Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
File: _96Be-rkwKLVf3_D8IxifVZUDn4.mft (raw, json)
Hash identifier: EEHfKfCiwLpDpONRgCTIHCOAvGTMJWA2E1+rQYZ7Q6k=
Subject key identifier: 0E:9D:DA:34:7F:1A:5A:65:70:C8:42:D7:56:03:1E:52:ED:BD:01:B8
Authority key identifier: FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E
Certificate issuer: /CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
Certificate serial: 019A5007247D71318ED16AACF3BD905CB174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
Manifest number: 06DB
Signing time: Tue 04 Nov 2025 18:00:36 +0000
Manifest this update: Tue 04 Nov 2025 18:00:36 +0000
Manifest next update: Wed 05 Nov 2025 18:00:36 +0000
Files and hashes: 1: 9iTVcABMKXRZ-jDsWu-61gCPaTM.roa (hash: np3kCerAysjg7QMTKvS1rZseKRBoSzKlF7Gczsl6PKA=)
2: _96Be-rkwKLVf3_D8IxifVZUDn4.crl (hash: +f4AJdIY8rHv86EJGZB2Jg1hFo+wZcZNf/r8qChkMAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:24:7d:71:31:8e:d1:6a:ac:f3:bd:90:5c:b1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
Validity
Not Before: Nov 4 18:00:36 2025 GMT
Not After : Nov 5 18:00:36 2025 GMT
Subject: CN=0e9dda347f1a5a6570c842d756031e52edbd01b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e7:42:9b:7f:ea:29:31:8e:ac:27:6b:6c:cc:
b4:86:61:95:b8:83:47:e2:6b:58:8b:85:11:50:30:
62:28:fc:47:7b:e0:9c:e8:5d:b4:0c:bb:38:01:79:
e8:3d:05:31:85:33:9e:b3:dc:2a:66:15:ef:0e:7d:
17:74:c3:76:81:f6:fd:c2:0b:38:d4:67:d7:08:2b:
55:86:3b:92:6c:30:83:e7:6e:0f:7e:af:40:54:70:
b8:6d:05:66:40:9d:10:6c:69:b2:1c:3f:e4:e5:ee:
81:8d:26:02:61:34:d7:15:5e:05:22:8a:4f:1b:12:
c1:88:3a:6d:1b:aa:e8:90:4c:83:a4:4a:e2:3e:c3:
17:e0:d2:14:a1:8b:f2:94:c7:62:95:71:26:55:75:
31:4f:62:17:ca:91:57:ed:a6:e2:0d:cd:72:68:af:
64:93:45:55:68:5b:2b:e8:19:f5:4a:23:15:0a:87:
23:d0:eb:f9:90:7e:3d:95:56:5f:7d:a8:ce:80:3f:
d2:30:c3:c7:78:56:14:e7:82:7d:79:8f:6f:49:99:
c9:19:a1:98:71:9f:50:f0:7d:b3:da:f4:a1:f0:bc:
db:3c:c9:c8:62:bd:cd:25:19:4f:97:85:a8:3a:eb:
0d:d5:bc:5b:3e:91:b8:eb:a1:79:00:7f:b2:c8:0b:
48:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9D:DA:34:7F:1A:5A:65:70:C8:42:D7:56:03:1E:52:ED:BD:01:B8
X509v3 Authority Key Identifier:
keyid:FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a1:57:19:51:38:6b:bb:b5:53:e4:18:87:aa:a1:dc:f7:4d:
80:10:70:19:f5:7d:50:ad:dc:e2:8a:0b:6b:9d:db:a8:fe:c9:
87:80:6b:96:72:65:51:46:4d:f3:14:5f:f4:ef:fa:40:11:10:
20:dd:48:4c:54:f8:6a:ef:dd:42:5e:09:cc:d7:0e:93:26:23:
1f:97:e7:31:1d:f0:ca:56:33:ce:9a:de:88:ee:5d:45:ae:97:
a6:d5:06:ee:80:44:0a:c5:57:f5:0b:20:14:1d:5b:38:a8:d6:
e8:39:c9:bd:4f:4a:a8:0a:d1:b6:7b:a6:ea:26:f8:7b:17:e1:
63:2a:bf:3e:5c:34:f0:1a:23:95:68:5a:68:96:2f:c3:1e:0b:
85:06:64:18:70:da:20:14:04:c4:cb:fa:7e:08:e4:96:01:47:
3c:f6:60:70:b6:b3:fd:18:ff:c9:13:04:db:0d:18:56:a3:e4:
28:bd:3f:48:f7:97:50:fd:26:12:b0:47:0a:ce:67:6c:82:9e:
75:db:7f:11:ae:76:74:ca:f6:64:a0:85:8c:f4:2f:13:30:b8:
d3:17:2d:41:46:55:9a:07:e1:d5:aa:5c:a2:67:e8:b1:5f:8b:
14:07:1e:1a:e8:49:59:10:3d:c9:8e:dd:0d:65:c4:33:0e:04:
4e:11:7b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:45:20 2025 by rpki-client