Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
File: v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft (raw, json)
Hash identifier: fznkjat/5zLnEB21YZyjaGr/cmamvVzuxX/sPdBoDaA=
Subject key identifier: E9:EE:E2:FF:F3:54:5F:F2:88:E3:9F:F2:85:7E:B4:96:68:9C:1C:D8
Authority key identifier: BF:D0:70:B0:C9:AD:D9:29:72:FE:FC:56:6C:11:2D:93:71:7C:4D:6C
Certificate issuer: /CN=bfd070b0c9add92972fefc566c112d93717c4d6c
Certificate serial: 019A4F2B317B2729E469F1A5D7A8C30E6184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 14:00:21 +0000
Manifest this update: Tue 04 Nov 2025 14:00:21 +0000
Manifest next update: Wed 05 Nov 2025 14:00:21 +0000
Files and hashes: 1: JWUlW0n47cXNJZ8L9cQx9Yd-Ggo.roa (hash: gj7HUwDGMS3ITyKjYnMcn4OXx2iAaOQ1pEpR4b3yVZ0=)
2: v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl (hash: A2NBcjSlLywIvw9pPKmOpaeM81dA4odcBNxsM6ABoyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:31:7b:27:29:e4:69:f1:a5:d7:a8:c3:0e:61:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd070b0c9add92972fefc566c112d93717c4d6c
Validity
Not Before: Nov 4 14:00:21 2025 GMT
Not After : Nov 5 14:00:21 2025 GMT
Subject: CN=e9eee2fff3545ff288e39ff2857eb496689c1cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5e:36:d0:d4:94:ca:42:32:eb:e6:b3:1e:bc:
99:9e:6d:4a:44:bd:d5:19:8c:00:a3:84:e1:d7:f0:
61:b4:7d:3a:c3:2d:0a:53:e0:56:47:cd:81:0e:5e:
22:df:29:ff:49:d1:7c:7b:6b:39:ee:00:cc:a2:61:
d1:ef:1c:48:bc:fd:56:bf:20:74:13:a7:b4:1a:42:
54:eb:7a:2c:9a:0e:35:76:4b:02:25:9a:e3:76:0f:
ec:44:3e:08:21:33:ad:29:92:05:24:48:20:88:b5:
30:28:fe:0d:a9:67:13:02:dd:a8:e0:c7:c4:4c:b5:
72:e8:27:73:6b:60:33:4a:00:bd:a6:31:b4:94:70:
70:b3:34:e0:e7:38:76:a4:fc:8b:4b:fd:9d:69:bf:
5a:01:ff:66:a1:95:3c:82:eb:b6:31:96:31:f0:eb:
32:30:9e:a5:8d:64:73:c2:04:2d:ba:8e:38:11:68:
3b:9c:b2:e5:de:62:0f:19:46:fc:b0:53:db:b1:7f:
70:78:43:56:27:a4:46:b4:5a:2e:63:3d:2d:51:74:
1f:de:0c:10:e2:80:97:69:ad:2e:fb:b9:af:2d:5c:
9a:60:06:94:4a:f2:ee:05:d0:e3:6e:1e:22:3f:4e:
d0:45:34:38:59:83:a0:c9:38:04:34:d5:e3:44:ce:
ee:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EE:E2:FF:F3:54:5F:F2:88:E3:9F:F2:85:7E:B4:96:68:9C:1C:D8
X509v3 Authority Key Identifier:
keyid:BF:D0:70:B0:C9:AD:D9:29:72:FE:FC:56:6C:11:2D:93:71:7C:4D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:68:ba:38:39:52:94:1e:96:a0:6e:d6:e2:a7:ba:48:68:bb:
5a:d8:69:b7:32:84:2c:f4:03:7c:7c:49:a0:1b:6f:d1:3f:55:
b9:14:88:24:2d:5e:3e:c4:f1:08:e3:f5:cc:72:74:cb:94:3b:
ff:39:66:e8:85:38:a5:e1:8b:fa:2f:a1:f7:5d:91:f3:05:00:
25:6a:1f:a9:b8:6c:14:96:43:7c:be:df:46:4c:4f:00:b8:91:
ee:3b:02:58:0b:3d:e4:6a:70:f7:23:ea:8f:42:51:33:3a:6a:
86:87:d4:c2:ca:e7:22:fc:11:01:60:83:73:01:aa:e3:a8:c6:
4f:68:06:9d:e3:fd:5b:a8:ba:3b:ff:10:82:b5:eb:14:a1:b1:
c0:c1:54:c0:9f:bb:92:f1:bf:bb:6f:42:60:f0:93:93:d1:09:
02:ca:07:4f:58:9a:fd:83:da:b4:14:b1:58:0f:f1:c5:91:f1:
ac:d7:e0:82:4a:02:01:37:cf:f8:90:d0:aa:3b:a0:28:62:50:
37:4a:6f:5a:fc:2d:19:a7:37:1b:ba:3b:c8:d8:47:59:b1:d0:
47:d0:38:d2:d1:2d:bd:9f:a2:5f:af:08:7d:3c:f4:69:de:e6:
7f:2f:f3:a5:d1:e7:f2:42:5d:cc:d9:80:2c:b0:7a:d0:d7:03:
3b:84:2f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:55 2025 by rpki-client