Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
File: 9WYBbYeCMBKLWOJ51mHBleY5lYg.mft (raw, json)
Hash identifier: yl9wvMTkeNkSTIjpJlze+FIxZi9ikn9kR6lzLRMHOd8=
Subject key identifier: A3:EC:A5:6F:D1:6E:C4:39:85:34:B0:0C:1E:1A:73:F4:FB:9E:2E:94
Authority key identifier: F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
Certificate issuer: /CN=f566016d878230128b58e279d661c195e6399588
Certificate serial: 019A4E18B192B90AE725056B2015EC940131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
Manifest number: 06A6
Signing time: Tue 04 Nov 2025 09:00:32 +0000
Manifest this update: Tue 04 Nov 2025 09:00:32 +0000
Manifest next update: Wed 05 Nov 2025 09:00:32 +0000
Files and hashes: 1: 9WYBbYeCMBKLWOJ51mHBleY5lYg.crl (hash: SH5e8zU+VK/ZpGeH71hGFiuY5773ffTRwn/pnjImzDc=)
2: FK1-eXhRSe8ffp_S_lHbaTgBt8o.roa (hash: isewhw2bUh3V4X01VwpIosa0D4eXIb8LPC/N4oNejio=)
3: d9_S0MdBcLLQhVMY4GIXLkmlz3w.roa (hash: JIdW7E8RpIHlAxf+ndeNBtGoppjXWf7rJVf8yChsf7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b1:92:b9:0a:e7:25:05:6b:20:15:ec:94:01:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f566016d878230128b58e279d661c195e6399588
Validity
Not Before: Nov 4 09:00:32 2025 GMT
Not After : Nov 5 09:00:32 2025 GMT
Subject: CN=a3eca56fd16ec4398534b00c1e1a73f4fb9e2e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:2f:f4:3b:a9:70:52:1c:f0:23:d5:f9:0a:
62:11:4a:e1:6c:6d:48:09:db:26:d3:b9:ab:6b:db:
8f:65:20:72:45:b9:f1:15:1f:6b:0d:fd:d1:e3:af:
eb:57:50:c8:53:d5:30:d1:c7:f9:c1:bb:a8:27:a1:
80:73:66:b9:22:31:48:d7:b4:6f:0f:fd:af:e3:eb:
3c:db:e0:d5:ce:36:23:4f:32:47:07:f0:14:85:0f:
d0:c4:53:32:1f:c8:47:a3:a6:3a:d6:77:02:b3:d8:
86:b1:b9:50:16:18:3d:2d:6c:c8:41:27:2d:ff:42:
df:d7:23:1a:80:c7:34:61:36:7c:56:77:a7:61:55:
88:31:79:56:51:4a:db:09:43:96:01:e0:34:24:e8:
e0:e6:96:0e:13:28:1d:ea:97:cb:8c:3e:c7:a4:27:
d6:04:d8:26:82:98:79:6b:16:46:22:72:a2:99:a3:
fe:78:3e:7d:f9:ad:70:e3:85:57:e2:4c:3b:2a:b8:
2d:82:d0:44:0a:42:6f:f0:90:bd:01:70:6b:f7:d8:
1f:07:51:b8:5a:92:88:78:7d:2b:f5:4c:3e:4b:26:
a1:89:d0:f8:8a:d2:32:9b:c7:93:84:fb:1a:f3:e6:
23:59:e7:6b:a1:ac:5d:c8:41:dd:33:1c:44:e4:42:
e6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EC:A5:6F:D1:6E:C4:39:85:34:B0:0C:1E:1A:73:F4:FB:9E:2E:94
X509v3 Authority Key Identifier:
keyid:F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:83:56:eb:f6:e8:9a:f5:d0:fd:95:50:f1:54:c7:be:34:35:
11:77:c0:df:0a:ab:8d:8b:2a:42:ab:21:4f:f8:9a:7c:c1:13:
db:eb:a5:0d:68:00:aa:a0:7c:ce:49:e7:0a:c7:fb:52:e7:7c:
7c:f3:9a:ff:c5:b4:30:df:45:c7:dd:81:5d:b1:6f:7a:61:03:
ed:bd:80:bd:b9:df:d4:f4:f2:61:07:b9:46:8f:8b:10:74:41:
9f:aa:e1:63:4f:dc:cd:04:24:9d:f7:5a:0f:f8:09:18:69:45:
9f:d4:be:03:93:54:a7:e4:ed:ed:07:a1:62:a8:4e:fa:c9:15:
7e:33:3c:6c:8f:92:c6:07:b7:68:06:52:cb:30:fd:c3:bf:95:
1d:4a:25:99:a8:ce:b8:43:dd:20:2d:03:c1:53:e2:99:e3:ef:
68:67:9d:07:94:90:b7:d2:79:bd:90:22:59:84:2e:2b:bd:dd:
eb:b5:0a:56:9a:b0:9a:8d:a3:33:d6:a5:91:58:02:4b:bb:8e:
1b:d6:5e:ee:d7:80:86:88:9b:64:0c:97:bb:55:51:95:43:a3:
50:51:50:dc:99:21:6e:e3:cd:8a:5a:ac:41:eb:38:36:e1:a5:
8a:fb:61:60:2b:13:3f:66:14:71:49:40:22:70:d7:91:40:a6:
e5:21:32:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:20 2025 by rpki-client