Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
File: 9aEH8WvGsAt2TDms_WMzY2RtWZY.mft (raw, json)
Hash identifier: 9PjdEUFImgFjBbHhabxCsGo2/3UTAfxWjtgDV+0PVIo=
Subject key identifier: F7:AF:E0:77:72:48:6A:43:40:F6:EE:C0:EA:5D:F1:9B:95:A8:1C:DF
Authority key identifier: F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
Certificate issuer: /CN=f5a107f16bc6b00b764c39acfd633363646d5996
Certificate serial: 019A503E5B1C8DDF87452258455F6501D023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
Manifest number: 042F
Signing time: Tue 04 Nov 2025 19:00:55 +0000
Manifest this update: Tue 04 Nov 2025 19:00:55 +0000
Manifest next update: Wed 05 Nov 2025 19:00:55 +0000
Files and hashes: 1: 9aEH8WvGsAt2TDms_WMzY2RtWZY.crl (hash: ZwnHo33DXNenQr/7Aq3BkQM+N6+sPei+njboICHhdwY=)
2: i8fQ4SDQp7cMewdMesiICFs9ZAg.roa (hash: bCMQ7OQEomrpckp+sy5Q02dQCcDmXIN8SQy3NDUMNVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:5b:1c:8d:df:87:45:22:58:45:5f:65:01:d0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a107f16bc6b00b764c39acfd633363646d5996
Validity
Not Before: Nov 4 19:00:55 2025 GMT
Not After : Nov 5 19:00:55 2025 GMT
Subject: CN=f7afe07772486a4340f6eec0ea5df19b95a81cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:74:85:70:d0:f1:69:0a:0f:c8:6b:36:d1:74:
a7:1d:7c:8c:0b:8c:74:2b:73:3e:52:06:1d:82:6a:
16:8a:44:ac:42:7c:ea:96:4c:7c:87:80:19:f4:2f:
cf:49:28:56:4f:72:3d:6a:2b:98:3d:47:99:77:f4:
53:f3:73:11:f1:d6:75:5d:c7:7d:e7:6c:91:9f:1d:
b1:3f:12:4a:36:7b:19:c2:e5:8c:a4:80:e1:85:30:
21:9f:b4:45:7b:ab:28:98:86:81:7d:8f:57:a9:1a:
69:34:d3:39:8b:47:f1:48:86:2a:17:d5:06:e2:22:
40:22:4f:e9:33:8e:95:5c:d5:15:b1:69:e0:84:5c:
b6:0f:b7:9f:a5:fa:89:7e:46:a0:0c:b9:68:0a:21:
11:6d:74:be:57:07:1d:7f:45:b5:22:72:f2:90:4e:
be:eb:d0:b5:e9:1f:87:6a:08:83:6d:ae:e7:b9:7a:
d1:e1:69:b8:44:71:15:97:2c:34:0b:0e:ba:9d:8a:
52:0a:d6:2d:bd:e9:82:1d:ca:c9:59:76:f4:f2:15:
c6:b6:e0:52:0c:08:b7:66:22:87:23:3b:46:e8:f6:
7e:a5:64:26:e7:d6:52:bb:1d:43:ab:62:35:9d:a7:
67:ef:bb:7d:4e:cf:1a:f8:a0:e2:d2:71:aa:8c:2b:
e1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AF:E0:77:72:48:6A:43:40:F6:EE:C0:EA:5D:F1:9B:95:A8:1C:DF
X509v3 Authority Key Identifier:
keyid:F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b4:eb:39:d5:a7:77:72:25:72:42:b5:10:ea:68:81:ed:70:
c5:1a:56:06:e6:13:14:1a:c6:2c:1f:18:37:79:86:21:ee:10:
db:88:28:bc:2a:ea:6c:ea:00:20:58:73:6d:02:43:65:5a:f9:
aa:a5:0f:c2:af:ca:87:6a:ce:69:8f:8b:71:df:e7:74:0b:7a:
cf:20:43:2d:a2:85:42:bc:19:41:5b:93:3d:e6:8b:92:07:92:
dc:d8:2a:06:3d:93:1d:27:3f:55:2c:62:55:e9:18:1b:84:19:
34:66:35:65:57:5c:ef:fa:42:7b:c8:1b:66:e2:8e:73:af:81:
ed:83:65:61:2a:f5:b3:91:da:94:a0:bf:68:d1:fd:af:03:b0:
aa:90:dc:c9:2a:9d:60:a4:98:a7:87:21:94:3c:d0:1f:3a:72:
00:83:7f:2e:be:38:92:57:ea:8d:d0:50:41:e9:0d:80:84:72:
73:9c:39:70:79:7d:2f:b0:5d:fb:3a:77:d0:a9:e4:9d:06:70:
72:94:26:cb:18:d1:46:35:d0:70:4e:7a:3d:0a:d1:1e:34:74:
ed:82:ae:f9:7e:b5:27:f0:1f:9f:94:70:f9:38:91:8f:a3:12:
09:aa:f2:69:a8:28:a2:a4:18:d3:b7:95:cb:fc:db:88:fa:91:
04:5e:68:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:08:10 2025 by rpki-client