Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier: WLf6DUqyj2VQFPKJgqSRrqZ9te9Ukx8G2Ay6SHY7XY4=
Subject key identifier: 5B:95:5D:7B:A8:B3:5A:DB:71:27:67:5E:6F:00:EF:E7:14:AB:0F:33
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 019A515146FF08F5D1C63FCDD9E13C347BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number: 0DDA
Signing time: Wed 05 Nov 2025 00:01:12 +0000
Manifest this update: Wed 05 Nov 2025 00:01:12 +0000
Manifest next update: Thu 06 Nov 2025 00:01:12 +0000
Files and hashes: 1: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: B2YeJgRDHQDBXRGr9Cvg8nBFT7cJjHxZdINqpDmTT/A=)
2: YyGPwu-_r-eFoNX2ZTx6n9Sl7sU.roa (hash: iag5NIeY+dB9ncpa+rQd04Kk2wb7pISvllYkBby24Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:46:ff:08:f5:d1:c6:3f:cd:d9:e1:3c:34:7b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: Nov 5 00:01:12 2025 GMT
Not After : Nov 6 00:01:12 2025 GMT
Subject: CN=5b955d7ba8b35adb7127675e6f00efe714ab0f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:4f:77:9c:8b:62:da:cc:f0:5f:9f:fb:98:
ec:d1:dc:29:96:75:77:8b:42:ce:77:ed:37:61:fe:
b8:0d:0b:fd:b4:ce:56:28:17:06:2e:8f:a0:cd:4a:
a5:51:35:3f:52:0f:08:a7:ac:a0:10:dc:23:c8:35:
58:21:09:1a:e1:b4:5d:c7:93:67:9d:3f:e9:62:61:
07:8a:c8:3a:eb:f7:12:63:4d:e2:57:14:a5:e7:46:
6c:0c:3f:3a:db:71:5e:fe:61:aa:89:f3:58:2b:b5:
9d:7b:fe:41:a3:66:23:e5:d9:71:80:05:9b:69:2f:
69:55:18:84:bd:d2:81:50:37:55:ba:8a:d1:90:81:
ba:ae:cc:4b:f0:c9:43:43:17:0a:19:c0:2d:2a:18:
a1:e2:37:e4:10:d2:d1:69:34:fd:ed:d4:63:dd:ea:
7a:f0:9a:43:54:c4:68:64:67:4b:50:f6:ad:98:b5:
d2:d3:0f:ed:1b:b1:26:e0:b7:d6:01:33:4f:9b:90:
6e:03:89:98:e6:97:54:b4:69:cd:70:dc:57:bd:1f:
b5:cc:2b:07:87:1d:0c:26:ba:08:0c:f7:c1:7b:35:
f9:1f:16:81:13:ed:7b:07:d5:1c:ce:ed:9f:e9:09:
b0:a8:52:12:3b:d0:53:7e:9b:b4:fc:67:8a:5a:11:
d6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:95:5D:7B:A8:B3:5A:DB:71:27:67:5E:6F:00:EF:E7:14:AB:0F:33
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:70:7d:bc:9b:c2:01:da:e5:7e:dd:55:01:16:67:2e:37:be:
f7:9a:20:53:65:a6:43:74:eb:00:87:65:5d:8d:bb:e7:08:2c:
47:d9:89:d4:3d:e9:d8:f7:66:db:b6:9b:93:6e:9a:70:32:17:
62:87:d1:07:5c:0d:ce:5d:eb:5e:e9:45:28:97:38:5f:08:82:
95:05:c4:fb:5d:4f:43:32:a3:3e:2a:ff:9c:69:19:f6:1c:1b:
e7:bc:db:3a:48:b9:9c:f5:69:a5:5d:ed:08:e9:42:97:e7:7e:
82:39:27:35:a0:b0:12:3c:73:a2:96:2b:2f:0a:e9:68:e6:e1:
57:81:ff:84:39:f9:53:ac:84:3c:ae:04:b8:53:65:08:03:79:
00:a8:38:34:97:cc:41:17:67:7e:be:e0:c8:71:10:d5:11:db:
ea:96:f6:4e:d5:cf:ee:86:a0:8d:97:01:f0:fa:b9:84:37:54:
52:c7:52:65:93:ce:37:46:00:6c:d0:5d:c9:ca:d3:ee:20:15:
45:68:e1:ce:ff:f2:0a:e4:73:04:a7:e0:e9:91:d5:b1:34:a8:
f8:78:02:a5:b0:91:8c:bc:1a:2f:6c:ac:9d:b3:85:84:1c:0d:
0b:d4:e0:2a:bf:b0:f2:ec:20:f5:44:67:28:24:2c:67:67:09:
69:2a:14:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:26:49 2025 by rpki-client