Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
File: 9YmCO6FHWAB83oc69L9H_Zw5c3s.mft (raw, json)
Hash identifier: AilLRAIp3NUmgi79gFquUcLES49rxn21mHlMZKDCIN0=
Subject key identifier: B0:20:51:E0:DD:6B:8C:80:DE:65:4F:5C:47:4A:B6:CA:21:12:2B:B6
Authority key identifier: F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
Certificate issuer: /CN=f589823ba14758007cde873af4bf47fd9c39737b
Certificate serial: 019A4EF54391456A2CC007B459B800EB3041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
Manifest number: 11EE
Signing time: Tue 04 Nov 2025 13:01:27 +0000
Manifest this update: Tue 04 Nov 2025 13:01:27 +0000
Manifest next update: Wed 05 Nov 2025 13:01:27 +0000
Files and hashes: 1: 9YmCO6FHWAB83oc69L9H_Zw5c3s.crl (hash: GD2+EwD2jTHGQLT2+fq2y5oQjGFLBsrgR8VFZyAkED4=)
2: cwCE2hhjusn86QvOu2pcA9KTbHA.roa (hash: NxYhK1mgxO/73LOxU0Rf/stDIA61i1imewNDavbu5Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:43:91:45:6a:2c:c0:07:b4:59:b8:00:eb:30:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f589823ba14758007cde873af4bf47fd9c39737b
Validity
Not Before: Nov 4 13:01:27 2025 GMT
Not After : Nov 5 13:01:27 2025 GMT
Subject: CN=b02051e0dd6b8c80de654f5c474ab6ca21122bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:28:bb:69:7c:06:6f:8a:26:f2:d6:95:9b:95:
07:f3:5c:80:a9:eb:35:bf:cb:dc:73:c1:d4:45:ef:
89:d9:52:1b:6c:d7:80:e2:21:40:59:fb:d8:f6:a8:
74:7e:cb:3d:bf:b9:f8:25:30:06:10:d7:3c:24:e0:
46:b2:b4:7f:e4:10:38:1b:a5:ec:8e:54:9e:33:be:
3d:3b:8f:e8:94:f8:98:d7:96:18:66:08:eb:a5:18:
b2:bf:aa:fa:1e:a3:02:94:b8:fa:46:e9:e3:3e:bb:
3d:e4:b5:25:c2:d5:f5:d3:1a:3a:10:b3:3a:07:50:
07:bb:63:ee:c8:f6:39:03:f5:f5:64:3f:b4:c0:20:
23:e5:94:ad:c0:a1:b8:77:9b:a8:79:16:e3:24:64:
49:4b:11:1f:d1:04:af:87:21:d2:2c:d7:ab:bc:bb:
f7:c4:e6:f3:66:9a:cd:47:13:2e:d8:8f:71:bb:9b:
e4:11:aa:27:e7:a0:85:c8:cf:6f:6d:55:81:d9:f5:
41:e4:98:6a:4e:bf:f9:14:74:1a:27:86:f6:5e:ad:
d4:30:41:a2:56:49:bd:3f:2c:e2:64:2e:3b:87:e6:
fc:54:72:4e:15:28:ec:c9:2b:72:b1:42:ba:c8:cb:
33:44:78:4a:8a:d6:aa:cf:ad:56:0b:cf:8b:ed:4d:
73:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:20:51:E0:DD:6B:8C:80:DE:65:4F:5C:47:4A:B6:CA:21:12:2B:B6
X509v3 Authority Key Identifier:
keyid:F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:03:94:12:48:cc:c4:5c:f9:74:cf:4c:5b:c1:5e:23:82:7f:
28:de:d7:aa:52:12:15:21:a3:f2:bc:e8:99:6f:31:80:4e:1e:
c9:fa:34:7f:41:9a:ce:d6:fa:d8:13:e5:8a:af:6a:d7:4a:0c:
cc:75:0c:c6:c0:3e:50:35:e8:9e:17:42:fa:45:27:33:34:38:
75:8d:2e:d4:32:72:c9:b4:38:13:f3:fe:ae:a0:7a:72:d7:27:
5e:0b:87:75:df:1f:53:55:9a:a3:d2:bf:4c:94:27:06:ad:92:
5f:4a:fe:01:7a:00:07:e3:da:f9:4d:51:ba:a8:df:c9:6e:6c:
5e:e5:9a:12:29:71:21:b5:1a:22:c6:62:6c:eb:b1:05:a1:91:
c1:9e:d0:1a:02:d4:af:f0:3a:ee:bd:64:4e:03:da:54:3a:8c:
08:2e:e9:c9:92:ad:85:c5:6a:cf:92:9c:2a:04:11:74:6b:37:
ba:b7:5f:10:99:fa:6f:87:9f:50:b5:47:2d:af:5d:c6:93:f4:
7e:c6:24:ae:a6:4b:fd:1f:a1:34:46:48:8e:2b:4f:0e:00:5a:
c1:e8:e6:19:d3:69:60:f0:d6:b7:32:fe:b9:ee:bd:a1:f5:40:
fb:13:ed:41:dc:29:3c:66:a0:7d:d7:e9:91:62:a0:7b:f2:c8:
d1:a7:e1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:09 2025 by rpki-client