Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
File: 9eQecyfCwxDOBmr6-HGYhtcfs4A.mft (raw, json)
Hash identifier: 06eF+ZTDbHOr3AxSoPm98YlQMbIA64JfoB2+kr/Y4pk=
Subject key identifier: 8B:1B:31:C7:96:C0:DE:FD:15:A3:A3:37:F1:DB:7F:E7:0D:45:FF:02
Authority key identifier: F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
Certificate issuer: /CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Certificate serial: 019A522CAE387161E85801075139804BCC8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
Manifest number: 61
Signing time: Wed 05 Nov 2025 04:00:51 +0000
Manifest this update: Wed 05 Nov 2025 04:00:51 +0000
Manifest next update: Thu 06 Nov 2025 04:00:51 +0000
Files and hashes: 1: 9eQecyfCwxDOBmr6-HGYhtcfs4A.crl (hash: C8gP/wEeC55XJdIqaTbIeGZhqofxRWHy7v3akGhTrCY=)
2: WPdzOJT4LC_TcCRm8RmxGjX_YK4.roa (hash: wrideVt96yprnS97lOHBi0r+Cs611ZDyctZNvffjpbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:ae:38:71:61:e8:58:01:07:51:39:80:4b:cc:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Validity
Not Before: Nov 5 04:00:51 2025 GMT
Not After : Nov 6 04:00:51 2025 GMT
Subject: CN=8b1b31c796c0defd15a3a337f1db7fe70d45ff02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:3b:92:b0:ec:aa:76:92:63:7e:49:bd:54:
1d:e6:48:b8:c6:eb:12:7b:48:17:8e:33:05:4a:01:
15:96:87:1d:bd:c7:36:3b:70:67:53:c1:3e:ac:6b:
cb:55:b6:9c:0f:47:29:b1:7e:9f:7c:78:00:5f:f5:
0d:65:4e:6b:80:26:8b:73:3d:66:a0:4e:a0:64:1e:
fc:5b:d2:e6:30:e4:eb:e8:23:ec:1b:4a:fe:f5:44:
c5:2b:80:c9:a3:ed:54:00:d8:a7:ed:9a:39:b1:39:
82:63:61:90:43:4a:34:bc:22:0a:2a:6e:69:8e:5b:
23:d5:ee:41:9b:f0:14:7e:e9:3f:7a:10:e6:8d:f6:
ca:2e:7b:91:02:31:83:f9:da:6c:c2:8c:ab:79:d3:
ea:ce:0b:a9:9e:f7:30:dc:7a:3c:70:b9:69:04:83:
c0:40:df:a6:34:9f:18:72:89:12:5f:af:8a:31:c5:
23:64:10:4c:f5:12:8c:63:46:3d:5e:dd:ed:c2:92:
18:a7:b8:1b:27:17:8b:b4:fb:e8:a0:ae:4a:f5:55:
46:5e:20:4a:2a:0b:15:1c:81:d0:d7:27:01:15:94:
aa:cb:26:f3:20:53:1b:e3:16:e4:22:2c:47:18:e3:
98:df:a5:90:5b:91:7f:bb:7d:b3:1f:21:2c:8f:92:
9e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1B:31:C7:96:C0:DE:FD:15:A3:A3:37:F1:DB:7F:E7:0D:45:FF:02
X509v3 Authority Key Identifier:
keyid:F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:83:2b:d3:28:de:1c:c6:12:12:94:b3:dd:85:fd:3c:b0:39:
1a:34:4c:8a:aa:fc:61:58:f6:50:2b:f9:f3:f5:2a:1e:4c:a4:
3a:37:ec:8c:42:69:39:37:3a:d1:07:1b:78:a4:41:56:af:19:
d7:33:66:9d:c6:bf:91:0a:7c:0b:9e:06:3b:61:26:78:bf:21:
bc:ab:43:eb:72:6e:88:03:4b:c7:f5:19:87:c9:ed:ae:83:bc:
b0:fd:32:ef:cd:1f:e2:9c:04:ab:26:f5:80:81:50:1d:fa:cd:
b2:13:e0:d5:ca:62:97:70:a0:31:4d:4b:49:8e:ec:a6:a8:a9:
89:72:46:01:4c:05:72:0e:f0:ba:3f:8b:20:5a:33:a9:59:7d:
11:88:9e:6d:4f:55:1c:9b:c0:00:c8:46:c7:a2:c1:f3:b2:49:
0a:67:cb:8f:c4:d8:3b:15:e2:23:f9:52:e5:13:bc:f6:7d:5c:
b9:ce:62:d1:d2:c3:71:07:c6:4c:b1:4e:29:3c:45:07:f1:fb:
09:6f:a7:ac:1c:97:2e:75:12:e0:10:49:1a:be:ac:d3:8a:5d:
37:40:b0:19:11:16:8b:26:5d:06:b7:93:3a:00:4b:4a:c6:f3:
cd:09:d4:2d:19:a9:4d:56:86:9a:b2:f8:02:4b:5b:57:d0:00:
f8:ad:bb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:52:40 2025 by rpki-client