Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
File: 9RKnWcZemEm7fFMtXrtESZpRW_8.mft (raw, json)
Hash identifier: 9Dzw1QiDh8qiqr1R4mrSy3MYpBCmVOeM6KGeQMmRdRY=
Subject key identifier: 91:02:B7:5D:B8:5E:E1:E9:82:8C:3C:C3:46:86:81:27:75:5F:CC:61
Authority key identifier: F5:12:A7:59:C6:5E:98:49:BB:7C:53:2D:5E:BB:44:49:9A:51:5B:FF
Certificate issuer: /CN=f512a759c65e9849bb7c532d5ebb44499a515bff
Certificate serial: 019A4E86A13C9BA63D96766F8C7E051A059B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
Manifest number: 06DA
Signing time: Tue 04 Nov 2025 11:00:37 +0000
Manifest this update: Tue 04 Nov 2025 11:00:37 +0000
Manifest next update: Wed 05 Nov 2025 11:00:37 +0000
Files and hashes: 1: 9RKnWcZemEm7fFMtXrtESZpRW_8.crl (hash: n51osTTXE6+4tdr5gDWqWvEmD2Paftg+d6D73EtVGRU=)
2: PHx_cn3cwOP0zIbd-tSOarri2jU.roa (hash: jvXJa9wGshKFR0UvbJd8wg24Fv3g0IRm/OGSnIujd88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a1:3c:9b:a6:3d:96:76:6f:8c:7e:05:1a:05:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f512a759c65e9849bb7c532d5ebb44499a515bff
Validity
Not Before: Nov 4 11:00:37 2025 GMT
Not After : Nov 5 11:00:37 2025 GMT
Subject: CN=9102b75db85ee1e9828c3cc346868127755fcc61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d4:0d:de:7e:b1:55:9d:19:01:a1:2f:da:e8:
7b:2f:cf:19:9b:4f:58:24:f5:88:bc:97:b8:22:b3:
23:33:9c:d4:8b:05:85:05:45:79:5e:70:fa:e8:4c:
7c:c2:cc:f4:3b:3d:77:8b:f9:c4:6e:bc:be:36:35:
6d:8a:0f:55:24:99:11:45:46:18:d6:3e:f7:c1:fc:
97:28:3a:29:44:d4:0c:14:2f:62:0f:bb:c3:10:04:
bd:32:de:62:ee:d9:5f:ba:8b:7f:8d:1f:3b:81:bc:
9a:8a:a3:53:28:3d:9a:6e:5c:6d:05:a1:54:04:cc:
ef:3e:63:07:61:05:7f:15:1e:b7:37:45:61:1f:6d:
02:7f:43:97:49:4a:f5:7a:ad:e9:97:30:7a:a5:7f:
4f:4e:20:76:b8:84:e6:4e:59:99:c4:13:9d:cf:08:
3c:1a:4a:a4:ce:0b:a9:9b:69:e9:39:81:68:a5:a3:
67:4f:67:e8:e6:b1:f0:92:68:4a:c2:f6:1b:20:44:
80:93:c8:42:cf:13:c6:e2:22:54:03:0d:0d:01:20:
2b:3f:68:05:5c:20:50:a3:fe:74:da:b3:77:45:77:
14:08:f1:4e:69:5c:b4:6f:ef:e0:14:03:b0:e9:0d:
50:06:80:33:aa:ff:32:b9:a3:2c:a0:fa:34:af:5f:
9f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:02:B7:5D:B8:5E:E1:E9:82:8C:3C:C3:46:86:81:27:75:5F:CC:61
X509v3 Authority Key Identifier:
keyid:F5:12:A7:59:C6:5E:98:49:BB:7C:53:2D:5E:BB:44:49:9A:51:5B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1b:84:02:38:ca:00:e3:71:b4:8f:b3:dd:df:13:ad:81:4d:
46:3b:5d:3b:d6:39:78:50:3e:61:1a:97:67:ab:cc:f9:b9:a7:
6b:c0:9c:93:ca:05:80:f5:89:50:17:e7:e6:3f:8d:22:d7:5c:
f8:24:80:5c:cf:55:a0:d9:ab:dc:e7:7d:ce:81:ea:df:ef:31:
a7:f6:35:df:f2:f9:3f:3d:c0:10:f4:c3:c6:4b:3c:a7:36:70:
ea:eb:be:ca:7b:c0:73:2c:ca:ad:ce:4e:24:2c:92:8d:73:4a:
ef:f0:a3:b8:72:71:0f:17:d6:ba:9a:3f:96:28:2a:38:53:5c:
37:b8:38:c5:1b:2a:1c:56:7e:bf:78:5c:ab:ab:2f:5a:2f:e2:
f3:a5:d1:09:4c:27:f0:ef:49:8f:13:41:e5:07:0c:4d:3a:db:
6e:4e:4f:09:c8:f1:65:d1:19:94:5b:93:af:7e:37:38:5a:72:
d4:8a:df:66:3b:4b:f6:63:05:41:68:0a:61:9e:df:f1:4e:c6:
c5:66:89:59:54:e4:e8:0f:d3:68:da:81:ab:46:bd:b6:fa:03:
17:c7:3c:ca:26:02:cd:95:54:85:47:5e:4d:fc:f0:c5:fd:2e:
0c:dc:41:1e:92:69:73:df:3c:44:d8:bd:ab:03:51:5b:99:ac:
69:9f:71:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:32:18 2025 by rpki-client