Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
File: mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft (raw, json)
Hash identifier: n5uGnsw9LWY8B/vTJgCOJ+56/Jktv/7pmiyyFbMQdzo=
Subject key identifier: 9E:CA:48:16:29:B3:9C:02:96:F0:AE:0D:9E:15:43:6A:20:BD:74:08
Authority key identifier: 99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C
Certificate issuer: /CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
Certificate serial: 019A5074F2DCC22476A602AEB480FB1686BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
Manifest number: 06DD
Signing time: Tue 04 Nov 2025 20:00:32 +0000
Manifest this update: Tue 04 Nov 2025 20:00:32 +0000
Manifest next update: Wed 05 Nov 2025 20:00:32 +0000
Files and hashes: 1: KKAdJZwlPOuvUmhtsSSfP_XfQ9w.roa (hash: Fim6YZSnH30vV92L/gdG+AOAxW50mQ7FyxjlaSpVQfU=)
2: mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl (hash: l8B1IQLSqpaEq1vnff7j3Hsfn1Ytw+B59pEQYTXARqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:f2:dc:c2:24:76:a6:02:ae:b4:80:fb:16:86:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
Validity
Not Before: Nov 4 20:00:32 2025 GMT
Not After : Nov 5 20:00:32 2025 GMT
Subject: CN=9eca481629b39c0296f0ae0d9e15436a20bd7408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:25:5f:26:ee:a5:47:7d:6a:b7:43:03:64:a0:
42:82:d0:be:8a:28:1b:cd:d6:56:ac:1d:c7:39:0a:
44:22:ea:8c:e6:e7:4e:f5:6a:0f:b6:01:eb:ce:63:
8e:43:00:c7:e9:6a:ad:e8:13:eb:d2:7c:35:4b:47:
d7:65:00:a2:0f:ae:eb:80:4b:74:59:d3:1d:ba:08:
56:32:1c:83:8f:b1:9d:83:ab:a0:14:f8:19:76:4c:
a4:e2:8a:84:0c:25:e6:bd:15:24:9a:8a:74:5a:99:
f1:da:d1:ae:d5:96:16:f1:87:c6:75:cc:7c:8c:15:
af:57:65:9c:45:eb:4f:8d:b1:c8:24:44:5f:be:d3:
a3:4f:7d:ed:1c:f5:fd:c9:dd:5c:9c:ee:00:63:0a:
98:cd:49:ed:39:9b:e9:1c:b8:a7:e8:8e:07:a6:d5:
4f:f4:18:fe:3b:01:5a:90:3b:eb:df:ae:e7:b3:00:
8c:5a:d7:a2:6f:48:a6:e4:0f:08:69:77:b5:a4:f0:
14:df:30:e4:a3:1d:ee:88:31:c5:8a:5c:b6:e5:dc:
e5:45:63:96:db:16:ce:9d:04:0c:98:c9:02:83:1e:
6b:97:a8:87:21:3a:0e:32:d7:71:c1:c2:77:0b:08:
57:fe:45:d6:97:38:25:3a:28:88:94:19:89:69:07:
b9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CA:48:16:29:B3:9C:02:96:F0:AE:0D:9E:15:43:6A:20:BD:74:08
X509v3 Authority Key Identifier:
keyid:99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ef:98:42:4e:ae:ed:8d:db:7c:62:8b:9d:43:b0:29:dd:24:
c6:8b:dc:99:d8:ec:67:1f:45:aa:fd:53:31:56:99:a4:b5:03:
14:eb:22:8b:d1:40:75:e9:e0:93:1c:e8:75:77:df:83:22:3f:
80:ea:83:77:95:10:d6:ec:96:bd:37:f5:9f:16:7d:1e:8d:f1:
88:3f:ce:6e:3d:ac:74:b9:12:1c:a5:24:0a:a0:1f:39:e7:26:
d5:70:04:64:e8:cd:67:06:e9:d6:be:8e:81:38:7c:9f:34:91:
45:15:72:85:65:1f:c1:37:58:02:83:18:07:22:74:b8:9b:a5:
a5:82:36:15:b9:60:0c:27:81:39:b4:c6:0e:49:59:cb:ac:01:
09:1e:b8:77:91:13:fc:f0:8c:65:bb:75:88:38:c8:88:d7:7f:
98:7a:3c:70:df:79:91:81:77:9c:5b:7f:2f:27:f8:cc:25:d8:
59:b1:4e:8c:6f:59:b1:de:bd:c7:67:6b:d9:d0:1c:7c:73:b0:
b6:f3:d5:e7:09:4e:d0:b3:8e:3e:f8:e4:b4:dd:d0:fe:fa:76:
e6:55:9c:a2:aa:db:9c:f8:02:54:9b:b9:ae:7e:6b:69:a7:80:
08:33:2f:22:6f:a5:06:5d:67:19:5f:bc:47:60:30:ec:46:01:
bd:55:a9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:46 2025 by rpki-client