Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
File: 9U47eX9Lo36_cYmkwU8FINfPMNc.mft (raw, json)
Hash identifier: B8hALp5eUL7Q5f+B0tFXvYtaHOPteTLq3bhNeAdFiog=
Subject key identifier: BC:D6:6C:FA:53:CB:2B:7C:1B:50:7A:F1:0B:C0:47:50:9E:F1:C9:37
Authority key identifier: F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
Certificate issuer: /CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
Certificate serial: 019A4DAAABB303376F912411BF4BA7205A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
Manifest number: 0425
Signing time: Tue 04 Nov 2025 07:00:21 +0000
Manifest this update: Tue 04 Nov 2025 07:00:21 +0000
Manifest next update: Wed 05 Nov 2025 07:00:21 +0000
Files and hashes: 1: 9U47eX9Lo36_cYmkwU8FINfPMNc.crl (hash: +XGDENhMbOB4m9LcWQcsvtXdzlDB8V84E1HE0HeVxC4=)
2: UmpOhRez3moOZWrjBKIN45JkCE8.roa (hash: rPkye9amYErKpRGECf5NJc6OYwjs4QcPoervOMLXjak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:ab:b3:03:37:6f:91:24:11:bf:4b:a7:20:5a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
Validity
Not Before: Nov 4 07:00:21 2025 GMT
Not After : Nov 5 07:00:21 2025 GMT
Subject: CN=bcd66cfa53cb2b7c1b507af10bc047509ef1c937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:d5:ce:68:d0:69:2d:a3:b3:e7:00:89:11:
9f:02:34:1c:66:5f:09:48:6a:e2:08:6d:6f:a8:60:
ef:14:0c:d8:28:35:b8:03:62:a4:f4:67:51:0c:6b:
04:48:92:a2:0a:1d:c3:c4:ce:bb:35:53:2f:24:82:
15:e5:00:89:93:01:57:7d:22:94:c3:6b:e3:e5:73:
14:be:70:33:2e:e9:cb:8c:ba:5d:92:29:60:bf:27:
52:b6:5b:75:7b:3b:5b:ae:58:1a:93:b4:a7:5d:21:
0a:47:ec:04:fc:44:cd:b2:4e:bc:7e:b1:63:69:38:
d7:57:75:49:79:08:d2:ec:07:d5:2a:99:a3:01:62:
80:0e:16:33:92:98:db:fe:c1:49:c7:c4:d4:89:1f:
20:64:42:25:34:7b:64:78:c8:38:2a:96:58:90:9e:
9c:79:9a:3a:6c:5e:ba:3b:cd:87:8f:5a:64:1e:76:
d3:dd:c0:5d:e2:2a:9f:d0:13:9f:8b:5a:46:cd:3e:
73:58:81:8d:a5:7d:08:bc:ee:26:9d:d7:38:c2:d4:
5f:e6:08:c7:25:e8:2c:25:be:fe:56:d7:ea:54:7c:
d1:2c:27:6d:b5:65:07:e7:0f:0e:77:57:74:0b:37:
9c:cd:41:ee:97:81:91:a5:af:46:59:bd:b3:0b:78:
8f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D6:6C:FA:53:CB:2B:7C:1B:50:7A:F1:0B:C0:47:50:9E:F1:C9:37
X509v3 Authority Key Identifier:
keyid:F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f5:ef:0b:7b:09:52:3f:fa:31:67:0d:8d:16:34:fd:a6:6a:
3c:ec:0a:33:9a:b2:42:63:73:8f:7d:82:00:aa:8f:42:6d:db:
e8:d8:ae:a8:f3:9c:4a:2c:6f:cb:03:24:f8:60:0e:cc:52:ab:
bd:65:bf:24:f1:9d:e5:9e:e5:cd:51:59:e3:87:06:6c:01:dc:
9a:6b:3b:8e:e2:6f:28:a1:be:80:ee:a1:3d:81:5d:17:eb:5f:
7b:c3:75:75:f1:2b:ae:71:4d:57:92:23:8e:b3:52:9f:1e:19:
8d:92:b0:9e:54:19:91:16:df:17:5e:78:5f:48:bb:ea:1f:4c:
a7:5b:b4:66:68:75:1f:70:0a:83:53:bb:f0:38:1b:72:68:94:
18:be:d2:54:11:5d:44:7d:5d:36:d5:7c:05:f4:51:c7:a8:86:
4c:e5:4c:95:38:03:37:de:15:d4:f9:df:41:1e:c4:b0:8e:5a:
fe:7a:5e:45:68:21:e9:43:85:ff:b3:db:5f:64:e5:5a:c4:c5:
74:45:13:a6:93:0d:53:46:8c:80:82:3c:ab:ab:9b:75:4e:be:
04:65:1e:cb:b4:ba:1d:ca:39:77:2b:9e:a1:9f:cd:80:af:c3:
1d:64:fb:5a:5c:c2:f7:1e:8b:1c:9c:05:e7:67:0d:66:6e:ff:
ef:41:67:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:34 2025 by rpki-client