Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
File: 9X2cj_wgS2294BIFMDvfi1BjiqY.mft (raw, json)
Hash identifier: dVfZAsGB1iG5TgENN33hCfzBvae3NKFikERgodqqGlY=
Subject key identifier: 89:40:13:94:C7:20:5A:76:4D:E2:C3:37:20:41:78:06:C1:FC:96:AA
Authority key identifier: F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
Certificate issuer: /CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Certificate serial: 019A5075213E4869D60CCD5456EC02238AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
Manifest number: 0213
Signing time: Tue 04 Nov 2025 20:00:44 +0000
Manifest this update: Tue 04 Nov 2025 20:00:44 +0000
Manifest next update: Wed 05 Nov 2025 20:00:44 +0000
Files and hashes: 1: 9X2cj_wgS2294BIFMDvfi1BjiqY.crl (hash: Kpz9aCdXLDHgtkNfKmI700ggHRerxH4c2fGjWJSYRUY=)
2: blFPI1QT3vGyXWS1-axkqAT7T1o.roa (hash: 9ZF4v61ldXuDLq/JdKEO0mrKJOTY13vVthxskJAXAEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:21:3e:48:69:d6:0c:cd:54:56:ec:02:23:8a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Validity
Not Before: Nov 4 20:00:44 2025 GMT
Not After : Nov 5 20:00:44 2025 GMT
Subject: CN=89401394c7205a764de2c33720417806c1fc96aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f6:2b:e8:22:53:e7:44:bf:e8:68:1d:23:43:
62:56:24:d6:71:db:34:6b:a2:03:93:ed:7c:04:4d:
bf:71:76:73:2e:cc:9b:47:57:e8:d8:39:3b:d5:f7:
61:f3:6a:4c:cc:2b:12:0c:49:f8:90:a4:26:b6:47:
da:e9:40:52:26:26:0d:93:9b:5a:b9:11:b4:8d:d2:
58:0d:2a:c2:2e:6e:82:e0:b0:ba:a7:2e:1e:41:0d:
f4:5d:4d:42:9e:bb:cc:10:a7:65:03:9e:bc:28:1b:
b1:a3:71:a1:96:fa:8e:d6:97:f9:f2:87:fb:49:0e:
53:95:0f:91:bf:9a:59:e6:77:61:63:c5:01:47:25:
d1:cc:01:36:a1:6f:61:e7:f0:e9:fe:41:ab:0b:46:
eb:87:ec:85:3d:a7:88:04:fd:a0:74:08:da:03:aa:
aa:f7:48:55:d3:96:46:5b:ed:40:ab:78:99:f4:bf:
57:e9:ba:91:d1:4e:c6:94:68:cb:6b:b5:f2:c1:61:
3b:ba:1e:43:d2:ee:1b:22:f1:04:2f:a3:44:d2:78:
b2:ad:4d:eb:d1:a1:8b:16:f3:a8:b2:0c:f5:5c:30:
d6:4c:94:0d:0c:0c:66:ca:1f:22:28:18:77:11:7c:
36:df:f6:20:3b:5b:96:56:5a:12:9c:c7:3f:90:6c:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:40:13:94:C7:20:5A:76:4D:E2:C3:37:20:41:78:06:C1:FC:96:AA
X509v3 Authority Key Identifier:
keyid:F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:eb:f9:44:1c:be:28:3c:e9:41:f7:12:60:37:b3:5c:5b:8c:
10:39:21:f5:17:8d:58:b3:3e:d1:c1:06:fc:87:5d:96:1e:fe:
43:b5:b3:2a:2a:ff:78:4e:29:28:c3:97:23:51:64:cb:45:d6:
ff:8f:24:79:bb:1f:e1:04:f9:99:f9:1a:cf:72:eb:f3:3f:a0:
44:a0:17:c5:a4:b1:cc:55:c4:a8:06:53:f9:d9:d9:f6:3b:e5:
59:6e:c7:fe:1e:4f:67:af:4e:94:0f:62:99:2e:42:99:04:34:
7a:b5:aa:84:8e:41:63:f6:c1:5f:21:d8:b5:6c:e2:68:ca:61:
0f:65:2e:65:2f:be:17:ca:21:cd:08:ea:89:a7:89:7f:cf:5c:
c5:c2:c9:9f:2a:ca:05:50:43:05:df:35:6f:3b:3a:7d:97:be:
23:cc:b1:6e:11:74:c7:d4:ea:0d:24:5b:c2:3f:e8:a7:32:e1:
a5:95:03:fe:42:6a:ab:9b:57:b0:35:61:fc:ff:35:e0:8e:66:
d9:11:c4:38:eb:53:d0:57:e9:52:67:4a:a3:a5:de:da:b0:37:
a7:ca:2c:ff:33:98:c0:49:04:94:b6:cd:3b:3b:c2:45:4d:ef:
75:84:37:7a:77:c7:09:41:4d:b7:39:bb:80:d3:78:2a:8e:15:
9a:84:c7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:49:24 2025 by rpki-client