Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
File: 9gcH8oeiMJvuy7hS7kCqgxueeGY.mft (raw, json)
Hash identifier: /seaZVE0p7W7uq95jHHF4RKkzXK8WpFXVv5vl93nWng=
Subject key identifier: 98:F2:5E:70:57:8C:A8:E2:A7:F1:EB:DE:3D:18:0E:13:40:45:65:DE
Authority key identifier: F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
Certificate issuer: /CN=f60707f287a2309beecbb852ee40aa831b9e7866
Certificate serial: 019A4E865C33A5FEE0E65B6E5F16BC80654D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
Manifest number: 0DBA
Signing time: Tue 04 Nov 2025 11:00:19 +0000
Manifest this update: Tue 04 Nov 2025 11:00:19 +0000
Manifest next update: Wed 05 Nov 2025 11:00:19 +0000
Files and hashes: 1: 1qWzBwVhmQ6zdPJi5w7aMEYeKoc.roa (hash: QUUw5IgATMBX8godfHfSxzPR3Se/paZBDUtUUYMUESM=)
2: 9gcH8oeiMJvuy7hS7kCqgxueeGY.crl (hash: m/pBboiNKZndyyuHzRy2TMrAuk08v065XD0bUybgxi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:5c:33:a5:fe:e0:e6:5b:6e:5f:16:bc:80:65:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60707f287a2309beecbb852ee40aa831b9e7866
Validity
Not Before: Nov 4 11:00:19 2025 GMT
Not After : Nov 5 11:00:19 2025 GMT
Subject: CN=98f25e70578ca8e2a7f1ebde3d180e13404565de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:9a:75:ae:ff:9a:ec:b2:74:6e:26:52:e8:
f1:8c:8c:b7:02:c3:37:2e:5c:db:5e:93:7e:77:a6:
18:d4:37:7b:19:bb:40:ae:cb:b7:b7:4f:16:94:01:
6c:3b:51:af:0b:0d:f1:fa:d0:52:59:3a:94:16:39:
7a:4f:e6:b4:d6:70:9c:4e:70:36:60:c8:e8:66:f0:
a7:b7:cb:0e:e5:a4:f4:96:48:90:fe:f1:d6:64:23:
b1:97:7b:93:0a:ca:b2:ee:00:89:7c:3e:6b:12:27:
61:67:f1:23:95:51:2a:5b:12:f1:83:ec:68:b0:94:
5b:73:a9:0d:4d:b7:5a:a8:13:a9:bf:0a:d7:e9:bd:
78:5b:3c:b3:0a:00:6c:58:d3:fe:70:04:e0:54:d6:
1c:89:57:0c:4a:0f:9c:f2:5f:22:23:6e:7f:21:b7:
f6:e7:2b:be:f3:bb:ec:90:63:f0:7a:61:55:88:cc:
53:a4:f1:03:b6:2b:1e:6d:fb:b3:aa:a0:8c:e9:12:
45:d9:f0:d9:e0:72:04:78:85:2c:f3:35:2e:18:83:
e3:1b:fe:81:09:8b:10:9e:c4:65:fe:82:6d:b5:01:
08:11:9d:74:5e:f0:20:4c:fb:ab:43:e4:e9:8a:23:
e3:33:50:68:4c:22:b2:1b:b7:18:5a:1a:68:11:b9:
b0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F2:5E:70:57:8C:A8:E2:A7:F1:EB:DE:3D:18:0E:13:40:45:65:DE
X509v3 Authority Key Identifier:
keyid:F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7a:15:ee:c6:4f:31:4c:97:6c:09:90:e3:6c:88:d6:8b:7e:
9d:f2:39:4d:11:26:99:7f:3d:2c:dd:2f:6b:c5:20:e9:da:c3:
93:47:60:11:29:14:b3:03:40:d9:d0:df:25:fa:49:bb:d1:d1:
d1:32:2f:bd:70:25:1d:51:9d:bc:df:21:b6:85:9d:9b:ac:24:
85:73:b9:64:81:ba:86:04:b6:ce:73:c8:e6:ab:1f:ac:97:b9:
c2:b4:4b:be:a0:7f:ed:3c:99:70:af:00:51:b5:a7:1b:43:e3:
da:e0:4a:3c:11:3b:8e:73:d8:a4:7d:b4:ac:e2:57:63:9e:72:
0f:d6:8d:14:8f:74:8c:99:a4:f7:3f:a0:66:23:44:d8:a0:8a:
7b:0e:a9:3e:03:65:4a:96:33:d1:dc:53:a7:21:18:51:27:95:
51:66:1b:8a:48:6e:9d:9a:4b:f8:75:a6:d9:86:44:54:a9:86:
c4:c2:56:03:07:c2:63:d1:99:9a:6c:bd:4d:00:0d:6f:9a:a1:
9f:6b:5b:4a:50:f8:7b:04:a5:44:35:07:4c:db:16:a6:c0:0a:
9a:63:70:96:74:7f:27:fd:0f:df:1d:cc:de:27:cc:38:be:08:
b3:80:8d:22:8a:9c:b5:27:bc:b2:19:62:20:3b:11:5b:17:77:
5d:b2:d3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:27 2025 by rpki-client