Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
File: m9bIYDQsx5nCgHT2mXaKjsvapS4.mft (raw, json)
Hash identifier: uOwW3XsBjU7nLRTgdrAo/Ko45xnj7ffCeZBTW/KU/E8=
Subject key identifier: 6E:A3:0A:E5:32:52:21:DE:33:FE:4A:84:F3:69:64:BF:86:EE:8C:58
Authority key identifier: 9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
Certificate issuer: /CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Certificate serial: 019A4DE1B1ADFCA889C592013EB0D8C85205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
Manifest number: 14B3
Signing time: Tue 04 Nov 2025 08:00:27 +0000
Manifest this update: Tue 04 Nov 2025 08:00:27 +0000
Manifest next update: Wed 05 Nov 2025 08:00:27 +0000
Files and hashes: 1: E9yjq7sNmTyPb-NC6kzqBRLzrkw.roa (hash: Fv8DNDjTn+xqZTnmPhsaO+M3G5osAwVvGy2YaFQtoP4=)
2: m9bIYDQsx5nCgHT2mXaKjsvapS4.crl (hash: btUE/ntzOxLn2+tQoDyTeCGVWRvjVAwqmllnTd7GG4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:b1:ad:fc:a8:89:c5:92:01:3e:b0:d8:c8:52:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Validity
Not Before: Nov 4 08:00:27 2025 GMT
Not After : Nov 5 08:00:27 2025 GMT
Subject: CN=6ea30ae5325221de33fe4a84f36964bf86ee8c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a7:ec:f4:64:b6:f5:9b:5c:fc:54:d2:3b:1e:
cb:a4:36:08:43:d1:d5:57:e8:74:e8:50:7f:2a:2c:
c1:19:e5:95:83:93:a8:dd:27:92:9a:01:04:99:40:
e9:59:bd:89:e1:8e:d5:29:af:16:b5:1f:8d:a2:b1:
bc:ea:db:9f:2d:31:fb:7c:cb:11:32:e4:71:c3:1d:
35:0f:96:ba:59:6b:82:f1:73:81:d5:4d:6d:03:72:
88:b5:c8:b0:49:99:d7:2c:7d:3d:97:a6:0d:c0:99:
67:a3:2c:c7:34:91:9f:09:81:26:1c:af:e7:5c:db:
5d:a6:98:9f:6e:a5:17:3d:68:31:db:d5:d5:37:03:
84:de:d6:c2:38:ba:a4:09:bb:9b:59:a3:6d:65:e5:
b0:d7:53:76:2a:27:cc:08:ac:03:79:11:ef:3d:c2:
c1:b7:f5:2d:75:1e:ed:09:07:b2:66:9a:99:40:f2:
5e:52:b6:e2:cb:5b:06:b8:a2:f9:9b:f0:00:75:e4:
12:dc:dd:03:46:72:f8:ac:5d:73:4d:af:81:68:0e:
08:3a:08:57:fb:14:e6:7f:50:2a:49:4c:3b:b0:dc:
d8:4f:af:d1:5b:a8:d0:42:fe:f2:e6:7b:5a:32:24:
a3:44:79:5c:cd:fb:5d:36:85:ea:51:28:a9:5f:37:
f6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A3:0A:E5:32:52:21:DE:33:FE:4A:84:F3:69:64:BF:86:EE:8C:58
X509v3 Authority Key Identifier:
keyid:9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c6:d9:83:f1:18:0e:2a:fc:e4:c5:d6:ef:4e:16:df:4e:f2:
d8:5c:62:8b:22:c4:6b:e5:25:3b:91:9d:2f:86:0c:81:77:2f:
aa:b2:a8:df:16:08:12:fb:ef:7a:15:71:93:30:06:d4:e0:06:
f6:1e:9a:1b:74:85:13:53:ac:b4:e0:41:d8:24:47:2d:de:04:
6f:ae:b8:c6:8b:ca:42:4c:ce:e2:14:1c:b0:5a:e1:47:27:63:
c0:0f:a2:af:e0:2a:1c:cb:4b:02:4f:d4:fc:95:d8:01:d7:60:
4b:48:62:38:02:cf:8e:61:b4:70:fc:52:d6:b7:6d:8b:f7:89:
28:81:f7:4f:b9:17:eb:7d:69:50:d8:94:1f:73:57:a9:c7:12:
20:f6:c9:de:5d:ed:ce:40:98:db:38:ec:75:e3:a6:a5:46:f6:
f1:a4:0a:27:f9:74:02:7a:13:8b:f1:8e:46:aa:70:c0:20:61:
9d:27:22:aa:f5:7c:d0:fe:70:09:f7:ed:9e:1c:0c:7a:7e:b7:
35:fa:86:0b:65:4e:66:e1:f4:35:56:42:66:50:b9:13:2d:4a:
9d:01:5c:6f:6e:de:97:ff:3a:c4:b9:92:4f:6f:10:1c:1a:07:
0b:26:52:ce:b3:6f:c7:e0:da:17:6d:87:77:14:e1:2f:d5:cf:
28:b9:56:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:08 2025 by rpki-client