Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
File: r9v0VgEKm9FJQcoskcpTPn71F4o.mft (raw, json)
Hash identifier: 01+/2+Be/ThH0yibUzOl8FUJoKFWVKGqwh4z7ZfoVd4=
Subject key identifier: 6D:28:AB:56:AB:AC:21:9B:6C:97:BA:6C:47:8E:AE:73:6B:4E:2B:FD
Authority key identifier: AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
Certificate issuer: /CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Certificate serial: 019A54C0E1036CB8AEFA224E750EB61E4F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
Manifest number: 0FE8
Signing time: Wed 05 Nov 2025 16:01:57 +0000
Manifest this update: Wed 05 Nov 2025 16:01:57 +0000
Manifest next update: Thu 06 Nov 2025 16:01:57 +0000
Files and hashes: 1: ajkzuEH8FnXzD6y9WqgTkvcAyWQ.roa (hash: ezeCzHTBFnMMCDhX8NkCA6ybD9xQfKuL+xUd+x4C3b4=)
2: r9v0VgEKm9FJQcoskcpTPn71F4o.crl (hash: BIiaGbUGBB6zselm/H0EILo8STns++d1vqaJ2R2OIRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:e1:03:6c:b8:ae:fa:22:4e:75:0e:b6:1e:4f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Validity
Not Before: Nov 5 16:01:57 2025 GMT
Not After : Nov 6 16:01:57 2025 GMT
Subject: CN=6d28ab56abac219b6c97ba6c478eae736b4e2bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1a:34:c1:4b:6a:c5:40:34:29:6d:f4:53:5b:
18:f6:79:05:c0:79:02:c5:0d:21:55:e0:db:4d:11:
04:2d:df:56:92:35:9a:48:eb:ce:5a:f3:47:3c:32:
6e:4d:7c:ff:14:d9:50:7a:75:b7:09:3c:bf:a1:37:
e0:97:e0:74:67:d0:d4:b2:b1:af:da:54:be:d9:b2:
0f:ef:a1:81:01:5e:3f:f4:dd:7a:14:23:7e:89:7b:
be:6e:34:13:ef:8c:83:d1:3d:9b:b7:3c:5b:fd:aa:
f1:78:97:fc:94:b2:cf:43:28:3e:68:fc:86:98:6d:
14:77:74:07:26:b2:3e:3f:fa:6b:94:96:34:05:e3:
0d:ed:3d:c8:49:69:fd:76:1b:96:20:54:54:29:2d:
64:9a:49:cd:6b:0c:18:90:71:cc:57:fb:dd:01:8e:
d5:65:34:f2:14:91:1c:68:33:55:c4:e0:7b:72:de:
4f:27:dd:6f:53:4b:7e:89:5e:71:13:ad:21:b6:ce:
ca:65:74:aa:cb:63:77:b1:00:71:90:b7:a9:a0:9c:
e7:bf:6b:e8:fe:55:a3:11:1b:a9:3c:e3:58:21:3c:
f4:de:62:7c:4d:6c:69:20:2d:dc:55:46:8a:43:e6:
43:84:ee:63:a2:40:cb:44:fe:10:bd:b3:66:d9:95:
67:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:28:AB:56:AB:AC:21:9B:6C:97:BA:6C:47:8E:AE:73:6B:4E:2B:FD
X509v3 Authority Key Identifier:
keyid:AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:55:57:46:23:28:2f:13:41:1d:c7:7a:8b:c5:7b:52:f5:e7:
fa:61:08:58:10:95:d6:66:84:bd:91:e6:f2:fe:6b:5d:b2:05:
45:53:3d:fb:67:5e:bc:84:1c:01:d8:95:11:cf:d8:e5:0f:61:
33:ec:01:1d:dd:d4:61:70:fd:c8:d2:3e:03:b5:0a:ec:6c:ec:
d0:9b:36:29:2d:87:b7:92:f1:2d:7a:55:0c:41:b5:6b:43:18:
63:9d:e2:0e:dd:bf:e1:58:27:26:a0:30:fa:6e:28:1d:b7:89:
93:11:12:ef:65:04:3b:f0:35:96:96:9f:a8:1b:f0:7c:b0:ac:
9a:a2:25:55:79:13:1e:0e:c4:dc:13:ce:a1:cc:ef:8a:50:d4:
50:f7:33:5a:b1:e1:87:f6:b2:13:2e:b1:b7:75:ee:e9:c0:9e:
5b:52:83:e2:5f:fa:4c:90:c3:54:00:f6:1b:d2:5a:de:36:27:
df:b9:ea:26:fa:5d:91:5f:fd:92:f3:24:20:a1:a5:0a:8e:37:
8c:ab:3b:8d:c8:be:88:d9:0f:96:37:5a:dd:46:56:88:ba:9c:
db:8c:b1:c5:18:94:f5:16:cf:c1:e6:1e:78:e1:1a:39:40:e5:
4a:47:36:02:89:dd:47:b2:f2:21:d4:e4:46:8e:f1:4e:7e:68:
db:24:4b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:52:09 2025 by rpki-client