Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
File: 9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft (raw, json)
Hash identifier: cSODPCTP13rK35D96n7YTwViuOu787hxLOt6alRvsTQ=
Subject key identifier: 9B:61:86:8B:CB:F0:6E:DA:65:EC:06:CA:4F:25:92:83:50:48:F9:AA
Authority key identifier: F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
Certificate issuer: /CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Certificate serial: 019A4DAA7F26C17B1F2A5CEA8780AF8EEA01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
Manifest number: 1718
Signing time: Tue 04 Nov 2025 07:00:10 +0000
Manifest this update: Tue 04 Nov 2025 07:00:10 +0000
Manifest next update: Wed 05 Nov 2025 07:00:10 +0000
Files and hashes: 1: 9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl (hash: 1xWm01R/dbNTu6l3rTH+ef3FGv67umFqA8IjYCunyPY=)
2: ZSBBy6W5L8TTtnlSf_uUrt4Z7AI.roa (hash: jFdtASpUm3buRvq9o0f0zIeX/wlw5jgk9wy5omlh1/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:7f:26:c1:7b:1f:2a:5c:ea:87:80:af:8e:ea:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Validity
Not Before: Nov 4 07:00:10 2025 GMT
Not After : Nov 5 07:00:10 2025 GMT
Subject: CN=9b61868bcbf06eda65ec06ca4f2592835048f9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:8c:96:2a:86:f7:dd:fb:63:a3:a5:b9:8e:
8f:d1:bf:0b:7c:a7:4a:91:33:0f:8a:7e:d7:d2:c3:
5e:7a:45:fa:4d:40:61:72:cc:8a:d7:a8:10:75:99:
3d:cc:fa:df:93:e5:55:77:c1:a1:2e:5b:23:7d:69:
ac:52:1a:a9:82:8c:3e:40:97:c6:8b:63:b4:b3:39:
d6:f1:a3:44:24:d9:1a:dc:3f:5a:f2:e0:17:58:d9:
29:72:64:3a:d9:20:7d:18:56:5c:67:3e:c1:34:df:
61:f4:d2:a0:0b:6a:32:48:f7:b4:bb:ec:55:e4:41:
a5:14:c9:bb:bb:cf:ca:57:4f:3c:7a:c9:62:b8:3f:
43:d1:72:86:80:e9:cf:cf:6c:ce:6b:43:93:99:8e:
e7:d9:8f:31:7e:38:ea:34:6c:0f:88:14:39:ff:0e:
b2:3c:b9:41:3a:db:e0:65:e1:0d:82:e2:24:a3:cc:
a0:f8:85:9e:1d:d2:81:f0:cc:4d:b3:5c:02:6b:52:
50:20:62:c0:1c:a2:d3:de:a0:d2:9e:0e:1c:da:45:
e7:65:19:58:03:ac:10:e8:ca:7f:61:ab:5f:0a:ee:
06:08:21:b8:7f:d3:8e:d1:4a:9b:90:ef:60:6f:0b:
15:e1:2e:f9:9b:8d:ae:77:64:78:d8:64:46:d7:6d:
02:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:61:86:8B:CB:F0:6E:DA:65:EC:06:CA:4F:25:92:83:50:48:F9:AA
X509v3 Authority Key Identifier:
keyid:F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cd:f7:c7:d4:fc:e7:61:45:f1:67:d6:39:5d:a3:19:05:53:
37:d5:ec:2b:c4:21:b1:f1:84:91:37:87:61:30:9c:5c:d9:4b:
c8:fc:66:9f:56:fc:7c:e2:99:9c:2b:6a:5d:65:9c:9f:e4:48:
26:21:6c:34:83:1c:49:51:7e:92:70:20:f2:6b:31:51:5e:d1:
09:a5:45:d0:e4:72:b7:00:f5:9f:3a:db:b1:62:43:e6:be:2e:
b7:2d:0f:7d:43:2e:b0:fe:99:ac:ff:16:67:31:52:86:26:6b:
61:8a:70:7b:9d:ce:37:3b:f8:36:e8:1b:4d:8d:b7:80:e2:a0:
f2:76:5c:95:43:84:99:ba:24:9b:7d:79:c8:7b:58:3a:05:7a:
71:98:ab:4e:64:a8:58:9d:bd:f2:bf:0a:2a:2c:8b:e8:cd:7a:
ca:2f:c8:df:23:97:5f:e2:b6:66:e1:52:8e:f0:e4:31:80:11:
31:22:7a:2e:9d:e7:ba:a6:7f:3f:17:cd:b6:04:60:cf:d3:8a:
16:c8:78:11:c0:bc:84:57:13:3f:85:54:0f:73:6c:82:a8:a9:
e6:60:a8:af:d7:25:c5:71:33:a8:c3:d5:6e:15:1c:a5:ee:6e:
77:4b:1f:e3:7d:50:6d:0b:ec:41:04:4d:9d:36:e4:5b:e2:4a:
43:02:fc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:34 2025 by rpki-client