Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: LmNz2lZ/SEsIDHjtZcWlgr9yweT8xckrKWip5/3f6+g=
Subject key identifier: 6F:29:B1:80:D9:8C:93:F9:A1:71:DB:1E:B8:68:80:25:6F:64:47:64
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 019A50E33BC03D20170FB1E53237707FE82D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 06B1
Signing time: Tue 04 Nov 2025 22:01:00 +0000
Manifest this update: Tue 04 Nov 2025 22:01:00 +0000
Manifest next update: Wed 05 Nov 2025 22:01:00 +0000
Files and hashes: 1: JPk8qHaA0VqJJwM_cRiEk2hiNN4.roa (hash: UcrJOHgb+5M2bbcwOpZ1qAySq77AEN4vifocol3LdDU=)
2: MaON6tltdE_nNRyafDLxcoztK6E.roa (hash: Sb8QCt7PRXcCVTxqpNcJ/gxYw3sApRrWPJqKe86QFYM=)
3: OI1uK9LvyBYMrxZk6Wtsms4rrxQ.roa (hash: r4xm6yQr/cgOXWzX1uA52pwqnclq3721sVsfso5FXPI=)
4: SWZ731YmHf9GvH8Lkc-8awFctFs.roa (hash: YMn4x1FGAr61bxn/Z7AB4iuUFTZ6bShjnEOsfqmAjsc=)
5: XtH0htLAKG6Q5dcfnWZEaEHDokg.roa (hash: 6hipGrL8gPx/AA1jsYDtYKkvzd7jAI7crI4ZoMmJgjA=)
6: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: c0QOwvB4QUlCWreif9kV8GZFYMtID6sjZQeiXjtmGhw=)
7: jEuhOWOO-QlWKQlP_vQxpSPLQb4.roa (hash: T76BJeDOcF7APO1x6/gqGhi/5iskR6Zu3KBZKjePpuU=)
8: pADzcECo2Yf0nO80duEMuDGh3X8.roa (hash: /D3kHt6hhWjXdSU0si9ABN/nIQHXorfwBvY2dwdWWD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:3b:c0:3d:20:17:0f:b1:e5:32:37:70:7f:e8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Nov 4 22:01:00 2025 GMT
Not After : Nov 5 22:01:00 2025 GMT
Subject: CN=6f29b180d98c93f9a171db1eb86880256f644764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:f5:72:fd:de:69:25:d4:e3:9f:48:e1:ce:
a0:60:73:0d:5b:ab:e9:e6:23:2b:f4:f5:5a:ff:5d:
76:e6:24:56:77:e9:3c:db:02:5c:95:32:70:0b:53:
dd:61:41:5c:17:40:a3:75:7d:c2:3a:3a:a7:4c:ca:
7a:64:92:51:bf:1e:85:b7:07:ef:bc:5d:84:7c:c1:
03:6d:fe:b2:31:13:e3:28:8b:5b:1d:e0:53:ab:37:
bf:b3:65:53:70:23:e3:39:20:43:64:da:01:c0:1a:
ea:85:9f:95:79:4a:c9:84:a5:28:d6:f8:41:f6:f2:
8c:09:db:ba:19:8c:e5:73:bd:a0:b9:ab:3a:b4:c3:
fc:c4:7a:9e:eb:6e:a9:3a:f6:1f:e0:df:eb:17:d9:
54:1a:1d:e1:4a:3e:92:a5:0c:39:29:83:17:3e:9c:
49:51:f8:c0:d4:bf:70:aa:01:b3:fc:d2:b7:4e:ec:
67:66:4d:d2:f9:41:58:68:f4:9f:c1:1f:6b:02:80:
de:53:3a:05:08:9b:24:c8:03:07:ec:41:7a:0d:aa:
f7:a5:6f:dc:78:d8:b4:7a:c6:a7:97:31:94:d8:71:
70:70:3b:d1:cd:f0:c7:99:24:a4:37:83:1d:c1:f5:
a1:2a:19:78:43:f0:92:b7:64:cd:18:38:b2:84:ce:
71:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:29:B1:80:D9:8C:93:F9:A1:71:DB:1E:B8:68:80:25:6F:64:47:64
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:cc:28:1c:98:4b:a8:4c:bc:15:7d:bd:09:c0:64:24:05:5a:
fc:ec:78:25:5a:75:f8:68:eb:45:9f:64:e8:3d:3b:0a:7a:4c:
31:af:1d:74:c7:0b:44:95:ab:d1:9a:54:fe:43:dd:a9:50:41:
5c:cb:e8:25:29:a4:b5:14:d1:60:f5:7b:8b:5c:e9:07:7c:c0:
ee:ed:9f:cf:54:38:49:6f:9f:1a:57:d8:98:00:89:d8:2c:e7:
0b:17:ca:bd:2f:b6:f3:8b:6e:67:24:e0:9d:31:b8:23:08:25:
84:89:11:d0:3d:ce:df:15:23:d8:b0:d9:c3:37:00:ba:4f:fc:
61:a8:d6:84:96:b5:23:20:76:e3:57:ee:71:54:51:07:07:bb:
e8:fe:c9:83:d5:27:37:3d:30:15:3d:bd:cf:bb:33:d2:ea:da:
60:82:a0:eb:34:63:95:61:7d:9a:6c:c1:e2:fa:70:fd:1c:bd:
de:db:18:5a:49:c1:c2:ca:91:08:03:34:e9:2a:68:15:28:0a:
ad:06:52:21:6b:44:27:6e:87:41:8f:6a:cc:b9:d1:04:50:98:
1c:cb:a5:83:19:88:bb:75:fa:59:ca:68:17:a7:87:04:2b:e2:
8e:b8:2c:11:1a:25:73:15:1e:1f:ca:ef:fa:cc:a6:86:16:33:
12:a6:90:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:22:19 2025 by rpki-client