Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
File: 2g_9vJMxeNehu_mWCOOpXU3uiuY.mft (raw, json)
Hash identifier: SAcNGybPI2nUqxa5xtR06jVLcDxZAxF0RALBk5dLfFY=
Subject key identifier: 99:37:3B:81:D2:EC:B5:F5:1E:E9:A1:96:1D:60:96:24:AB:F0:5F:8B
Authority key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
Certificate issuer: /CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Certificate serial: 019A515135EEFC788C340FDCC01C97D09792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
Manifest number: 0913
Signing time: Wed 05 Nov 2025 00:01:07 +0000
Manifest this update: Wed 05 Nov 2025 00:01:07 +0000
Manifest next update: Thu 06 Nov 2025 00:01:07 +0000
Files and hashes: 1: 2g_9vJMxeNehu_mWCOOpXU3uiuY.crl (hash: yOoi0RbwTnrEtBVmmTWJPl1hVetNdWv3RAuEBBqLblo=)
2: N6LVOXDpApHcakcmSkzmPFC6k_k.roa (hash: JBlMcthOLqVJmLIR25J/oCOwYGgINMhp1piHtiBmVPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:35:ee:fc:78:8c:34:0f:dc:c0:1c:97:d0:97:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Validity
Not Before: Nov 5 00:01:07 2025 GMT
Not After : Nov 6 00:01:07 2025 GMT
Subject: CN=99373b81d2ecb5f51ee9a1961d609624abf05f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:7f:36:0c:99:c0:d0:b0:54:32:ad:e0:b4:
48:0f:67:4a:9b:62:56:5c:90:1b:7e:04:c0:45:34:
8c:6d:d2:1c:3b:51:6b:ba:67:9a:0c:3b:23:aa:da:
29:ed:f7:c5:a4:b2:3f:a3:92:d9:55:8b:b1:01:80:
66:18:66:3d:23:28:48:21:7c:a2:58:1a:3c:0a:79:
0f:24:71:8c:bb:3d:53:44:81:3f:0e:a1:84:df:b9:
68:94:6a:73:59:5b:c2:0f:e0:29:f3:d4:82:d8:b5:
8b:dc:f7:dd:70:1c:ed:9e:28:68:78:02:56:4a:56:
98:8a:f7:89:98:4c:e2:ca:cb:c4:df:98:d0:85:13:
53:42:dd:b2:19:c8:9e:40:b8:3d:2d:dd:ac:94:ac:
c5:10:e5:1b:83:0f:da:ee:29:3a:dd:c2:02:54:72:
a5:98:9a:95:4c:aa:90:df:d3:a2:95:ee:49:91:f7:
29:e5:ca:00:b1:8e:65:7f:87:ba:b8:38:e4:dc:e1:
7c:e1:2e:8e:56:a9:47:63:38:cf:64:53:d1:74:9d:
d4:c8:26:e9:3e:29:00:1e:0d:05:ad:4a:00:4c:56:
7d:26:35:05:f1:ba:93:78:09:14:ca:db:8b:44:39:
35:7a:ae:b5:28:70:7a:9c:02:7b:2f:4d:c5:aa:ad:
76:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:37:3B:81:D2:EC:B5:F5:1E:E9:A1:96:1D:60:96:24:AB:F0:5F:8B
X509v3 Authority Key Identifier:
keyid:DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0f:cf:ba:7f:5c:42:fb:8b:92:b8:af:13:47:4c:a2:45:6e:
50:e0:bf:68:f1:df:bf:0c:bd:26:fa:2c:78:26:df:f4:70:99:
42:79:0d:b9:6c:1d:bf:13:5d:69:12:c9:40:1d:9d:9c:83:d4:
e4:d1:65:4b:29:0f:3b:51:b3:85:f6:08:5d:a6:07:3b:fb:dc:
67:55:05:97:6e:bb:12:b7:80:03:bf:1e:90:19:4b:2d:b3:d5:
15:6c:cd:3a:c5:6e:1c:a5:f1:7f:84:69:01:ff:3c:ca:11:78:
9e:c0:fa:28:15:f3:e9:d5:e3:d8:b1:b3:64:7f:de:21:38:d0:
6f:09:a4:3e:3b:3f:98:df:48:f7:12:77:29:97:65:7c:1c:3f:
fc:7a:64:f3:d3:e3:c6:37:b1:d3:0d:68:2a:4c:f6:e8:4a:db:
cd:ba:f1:de:1e:3e:74:d0:02:c0:60:b1:76:e7:0e:d9:54:91:
8d:66:0a:ea:12:66:ca:43:01:27:fc:a7:81:bd:95:6d:16:ff:
0c:b1:d3:be:06:ce:a3:eb:08:f3:ad:9c:45:c3:e4:9e:e4:83:
b1:ef:0a:d2:f0:6e:10:48:11:4c:36:0a:ba:98:bb:43:b9:7b:
2f:cf:1a:56:03:3e:bb:18:54:f1:c1:8b:76:a0:40:4c:30:f1:
ff:28:01:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:43:45 2025 by rpki-client