Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
File: 9-CSr_r5tUhOAJmap_HO8ax7QJM.mft (raw, json)
Hash identifier: ylHtylcsRVpGv6FcQbMSTx1M1Mv1fZ0kfZU4HCSzKSo=
Subject key identifier: 56:92:8B:10:54:E2:8A:64:C8:14:DC:0F:9C:16:64:03:0F:72:04:52
Authority key identifier: F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
Certificate issuer: /CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Certificate serial: 019A4DAAD28CA4A929446D5DC8E67EC27237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 07:00:31 +0000
Manifest this update: Tue 04 Nov 2025 07:00:31 +0000
Manifest next update: Wed 05 Nov 2025 07:00:31 +0000
Files and hashes: 1: 9-CSr_r5tUhOAJmap_HO8ax7QJM.crl (hash: rzbsxmSdomqnVUA5r53zK74Txk+nhW+ZmPFsOP5NI/Y=)
2: s1tohRSZu__XAcftU1RiatFR4dQ.roa (hash: VEmypovoGht5ITUXKfWFpiCHNX0Yi9nhk6KgNzb6xkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:d2:8c:a4:a9:29:44:6d:5d:c8:e6:7e:c2:72:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Validity
Not Before: Nov 4 07:00:31 2025 GMT
Not After : Nov 5 07:00:31 2025 GMT
Subject: CN=56928b1054e28a64c814dc0f9c1664030f720452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7e:f4:15:5f:f7:cc:1f:9a:27:21:1b:26:4a:
df:71:13:d7:eb:67:bb:5a:ec:26:8b:31:bf:dd:33:
93:6c:f8:dc:10:35:8c:1e:cb:24:98:46:f4:d1:2f:
1f:9c:0b:ce:3f:65:be:9c:b1:77:c6:51:f2:dd:cb:
42:98:0a:6a:bc:34:69:b3:98:39:f5:e6:f3:d0:52:
80:57:29:0c:52:8e:d3:d9:9a:a0:fd:57:d2:08:8a:
b3:b5:91:d7:65:d8:8c:28:10:e3:10:80:8f:8e:42:
d9:55:04:74:a6:df:f1:0c:52:8e:e2:e1:fd:61:7b:
ff:f3:73:3e:47:d6:3b:e0:4a:2b:4d:a8:47:a8:2a:
a9:e0:9a:59:f1:b2:4a:46:84:b2:44:e5:3c:7a:a2:
b3:41:48:1c:08:6a:46:6f:d8:bc:a2:3c:6f:aa:9a:
6a:53:2e:9e:2c:cf:84:2d:41:a5:c5:07:4e:79:6a:
c3:31:d4:c8:45:b0:14:a6:b1:be:09:42:05:10:96:
5a:03:79:9f:77:7c:1e:b6:07:00:77:76:18:2a:1e:
a9:a9:a6:b0:50:82:3d:4d:87:04:7e:ff:53:25:de:
75:a7:92:7d:52:64:87:3c:6e:0e:dc:bf:4c:62:fe:
44:ac:b9:a0:44:a9:12:18:5e:f4:29:c5:11:5f:61:
ad:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:92:8B:10:54:E2:8A:64:C8:14:DC:0F:9C:16:64:03:0F:72:04:52
X509v3 Authority Key Identifier:
keyid:F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:03:0f:d3:42:eb:c6:cf:13:88:85:c2:a5:c0:c6:e1:06:de:
a2:61:b4:1d:53:fe:c2:2a:f7:37:ef:5e:27:3a:37:bd:c3:fe:
7d:5b:c6:05:a7:fd:bb:a0:35:ff:cc:fc:c6:64:52:57:00:21:
78:53:f1:f3:50:11:5c:13:ba:ba:03:04:98:4b:79:1b:38:23:
e0:eb:b4:cc:27:2d:ab:94:ca:e1:6a:fd:7a:53:df:8e:f7:31:
46:9f:3b:05:54:88:cb:2c:a2:13:b0:41:3f:4a:67:01:d1:07:
30:59:97:79:f5:19:c4:fa:cb:a4:81:94:05:5c:35:76:78:cb:
6d:d0:ed:ac:68:b0:f0:99:f8:42:d1:5a:2f:ed:8b:8f:b9:29:
65:8d:af:70:21:73:fe:78:7a:3f:8a:10:70:ba:b5:f3:12:b5:
74:f5:e5:12:4a:87:ce:06:1e:75:0a:fe:ba:c6:67:01:31:02:
1a:61:2a:69:ea:cf:19:b9:9c:4b:87:45:c2:9c:bb:32:7c:23:
1d:a2:e1:0d:2a:b8:bb:6b:fd:f8:3e:54:4d:86:0f:44:36:d8:
e0:f4:13:14:60:1c:95:66:64:a8:68:06:80:73:b7:52:20:b9:
92:72:be:d0:f4:4c:57:8a:6c:19:28:8e:c0:e3:9f:82:1c:a8:
f2:cc:b0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:27 2025 by rpki-client