Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
File: 9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft (raw, json)
Hash identifier: juNoJVxwbkaRxlFy7jAUCDH5KqMJNBRqOdZmMHFPQAY=
Subject key identifier: 53:09:61:15:2A:7C:EC:7A:FD:4F:3E:0C:4A:3C:B7:F9:32:FB:B0:6E
Authority key identifier: F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
Certificate issuer: /CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Certificate serial: 019A4DE22B2B5C2058771668D19DA9D5278C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
Manifest number: 06DD
Signing time: Tue 04 Nov 2025 08:00:59 +0000
Manifest this update: Tue 04 Nov 2025 08:00:59 +0000
Manifest next update: Wed 05 Nov 2025 08:00:59 +0000
Files and hashes: 1: 9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl (hash: ioWuQdn/erauFTa+Mn5/UM3/rNtXfkV3ILf+OqKXAxQ=)
2: GaOIxHYrGt_x1xNOwfVe1mM1uls.roa (hash: 6h4qg1f7k4UwgHPBRYv76SUwfsVkd9pZo7L1FeBQMpI=)
3: S3-UGk16fgBKghN_7jlpmFhtevk.roa (hash: svmOkbDlORnE+JdlDBeTol63DbR+qbg9OLTtqku/fJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:2b:2b:5c:20:58:77:16:68:d1:9d:a9:d5:27:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Validity
Not Before: Nov 4 08:00:59 2025 GMT
Not After : Nov 5 08:00:59 2025 GMT
Subject: CN=530961152a7cec7afd4f3e0c4a3cb7f932fbb06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:be:99:c1:64:44:ac:e9:1f:1a:ad:e7:96:cd:
21:62:c3:32:4d:71:e3:d5:e0:47:07:72:25:49:3f:
8b:46:f5:2a:00:b8:31:2f:f4:09:ad:f0:53:09:68:
a1:2c:ac:fb:d6:32:65:f4:29:43:5d:78:cc:41:44:
cf:2a:eb:40:8c:0f:a0:d1:31:42:b2:db:64:eb:08:
3b:79:35:46:4a:39:c8:fe:37:96:76:7e:76:9a:6f:
65:1f:18:fc:6d:db:16:fb:e2:41:81:11:00:fa:e7:
3f:14:91:eb:ea:99:13:d7:a4:2f:3a:28:2c:70:64:
85:2d:b5:fa:b2:4c:35:1f:65:ed:00:60:5e:4d:67:
7f:e8:2c:45:2f:f6:ff:37:86:09:63:97:71:18:e6:
48:03:7e:31:12:73:e5:38:20:ca:01:2d:be:77:13:
a9:77:6b:c7:74:30:08:e9:03:24:25:cd:39:81:8e:
e0:4e:7a:24:43:1d:0d:63:b5:6d:db:f5:bd:6f:42:
e9:d9:ff:63:72:ec:5d:72:e4:d2:6a:68:ad:ea:66:
d8:8e:88:16:3f:11:38:20:82:3e:8f:05:22:41:c9:
d5:45:ca:e0:85:ff:fe:a6:01:d8:69:c9:8f:5a:db:
3b:8a:1e:45:25:b8:0d:04:a2:14:99:bc:01:96:c5:
e2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:09:61:15:2A:7C:EC:7A:FD:4F:3E:0C:4A:3C:B7:F9:32:FB:B0:6E
X509v3 Authority Key Identifier:
keyid:F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:58:3f:25:a1:66:e5:ae:62:3f:e2:e2:a3:c3:d0:f0:35:06:
00:5f:bd:d2:ae:38:bd:3e:49:a8:9c:79:80:54:c1:9c:cc:6b:
ed:ef:85:d5:3d:53:b9:bc:2f:95:fd:aa:e9:f5:9f:a3:be:84:
e6:cb:27:d5:c5:6d:8a:ef:89:02:16:ba:10:0a:57:a6:f0:3d:
a0:d4:d8:f8:7f:a1:f8:d0:d7:04:a6:5c:3c:a6:92:d0:12:32:
76:9d:fb:e0:93:d9:92:1f:22:9c:2f:3b:38:59:bc:99:3b:69:
75:93:e8:6d:9c:99:a8:5f:9b:05:8f:15:c0:74:cb:68:51:8d:
30:a8:5e:1c:65:5e:98:84:a3:fa:fb:87:0b:98:2a:5e:b9:b1:
c3:a8:e8:f5:e2:9c:82:c9:54:93:15:d5:46:a1:db:10:ec:b4:
59:ef:89:75:ce:88:3a:57:0c:c2:9a:e3:ad:57:cc:de:cb:43:
6b:c3:44:91:48:98:d2:9d:c0:57:bc:19:e8:46:17:06:ec:12:
75:f7:2f:8b:12:d4:34:05:c0:4a:01:bc:5e:85:bf:a4:f6:d8:
c7:39:32:b6:84:9d:ca:f1:08:c6:26:2a:61:7e:fd:b5:e5:5e:
a1:1a:9d:c6:5d:b2:18:d9:be:24:f7:ba:b7:de:70:0f:9d:ce:
08:3f:72:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:27 2025 by rpki-client