Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
File: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft (raw, json)
Hash identifier: HHTWm2nStuKtQDWYNmWHWiISTVxzvfw5r9iFo+WaRKU=
Subject key identifier: C6:F5:07:77:C0:ED:57:3D:CC:A2:08:0C:B4:E4:27:09:5D:DF:80:98
Authority key identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
Certificate issuer: /CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Certificate serial: 019A5DF9E26E513202B237824BC251A6D757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
Manifest number: 0DA7
Signing time: Fri 07 Nov 2025 11:00:48 +0000
Manifest this update: Fri 07 Nov 2025 11:00:48 +0000
Manifest next update: Sat 08 Nov 2025 11:00:48 +0000
Files and hashes: 1: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl (hash: /bIrqWZbNcGJv+QThSIiDzIPEbSQ2wNcCJGVW0l7xDc=)
2: XByMhEpXEd6J8xFbLv_KRyhaqcw.roa (hash: NwJKPF0Lzpc4seej3vkSrBp6N1b9ctdY+vPQTly4uao=)
3: g4B1jDEDEnpyKjOUdwNXtiRBKVo.roa (hash: 7UWQudX+rqrs+vIGMtBiZa4lyOkbMuzxNBR2/83QsfI=)
4: mFCab-YMnaPwjq0SGjjSKVSwCvs.roa (hash: NwTUf2FCA+SWI7PlbFVRLa9grCf7O5GxOtog8KpH75E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5d:f9:e2:6e:51:32:02:b2:37:82:4b:c2:51:a6:d7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Validity
Not Before: Nov 7 11:00:48 2025 GMT
Not After : Nov 8 11:00:48 2025 GMT
Subject: CN=c6f50777c0ed573dcca2080cb4e427095ddf8098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:1f:62:76:cc:a4:14:60:38:4c:dc:24:da:
21:31:aa:4f:c5:c3:05:a1:04:20:02:59:f7:44:dc:
97:0e:5b:d2:d6:6c:96:e6:2a:98:18:0f:ff:c6:29:
98:7c:0c:a9:ef:95:6e:9b:a8:cc:84:72:48:a3:bd:
3a:dc:13:26:ba:c1:2d:c8:1c:1f:5d:e4:ba:e1:a4:
eb:e3:3e:36:d2:3f:80:e6:ec:f8:93:a8:dc:b0:8b:
ce:7d:37:9a:13:4b:b0:c7:b2:93:ef:6a:8a:19:1c:
86:80:83:66:9d:59:26:fe:c2:14:a3:4e:12:8b:66:
e4:07:4d:d9:f7:0d:94:41:2f:ea:f5:a6:73:c1:d6:
9b:68:86:f7:29:f8:80:4f:0a:5e:2a:92:fc:e8:ed:
e4:bb:51:dc:7c:0e:cd:37:7f:d0:6d:1d:8e:87:45:
0f:ca:89:48:2d:28:9b:15:05:81:55:43:e5:cb:6d:
f9:e4:37:0f:46:f6:0f:7a:7c:71:77:d0:c2:7a:a9:
a5:8c:e9:04:9a:80:4d:eb:a6:da:52:8a:5b:2e:32:
29:2b:9c:0d:5f:b7:a2:15:e1:dd:d9:50:f5:00:09:
64:5f:06:cd:db:0f:d5:bd:3d:6b:44:71:4e:94:b0:
e6:72:d3:1c:78:21:db:a6:17:fa:e0:27:e9:3d:ee:
9a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F5:07:77:C0:ED:57:3D:CC:A2:08:0C:B4:E4:27:09:5D:DF:80:98
X509v3 Authority Key Identifier:
keyid:F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:4d:54:46:32:cd:da:f1:c0:d1:1b:46:80:04:12:b1:3e:ca:
1d:e5:4e:3a:85:31:24:06:91:de:d4:13:d2:8a:d7:18:72:a0:
75:15:08:37:71:02:d9:a9:17:8b:7a:41:fa:e1:78:bc:09:3c:
98:97:d4:cc:52:41:03:f6:41:a8:de:83:1b:bd:f9:91:9a:e2:
da:30:c9:d2:f4:8f:f8:56:b7:da:db:db:73:9d:87:47:d6:41:
e2:35:a2:7c:20:60:a1:2c:ee:19:26:34:32:19:fd:12:1c:c4:
54:30:35:de:96:f7:98:9c:c1:0d:fd:63:c9:23:64:99:ff:bf:
ee:9e:83:96:c3:69:13:73:f9:ac:d2:c4:62:d0:45:82:a9:88:
a7:6b:a7:38:6a:fc:4a:60:8d:6b:40:c4:4d:41:68:2b:35:a5:
64:7e:76:8b:aa:a8:8b:4d:50:40:bc:3b:6f:99:2d:ec:2e:30:
6f:83:53:93:7d:fd:57:72:cf:61:5c:1c:73:cb:b9:25:da:85:
24:50:3d:89:1c:50:ae:bc:b7:99:26:ac:28:17:f4:15:73:64:
22:68:3a:96:f0:d4:55:c9:27:bf:04:ed:0f:86:a9:23:bc:2f:
a6:4c:75:bf:67:80:80:1a:a5:f1:d2:30:e3:1a:2b:00:0e:32:
90:6e:1b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 13:42:58 2025 by rpki-client