Nov 2025 11:01:02 +0000
Manifest next update: Wed 12 Nov 2025 11:01:02 +0000
Files and hashes: 1: E9yjq7sNmTyPb-NC6kzqBRLzrkw.roa (hash: Fv8DNDjTn+xqZTnmPhsaO+M3G5osAwVvGy2YaFQtoP4=)
2: m9bIYDQsx5nCgHT2mXaKjsvapS4.crl (hash: DWg1HPJsiuCTYMKuOu9DXm33XY6H6QGU58iq3JoER6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:86:cd:18:68:87:13:a9:7c:c9:0b:86:b0:d7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Validity
Not Before: Nov 11 11:01:02 2025 GMT
Not After : Nov 12 11:01:02 2025 GMT
Subject: CN=ac8ae6221d3fc6aeec823f277de927f5acc7bb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:da:3a:07:d1:fb:e3:00:0e:1a:98:23:c8:0c:
85:1b:3e:7b:8d:5d:9e:58:a4:3e:b8:cf:e6:af:37:
e2:d7:8a:18:2a:42:d1:2c:24:4a:18:aa:53:2f:6f:
00:b4:50:ed:90:3a:00:b4:6c:0d:a4:83:d2:bc:a7:
17:5a:40:80:b0:0c:33:a3:65:68:b5:ad:48:fa:3e:
27:10:f5:04:c4:ac:3e:3b:4b:a8:82:b6:39:ad:28:
da:78:52:60:13:e5:b9:cc:a0:00:96:6b:69:e6:86:
12:e1:a7:17:11:8e:d9:85:10:40:c0:9b:56:0d:7d:
dc:9d:bc:92:0c:bb:82:20:ff:8a:1c:71:b3:87:77:
25:dc:a5:4a:36:9b:4b:34:98:18:35:c8:b9:6d:32:
56:3c:99:1d:f2:8b:ab:dd:41:4b:89:3a:82:f8:48:
23:65:a7:9d:51:8f:0e:11:b7:0e:4d:1f:d7:52:93:
e6:57:a9:93:53:0b:b1:58:c4:fd:24:2a:3b:b1:6b:
97:60:16:1a:60:16:c0:57:99:29:8d:5d:b7:5a:4a:
9a:c7:d5:d0:80:e7:79:ac:36:1c:72:4c:64:d3:0c:
a2:39:bc:94:57:7b:31:9d:3b:ee:aa:b8:a4:2f:b4:
29:7f:64:3c:dc:fc:a3:e3:9d:73:44:63:53:2c:19:
18:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8A:E6:22:1D:3F:C6:AE:EC:82:3F:27:7D:E9:27:F5:AC:C7:BB:67
X509v3 Authority Key Identifier:
keyid:9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:89:b2:eb:e3:3a:eb:e4:f9:db:6d:f9:4e:18:d9:8f:b9:42:
42:6b:52:1b:61:76:d5:24:d3:39:43:fa:49:86:77:d6:c9:f7:
9b:fd:19:03:1b:86:36:66:41:f6:5e:da:d9:5c:e0:bd:52:44:
e2:a5:0a:72:c9:7f:e3:2e:10:54:4e:61:e4:d1:cd:90:f6:1d:
5c:d7:c8:fe:d7:b7:31:c6:e7:44:28:d7:fd:8f:48:62:4e:c8:
2e:45:3f:6b:23:92:92:dd:e5:1c:68:3b:0e:8d:f2:bb:15:55:
03:83:98:67:a1:82:3c:fa:b9:4a:f1:36:68:5f:e1:8c:20:43:
e2:ed:a9:4b:3a:43:71:f6:b9:24:6b:f5:f7:19:78:42:46:c9:
08:1a:18:b7:ec:3e:e5:ed:84:5f:15:8f:04:df:1f:72:dc:65:
b3:96:39:58:f0:84:8c:c5:a6:52:17:5b:46:78:80:0c:50:d6:
e8:c8:f7:3e:77:7c:23:c0:fc:b8:31:0b:e8:19:75:90:b0:4d:
bd:2f:14:e4:25:7a:ba:d1:98:42:ff:94:cd:18:9a:c5:d7:3d:
6a:11:1f:36:bf:ab:1c:95:54:25:d7:48:fe:79:56:9a:ff:91:
6d:53:6c:73:01:bc:1d:e6:37:e1:44:ee:4d:a5:a2:c7:ef:e8:
9a:83:d0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:54 2025 by rpki-client