Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
File: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft (raw, json)
Hash identifier: qBWgy7JNJkux6ELjEdaNKhfgAU6XxlITr9B4UOrY1Ek=
Subject key identifier: F0:11:02:68:44:D3:BA:65:13:F5:29:D1:40:20:BD:DE:5C:1F:60:F5
Authority key identifier: F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
Certificate issuer: /CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Certificate serial: 019A7149A9DBB9A9DF7AB99F4932E083AEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
Manifest number: 0B00
Signing time: Tue 11 Nov 2025 05:00:44 +0000
Manifest this update: Tue 11 Nov 2025 05:00:44 +0000
Manifest next update: Wed 12 Nov 2025 05:00:44 +0000
Files and hashes: 1: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl (hash: OLloXbdbXEyLSDMFyrDpc4kWFKxE05Qx+uHNbU8GjRM=)
2: rVvEPxI-l2KV5RW4qoRYscyYDw4.roa (hash: 0O6ssmxEK7LDtpVncPYWugPc3GeZirxznz/PZThAqb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a9:db:b9:a9:df:7a:b9:9f:49:32:e0:83:ae:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Validity
Not Before: Nov 11 05:00:44 2025 GMT
Not After : Nov 12 05:00:44 2025 GMT
Subject: CN=f011026844d3ba6513f529d14020bdde5c1f60f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:19:98:c4:ff:ba:1d:58:74:d8:ab:53:f4:fd:
c0:29:04:49:3b:b5:4a:8d:5f:9d:46:3c:15:08:71:
5d:a2:d9:6e:66:b8:34:b2:45:7e:99:8e:04:6f:e0:
cb:6f:fb:64:ae:a1:9a:b4:f8:fc:e2:d2:5a:8e:71:
4d:59:1a:4c:25:55:a6:f9:07:7d:41:46:1f:ee:27:
50:16:f4:d5:6a:45:3c:aa:62:00:33:4b:4b:bf:25:
c8:50:04:c3:3d:0c:b3:fc:cb:0a:e6:ff:4a:33:0b:
6e:fc:19:e0:eb:46:93:f6:8d:65:46:7f:fa:bd:4c:
1c:ff:6c:3b:0d:d1:4c:29:f3:e7:94:48:f3:30:d8:
f5:2c:0b:82:41:d2:40:5f:70:50:27:9d:33:d8:56:
3c:1c:42:83:f6:26:df:2b:58:17:21:ba:11:00:36:
7c:1d:78:5a:43:9c:6e:c6:6e:6b:d7:cd:bd:7d:33:
16:69:62:12:ef:bc:68:36:82:b9:28:74:39:17:8c:
10:e0:c3:5c:4d:8a:74:eb:31:04:d8:ee:21:b0:97:
50:d9:a3:6e:7e:05:55:5a:17:4e:a5:24:88:07:af:
cb:64:d6:4f:a1:5b:8b:3d:3c:16:b2:c2:54:b7:aa:
3c:c4:ec:9a:d2:13:2f:87:c9:c3:7c:b2:5e:01:aa:
13:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:11:02:68:44:D3:BA:65:13:F5:29:D1:40:20:BD:DE:5C:1F:60:F5
X509v3 Authority Key Identifier:
keyid:F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:4f:96:49:a0:0d:e5:da:51:df:a8:60:cf:32:ff:08:1d:74:
66:79:c9:77:97:f2:08:c7:a1:ba:de:da:3a:49:7b:f3:79:ad:
7b:30:6f:ef:51:c0:94:0a:85:b4:97:5b:78:b4:7e:8f:bf:64:
eb:82:1c:b9:8d:2e:ec:6f:fb:8b:fa:82:b6:b0:f7:f4:7b:0b:
e9:c7:13:3f:a3:38:ed:6c:d7:3a:eb:0d:19:0f:e5:40:4c:d8:
79:68:19:c6:59:4d:1c:76:15:30:a5:eb:9e:c1:e6:35:da:7a:
fb:f8:10:42:94:bb:01:68:77:7b:c4:f9:63:eb:4d:fa:5b:99:
ca:ef:a4:c3:28:32:f0:f5:52:8f:d5:1e:24:26:65:e0:7b:17:
1e:30:b1:a1:07:f1:13:86:c1:79:18:f7:2c:1b:a6:99:5a:c1:
c6:80:c7:49:85:01:12:c4:e9:11:0d:c6:e3:a6:94:ac:95:c6:
8b:41:7b:ed:c8:1c:30:91:c7:e1:f3:1d:ce:5f:fe:47:cf:0d:
ab:5f:f6:b1:23:13:26:b6:45:f6:7f:d0:36:12:4a:36:75:a5:
25:5e:e1:99:22:b5:84:a8:6c:cb:ea:0f:33:f2:4a:96:ba:9f:
48:ba:a8:46:28:f0:93:a9:69:7c:39:d7:d5:3f:13:9b:a5:9c:
ed:37:57:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:47 2025 by rpki-client