Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
File: 9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json)
Hash identifier: EsKZD/envKpMchNE7qUyL+VywklvuFVQzjMinlRf3II=
Subject key identifier: 6A:56:DF:7F:53:88:73:13:0E:02:5D:3D:BC:5C:77:35:E9:90:E2:B4
Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Certificate serial: 019A51F5E8D2690C6A6B6B136C53A936E18A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
Manifest number: 12FA
Signing time: Wed 05 Nov 2025 03:01:01 +0000
Manifest this update: Wed 05 Nov 2025 03:01:01 +0000
Manifest next update: Thu 06 Nov 2025 03:01:01 +0000
Files and hashes: 1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: P+hOZ90xLJpVESTaWEot7kXgt2uZ2urgAYcll0NOzqs=)
2: jFj_wAVFaMa6v6BwAOU_Uc1FIto.roa (hash: OCl5X/o2fl4tL/vj2OOu1PZNEi03ZxIx2lIN6Tnh8gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:e8:d2:69:0c:6a:6b:6b:13:6c:53:a9:36:e1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Validity
Not Before: Nov 5 03:01:01 2025 GMT
Not After : Nov 6 03:01:01 2025 GMT
Subject: CN=6a56df7f538873130e025d3dbc5c7735e990e2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:59:8c:81:41:22:93:f3:54:c0:0e:d5:a1:49:
92:01:28:ab:d8:d1:ec:b4:7f:a8:36:12:a5:0f:d4:
73:92:c1:86:d0:5f:30:3c:83:6e:40:02:94:82:e0:
ac:65:7c:0f:90:5d:6c:59:f8:b9:74:67:b3:00:71:
ea:72:50:99:9c:b7:70:a0:e8:6a:99:22:2d:ed:63:
e9:f8:a5:fe:9b:f8:99:bb:69:d8:c2:fc:d1:9a:33:
7b:02:be:91:db:e7:0e:b1:53:84:a9:3e:25:73:22:
b6:c5:cf:3a:d7:94:c1:9e:6c:d7:98:f5:e6:a9:23:
3a:4b:95:94:3b:ac:8c:10:03:fb:82:d8:63:0d:11:
2b:5d:d4:c7:71:59:23:5b:73:16:fa:d7:3b:45:ac:
24:dc:79:9b:ec:1b:28:57:9a:c6:65:66:37:3b:39:
88:fc:dc:af:8b:68:f9:cc:af:5e:16:30:9b:b1:46:
06:b2:8a:a7:02:ba:bf:d9:3d:76:4d:73:bf:93:d9:
4a:c7:cd:8c:a2:0b:55:8c:3a:1b:44:d8:20:f3:37:
0c:46:02:eb:bb:cb:26:5b:3b:87:cb:4f:f6:86:1f:
9a:41:b0:dc:ba:96:12:ad:fe:c8:85:20:79:43:0e:
b2:5d:a0:60:7f:ec:6d:a5:ba:63:49:3f:24:77:5b:
a0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:56:DF:7F:53:88:73:13:0E:02:5D:3D:BC:5C:77:35:E9:90:E2:B4
X509v3 Authority Key Identifier:
keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a0:c2:55:a0:aa:7e:97:34:3c:d4:ea:99:71:31:d3:12:b7:
bf:e7:3a:90:89:6e:26:5d:92:ef:98:db:6f:ea:8d:1d:62:58:
46:77:0b:22:91:e7:fb:20:e7:cd:87:5c:d9:a7:13:bb:52:d5:
12:7d:0b:57:5f:ea:21:be:ed:56:5b:94:68:b2:8b:b6:ba:03:
1c:86:0f:fa:59:68:7d:af:e8:96:62:b7:d0:06:27:01:d9:31:
5d:34:37:ea:b7:d3:4f:85:bf:18:cc:ec:c9:a7:4b:d8:b9:d2:
bc:bd:92:18:ac:35:b0:44:35:d3:7e:c3:45:f3:9e:c1:7c:ab:
76:d9:18:0c:2e:44:fd:b4:36:86:57:00:ce:65:9c:15:2c:1a:
14:e4:25:16:cc:c8:e2:1f:b5:08:b8:2d:76:84:88:3c:18:bc:
55:3e:81:af:a3:97:76:d1:71:ff:dd:f3:96:a2:e7:b6:c7:84:
67:88:b0:e1:25:b4:38:5d:e6:f0:44:c4:eb:dd:1a:d0:41:41:
b9:41:b0:7a:d3:46:57:26:e2:dd:9f:f0:5a:6c:fb:f9:55:aa:
de:e8:ed:4d:17:a8:22:fa:fa:9f:88:e2:b0:b4:31:72:f5:73:
d9:ec:25:f5:a1:d4:d8:d1:07:c1:c5:0c:2e:82:b9:c3:cf:9c:
91:a8:ba:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:04:49 2025 by rpki-client