Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
File: 9krUXSK1888ucc4KwBB0t80hrFc.mft (raw, json)
Hash identifier: H5t+I5zcSa/ooS9WH10MbMHb3cxaKuabhcebYLd4Iv4=
Subject key identifier: EE:48:3C:B6:79:D8:C4:2C:93:4C:78:B6:E4:22:F7:C2:C7:71:59:98
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Certificate issuer: /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial: 019A4EBD4825A012E10A7AA2B2C2D789815D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
Manifest number: 15BC
Signing time: Tue 04 Nov 2025 12:00:18 +0000
Manifest this update: Tue 04 Nov 2025 12:00:18 +0000
Manifest next update: Wed 05 Nov 2025 12:00:18 +0000
Files and hashes: 1: 9krUXSK1888ucc4KwBB0t80hrFc.crl (hash: 3kKrz7b6aaCsRuk+Yo9VKEGbYofRBLgZOLbIBb5ZSmA=)
2: mgSfpYYXhzx-YzhWkHnATXB2kdM.roa (hash: jRZKuHYyv7qD4dtktC7M7U3X1Ig58/uIyWzJPwsvUJw=)
3: rNfq-FdDmBkThN1vTMRNxR08DZE.roa (hash: W7X3TtRWNC36QWPCWtaayZ46NgLlqWMrgmB/Yk/phsc=)
4: rnFKFHUDJ2VK_n3nnMWQgvu93Us.roa (hash: ddxwbWDe9h7jTPjb6zGryBRSU7cXly9K/marvCxyA4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:48:25:a0:12:e1:0a:7a:a2:b2:c2:d7:89:81:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Validity
Not Before: Nov 4 12:00:18 2025 GMT
Not After : Nov 5 12:00:18 2025 GMT
Subject: CN=ee483cb679d8c42c934c78b6e422f7c2c7715998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5a:59:3d:ff:52:ca:05:27:01:d2:e0:65:61:
a5:9c:97:c4:30:c1:94:8e:43:bb:57:29:5d:43:32:
f3:1b:8d:af:ae:c0:1e:7d:62:fa:1c:d3:e5:56:2a:
fa:b1:ae:d8:36:26:9d:2e:1e:84:bf:5b:68:29:ae:
ea:11:ff:05:19:83:7f:8c:b2:22:f9:09:16:ff:4c:
60:47:b6:07:60:c2:99:06:6c:76:fc:d3:26:60:18:
f1:1f:90:92:2a:76:e6:d9:b1:84:77:68:9f:04:45:
5d:16:a2:0d:da:97:74:75:48:d2:d2:0d:23:58:80:
40:de:9a:6d:aa:16:9a:2b:45:4b:c3:48:56:12:6b:
4f:9f:43:29:05:f8:f1:b2:8c:00:90:7a:32:ad:77:
e9:9c:5e:88:8b:92:c8:58:bc:eb:3c:cc:10:cc:b4:
a4:0a:2d:8b:7d:23:6e:d9:2b:12:48:bd:0f:aa:31:
39:10:cc:a4:86:ea:ef:00:86:4c:54:3c:29:7c:2d:
ca:e7:fc:3c:51:ed:df:b9:ec:ba:6e:6d:30:ce:89:
b2:e5:2e:62:35:3c:d7:48:0e:e8:46:bd:16:87:c7:
50:d4:b9:b4:ba:ea:39:80:17:f6:87:ba:4a:d1:98:
26:6c:83:39:84:c1:53:89:6a:e2:a9:03:b6:8c:e2:
24:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:48:3C:B6:79:D8:C4:2C:93:4C:78:B6:E4:22:F7:C2:C7:71:59:98
X509v3 Authority Key Identifier:
keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:60:8c:5e:ab:b1:8c:20:59:22:be:0d:e5:2d:b0:83:69:18:
cb:fd:9f:07:fe:3e:69:91:98:e1:18:58:30:e9:97:c2:92:8c:
5a:7e:32:5f:f9:ba:e6:84:12:e3:d6:e7:a3:b9:98:53:17:38:
24:47:9b:28:a9:9b:ab:2f:73:55:52:45:87:98:29:ad:be:93:
bc:13:c1:e0:e8:71:38:b9:2a:03:1c:12:93:89:78:95:61:30:
00:07:8a:3a:05:33:3f:29:35:cb:70:62:f9:c5:49:c4:78:0b:
86:f7:22:fa:3a:41:01:fa:2a:8e:2c:fd:51:76:68:2f:1b:62:
36:80:6f:4d:cf:35:a9:e9:7a:73:8e:10:81:28:09:29:0e:60:
b4:5d:d8:2d:af:9d:b2:3e:e5:5d:f8:9e:92:ad:79:68:b3:e0:
39:94:ee:c5:76:3d:2b:a7:28:18:44:34:0b:c5:dc:4a:c3:7b:
e7:4b:f4:ee:d7:8f:1f:83:a9:5a:e1:bc:f6:96:f6:c0:6a:c5:
5c:d0:ee:a6:44:52:38:f0:fd:54:f0:95:cc:42:02:6d:03:c0:
e9:0f:30:50:9a:af:a9:4f:56:8e:d5:60:61:88:9f:de:28:6a:
5d:81:12:37:06:fa:53:9b:1f:e7:9e:b0:c7:96:1f:48:90:7a:
75:b2:b3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:49:18 2025 by rpki-client