Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
File: 9VW6bis9tVIdvHBipYwW3aG58i0.mft (raw, json)
Hash identifier: 7fB49ugZ6AA6vyGTV7OOAb58HKs58khoMOdLYKMN1lM=
Subject key identifier: B4:AB:D8:00:D2:E3:3A:CD:A1:ED:33:61:6B:75:4A:79:46:7F:9F:B6
Authority key identifier: F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
Certificate issuer: /CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Certificate serial: 019A4F994707D5C1DCF96293609A5AB41BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
Manifest number: 04CE
Signing time: Tue 04 Nov 2025 16:00:36 +0000
Manifest this update: Tue 04 Nov 2025 16:00:36 +0000
Manifest next update: Wed 05 Nov 2025 16:00:36 +0000
Files and hashes: 1: 2n7OMl3jQfBIql5u4fGHwPSLtNw.roa (hash: 1rKFkHzCGzWhEvrCyPc6hzfuk0GlXlkcWKE6261l+UI=)
2: 9VW6bis9tVIdvHBipYwW3aG58i0.crl (hash: 26+LhaXZI9B1/os1coYjX9HQ3quQobl+2xE1N66zlMs=)
3: R9C9RHOYfHsQX3_4qdQpXgxkEVg.roa (hash: TG8phgVc45ubyKw+a5c8BVXvVbA9fhRO3sFvs8XmDD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:47:07:d5:c1:dc:f9:62:93:60:9a:5a:b4:1b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Validity
Not Before: Nov 4 16:00:36 2025 GMT
Not After : Nov 5 16:00:36 2025 GMT
Subject: CN=b4abd800d2e33acda1ed33616b754a79467f9fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:e3:06:17:1f:83:b1:e9:1f:fb:b8:e4:91:
4a:8f:b9:e9:17:4a:a7:17:c5:3e:e6:8c:a6:d4:2a:
57:80:70:ab:5e:c8:f6:fb:48:2d:fb:71:7d:96:cb:
f6:da:7e:66:22:48:8a:d2:c5:d7:dc:b1:26:52:75:
14:9f:77:fe:a7:41:d3:d4:0b:a5:59:5d:fd:e0:71:
a4:31:4a:14:58:ca:03:0e:37:29:ad:0e:f6:de:7f:
d7:ad:53:30:b8:4d:32:b6:27:3b:88:43:98:72:6a:
eb:8c:89:2b:d8:cc:17:b2:e2:fc:cf:b5:a7:21:ec:
c5:49:b8:be:7e:fa:91:5a:74:61:b2:73:f4:9f:82:
6f:90:f4:fa:7f:e3:13:d4:16:af:cc:9a:62:c9:e1:
4c:d8:6f:e3:7d:b6:3e:40:45:59:93:d9:eb:1d:5a:
6a:40:7d:33:51:37:b0:41:ca:91:c9:fe:49:a9:3f:
da:b7:7d:7d:52:22:ab:f5:94:b5:b8:c9:85:15:1f:
ec:f7:07:a2:e9:9f:c8:4c:ce:08:2e:e5:ec:25:8c:
4e:10:cf:95:e1:b3:11:d4:0c:e2:22:4d:06:30:d2:
cc:a3:18:e2:06:9b:dc:87:4b:5e:98:a2:3d:d4:a6:
26:e1:bb:2b:35:2d:9f:82:d2:f9:66:5d:6b:d6:83:
ab:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AB:D8:00:D2:E3:3A:CD:A1:ED:33:61:6B:75:4A:79:46:7F:9F:B6
X509v3 Authority Key Identifier:
keyid:F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ea:f9:ba:a9:85:65:41:fe:76:62:0a:57:8a:0f:cf:1c:9f:
ed:57:da:68:87:48:41:08:e3:ed:ff:97:0c:93:41:a0:86:ee:
fd:22:06:bc:f2:48:cb:a7:80:6c:ec:e3:db:a0:b5:f6:44:74:
f6:8b:de:81:66:23:db:02:c8:94:b0:85:13:b7:18:8a:88:e0:
3a:e7:d4:a1:d4:f7:88:d9:fa:ce:fa:81:33:f2:ec:aa:e0:bd:
c5:16:bb:22:0f:fd:ad:c4:43:be:1a:25:85:7a:8f:19:21:28:
2e:45:8b:36:96:9d:3a:9d:8e:b2:78:80:24:3c:ac:c3:65:64:
8d:9a:62:24:60:f3:75:18:27:03:d6:73:c0:57:8e:61:67:44:
1c:aa:39:bb:f3:57:15:f3:69:81:87:ea:e7:ea:89:3b:c1:82:
de:df:53:c6:61:33:09:9b:4a:d6:fb:52:d3:0b:37:a7:af:6e:
85:78:49:3e:e8:6e:9f:55:40:15:93:25:bc:8f:30:e2:9a:74:
c6:7b:c3:10:75:3e:b8:59:00:49:78:4d:96:cd:44:cd:d5:e1:
28:63:99:ea:37:bb:e3:e0:38:d4:d9:ee:e5:18:59:e7:a6:3a:
ef:5f:6f:68:a8:1d:69:d2:d6:ea:b5:89:bd:70:92:50:83:37:
06:63:e8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:07:34 2025 by rpki-client