Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
File: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json)
Hash identifier: IIFGeiRa+OgE/uea7QZIp78/48tVZYvWPDfn5AV2Vfk=
Subject key identifier: 91:4D:41:97:95:CD:44:B3:91:AE:83:06:85:ED:E7:6A:43:D2:F5:E0
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Certificate issuer: /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial: 019A4F62B34A7BD467EE5241C0A961FB9A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
Manifest number: 0DEE
Signing time: Tue 04 Nov 2025 15:00:59 +0000
Manifest this update: Tue 04 Nov 2025 15:00:59 +0000
Manifest next update: Wed 05 Nov 2025 15:00:59 +0000
Files and hashes: 1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: UvX2hZzYLegp25UWe7H35UKD1Gzb2seYImrnuwA8CgA=)
2: lTwG7fexEhfG1KlVMWVQwuwbbtc.roa (hash: bfD7+ofvPCOaA8CmUpbLhJtSVYv9giSBukJUfQkg6wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:b3:4a:7b:d4:67:ee:52:41:c0:a9:61:fb:9a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Validity
Not Before: Nov 4 15:00:59 2025 GMT
Not After : Nov 5 15:00:59 2025 GMT
Subject: CN=914d419795cd44b391ae830685ede76a43d2f5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:de:38:7f:d0:5d:f5:ca:51:d7:7b:2c:e7:04:
f8:49:a1:fa:a4:3f:16:4d:b3:6a:4a:e5:5e:1a:bc:
a7:1e:66:27:2f:77:e7:7c:8b:78:0f:f3:2f:05:f9:
ca:3f:74:ea:3c:da:3c:4c:da:0f:85:96:a9:96:af:
62:54:f0:77:d7:03:66:ff:09:95:6e:8a:6e:73:9b:
ca:d9:74:03:98:bb:0c:57:f8:8e:b0:1e:98:e1:b2:
74:62:95:9a:a8:c4:e4:2e:5a:86:d4:57:49:c9:56:
f9:5e:15:4f:9f:70:47:b6:ba:5b:05:3b:4b:da:75:
34:bd:f8:93:e5:8e:ca:b8:c7:1a:5c:9e:61:a1:04:
2d:21:55:31:a8:6c:4a:2f:98:35:91:59:58:fe:23:
fb:9b:ea:44:18:5b:82:82:61:3f:da:53:fc:92:e6:
69:41:ed:98:45:99:1c:28:cb:0a:86:e6:4d:61:2b:
89:04:09:d8:75:b5:6f:a7:38:30:d7:2b:59:49:c4:
76:8a:b8:73:62:df:a8:b6:47:d3:ef:97:43:e8:03:
c6:33:41:c2:b1:1e:2d:13:b4:cb:a6:f1:5c:d4:83:
cf:d8:03:0c:da:46:f0:24:77:7c:13:69:a1:62:d6:
d3:96:4d:eb:e4:3b:85:23:b0:2d:33:1d:e8:09:74:
1f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4D:41:97:95:CD:44:B3:91:AE:83:06:85:ED:E7:6A:43:D2:F5:E0
X509v3 Authority Key Identifier:
keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c3:11:69:c6:fb:13:43:b8:0a:93:c9:c0:01:da:69:4b:ed:
73:62:29:9f:87:ae:29:1d:00:c4:9f:f4:01:87:de:7b:68:1b:
86:e8:d7:aa:c5:e8:f3:f6:78:6b:e6:b4:cc:d9:f5:39:c7:05:
2c:30:b9:75:62:37:35:e8:30:23:ae:b1:66:91:e5:78:c6:90:
7b:55:1a:2b:fd:06:bd:67:17:64:f8:f9:63:06:3a:82:6b:2d:
07:b5:37:0e:9f:26:a6:1c:29:3b:27:94:63:a2:12:74:66:83:
14:96:14:cd:15:99:8b:ec:d9:67:14:33:1a:0f:64:77:7b:63:
bc:b7:4d:35:ab:3b:09:4a:b4:50:03:2b:c7:08:3c:e2:de:20:
fb:45:eb:29:53:d8:7f:9f:a7:08:67:1f:c7:62:ea:84:bc:6e:
55:44:98:38:8f:bf:06:53:f5:d9:e0:78:16:a3:c2:f3:92:c6:
07:a7:b1:6d:1d:7d:7d:eb:3a:f5:2b:9e:6f:3d:f7:1b:28:0f:
f5:7d:36:18:d9:dc:c5:b7:ed:23:c8:4d:e6:40:f1:ab:c8:7d:
da:2d:16:ef:65:3c:d1:a2:6e:d7:6b:31:9f:60:ec:04:8d:89:
89:da:27:94:cf:a8:ac:79:6f:f7:d0:c6:66:87:83:9e:bc:73:
d1:88:6c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:29 2025 by rpki-client