Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
File: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json)
Hash identifier: WTmPeS7hGqc7sPfqoEvc2tYelMFYp9uOwBBCQWLpL1s=
Subject key identifier: 66:DD:A6:26:73:52:3D:40:9C:95:56:36:B2:0B:DC:1D:5A:C3:38:C7
Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Certificate issuer: /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Certificate serial: 019A4EF43D537FF8A1D23578865D0ACDBD21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
Manifest number: 0CD5
Signing time: Tue 04 Nov 2025 13:00:20 +0000
Manifest this update: Tue 04 Nov 2025 13:00:20 +0000
Manifest next update: Wed 05 Nov 2025 13:00:20 +0000
Files and hashes: 1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: E34e8u8qs9mtQButHglY8vODL0lLTYvGfDGAh4woWy0=)
2: HnZ1VjQW735MMUi4UDqiepCAdeM.roa (hash: 31a3rYl8qptlSMbknXPbZIkMQ7iUM4ri0d4GzZPfheM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:3d:53:7f:f8:a1:d2:35:78:86:5d:0a:cd:bd:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Validity
Not Before: Nov 4 13:00:20 2025 GMT
Not After : Nov 5 13:00:20 2025 GMT
Subject: CN=66dda62673523d409c955636b20bdc1d5ac338c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:90:c4:22:74:c3:8c:da:54:43:c9:6d:2d:
cc:ba:e5:a6:53:6e:88:b5:2c:44:68:01:5f:03:a6:
92:07:b7:53:ca:37:b8:f4:7d:db:b4:f9:ba:77:24:
a2:da:74:34:4e:7b:9a:28:90:93:cc:9d:a3:45:0c:
00:c0:7c:e8:9e:84:67:f7:07:2b:dd:a9:00:41:15:
c8:4d:59:c9:05:a2:b7:2e:b4:0b:00:0d:e9:5e:eb:
55:ec:cf:01:df:bb:5d:71:c5:b9:7d:75:4c:13:51:
13:49:11:ec:ec:5b:ba:1e:cc:11:82:c6:ed:2f:0f:
49:2f:63:0a:83:3d:1d:47:a8:77:c1:9e:c4:0b:59:
fa:d7:18:aa:ed:18:70:38:65:c3:64:3c:9f:ad:79:
eb:58:df:ad:35:31:90:ec:22:50:48:74:6f:e5:51:
b0:9f:13:2f:60:36:6c:34:5a:8e:d3:a5:bb:76:92:
a3:fc:5f:cd:b7:82:ec:bb:2e:e2:46:c9:99:ec:8f:
3c:70:c9:0f:fd:0e:4d:3f:31:bf:d9:14:89:78:42:
75:cb:2d:44:6b:a9:ca:4e:22:38:fe:8f:c2:df:b4:
e1:fb:e0:03:7d:a3:09:64:a8:78:13:c7:ce:54:19:
2f:e9:07:5e:39:95:3d:6c:e6:38:7b:7e:7d:04:8b:
27:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DD:A6:26:73:52:3D:40:9C:95:56:36:B2:0B:DC:1D:5A:C3:38:C7
X509v3 Authority Key Identifier:
keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:62:1b:8c:c8:bf:f0:22:67:10:e2:9e:e8:00:6c:2b:1d:25:
71:c5:68:09:52:08:55:e4:2c:1c:bc:f7:99:fe:d0:32:86:ac:
14:1b:1a:aa:8e:44:f6:17:19:2d:64:f0:10:bc:a5:01:f5:15:
9b:a1:ef:cd:5e:0f:db:be:1b:94:7f:b6:7f:fa:be:e0:20:b7:
c7:88:e5:69:09:6a:2b:e0:d9:b7:42:52:15:1e:9f:ea:4c:38:
55:f8:19:9f:f5:7b:a8:90:48:fc:e4:10:59:e5:72:c5:ae:8d:
20:83:84:ed:58:34:83:4e:97:c4:ae:a7:a5:ea:25:32:56:23:
a2:be:f2:41:09:c2:46:c9:a6:4a:88:75:60:40:e4:a0:03:ac:
0f:44:e7:e9:3a:a7:c0:a7:09:11:0d:2b:e0:1a:42:db:99:61:
37:73:54:98:2b:cf:9c:94:16:14:df:a2:f7:8e:14:fb:72:cf:
ba:a8:cb:70:00:a9:74:c2:31:38:8f:b6:f8:38:02:a5:3f:5b:
b7:48:22:d3:3b:01:b6:7b:59:5b:38:27:fc:d7:fd:12:61:7f:
bb:63:24:71:36:b2:09:a4:99:e8:d8:90:f6:03:1b:a5:0f:69:
7d:7c:8f:e8:d7:39:b7:13:d1:68:34:15:c4:78:62:51:e3:ec:
a7:d5:a9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:04 2025 by rpki-client