Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
File: g9Nuy69V5GTgCzmH2lJktq8tz4g.mft (raw, json)
Hash identifier: buB8ewUttqHCMsIcpGZO+3epGdqam1AF3hkxZWUyDE4=
Subject key identifier: 3D:56:43:0D:6E:2F:7B:6C:2F:97:1B:36:B6:37:02:2C:0A:67:E6:99
Authority key identifier: 83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
Certificate issuer: /CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Certificate serial: 019A70A4DB432A879F5CAADEA9F908E584D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
Manifest number: 0C0B
Signing time: Tue 11 Nov 2025 02:00:43 +0000
Manifest this update: Tue 11 Nov 2025 02:00:43 +0000
Manifest next update: Wed 12 Nov 2025 02:00:43 +0000
Files and hashes: 1: Ep6x42DXRSqizolUteEfvKxUcLA.roa (hash: R7QtcNnXyeV8OJfFTG/3xT0jdYWPM+BRX6IIEmRZyXk=)
2: g9Nuy69V5GTgCzmH2lJktq8tz4g.crl (hash: yHAUKaoPitMz1P9/QWia0UPL+y+RPU80TR3jqWbDtIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:db:43:2a:87:9f:5c:aa:de:a9:f9:08:e5:84:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Validity
Not Before: Nov 11 02:00:43 2025 GMT
Not After : Nov 12 02:00:43 2025 GMT
Subject: CN=3d56430d6e2f7b6c2f971b36b637022c0a67e699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:12:53:de:c3:14:02:04:a8:4b:16:b9:fc:
a6:4b:86:b3:2a:46:9b:2f:ea:62:6e:2a:7b:4b:7e:
c2:89:0b:92:ec:43:d8:60:74:a8:f5:c3:f0:93:d1:
65:8a:7b:17:29:cf:e3:04:0e:50:a5:ec:e4:5b:69:
f9:dc:03:13:da:5e:b1:ea:42:aa:cd:e5:e2:5f:56:
62:73:21:17:d0:41:66:11:6e:29:7d:06:75:71:f3:
9e:b5:e7:2d:d3:21:e0:95:5c:70:53:68:33:39:33:
1e:6c:e8:1d:80:76:ef:52:54:53:6f:8e:dd:ca:94:
5e:a6:0a:80:c2:24:5a:72:40:23:91:a1:f2:aa:7c:
92:75:c7:60:43:44:85:ba:a2:84:c6:0b:47:6f:01:
7c:a6:17:ed:5f:cd:38:04:6b:0b:07:66:f1:2b:27:
81:cb:10:46:37:da:89:fa:2d:9e:77:3d:11:ed:81:
99:d9:91:a2:a3:85:d3:d0:ac:18:55:66:45:be:af:
29:df:80:42:17:5f:ba:5d:45:b2:f8:5f:db:67:08:
52:f7:63:c3:ac:eb:7a:22:06:c2:86:d2:c8:6c:59:
02:f5:5b:c6:d3:b0:56:dd:08:ed:0e:7a:c9:1a:65:
7e:c2:cf:94:48:a3:4f:ae:b6:39:d5:c8:0a:d8:c7:
a3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:56:43:0D:6E:2F:7B:6C:2F:97:1B:36:B6:37:02:2C:0A:67:E6:99
X509v3 Authority Key Identifier:
keyid:83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ac:61:0c:c4:3f:47:cf:30:a1:f9:66:ed:cc:8c:33:40:5b:
e1:60:69:f7:89:f8:ea:35:38:34:ec:14:6b:8e:7b:6f:ec:91:
33:ba:60:42:b8:98:a5:95:73:37:c5:67:f0:6d:24:2e:d8:5b:
04:47:f9:a4:1a:18:26:7d:0f:39:a1:0a:20:8d:8b:51:80:07:
ab:03:2d:07:91:9d:f4:65:24:41:2e:47:68:00:9b:ef:b0:4e:
68:6c:36:34:27:84:c2:f7:cf:cb:78:70:9e:2f:07:bd:c8:2b:
a6:7c:50:50:b4:d8:29:d4:3d:1e:96:71:44:48:62:0a:8f:be:
d7:cb:de:f7:d6:93:7e:4c:86:96:dd:01:16:e6:7e:d0:41:71:
78:7a:90:06:d1:0d:bc:6f:a9:4b:84:c3:21:8c:1c:72:b1:bc:
6f:8c:59:f3:22:39:33:02:eb:0e:e3:cb:95:2d:4c:9e:12:e2:
9d:97:22:97:23:21:e9:b9:d2:a4:52:07:a1:10:b5:48:b9:06:
ec:be:87:33:8c:57:6d:c4:ee:f4:80:1c:c9:32:51:a4:32:99:
c2:7f:b5:1a:25:4e:5b:7c:58:5c:85:b1:ab:15:ca:6b:63:24:
a7:e6:c6:64:c0:d7:c9:d9:bb:f6:d9:94:04:24:4c:46:35:40:
08:f4:40:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:57:20 2025 by rpki-client