Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
File: 9nKGX4FRC5RVt-qbyMfa15k9U5o.mft (raw, json)
Hash identifier: 5uue5E9o8JLjivo01eAuLz2iSOTEKMeMgwLpzgMnjCU=
Subject key identifier: D1:87:8F:0B:8E:E8:3C:4D:CE:54:91:0D:EB:84:96:39:3A:5D:25:5F
Authority key identifier: F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
Certificate issuer: /CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Certificate serial: 019A530847A297B43007CBCF507ABE7DD5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
Manifest number: 4A
Signing time: Wed 05 Nov 2025 08:00:42 +0000
Manifest this update: Wed 05 Nov 2025 08:00:42 +0000
Manifest next update: Thu 06 Nov 2025 08:00:42 +0000
Files and hashes: 1: 9nKGX4FRC5RVt-qbyMfa15k9U5o.crl (hash: yY5gSG6mtfClFcvnVuIns+QsTmrzopHA9yCYPMubp2s=)
2: eRy2kmfW8UDcIPq4LHplflCvw9A.roa (hash: ZWExOEe6M7iJ72nBf8q960kB6kZXayCU4gvOM3MlPx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:47:a2:97:b4:30:07:cb:cf:50:7a:be:7d:d5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Validity
Not Before: Nov 5 08:00:42 2025 GMT
Not After : Nov 6 08:00:42 2025 GMT
Subject: CN=d1878f0b8ee83c4dce54910deb8496393a5d255f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:ee:59:51:68:c7:c0:ab:5d:cc:f4:ba:70:
54:d4:b0:ca:99:5d:af:c9:a7:dc:c0:06:20:d6:83:
bc:42:23:29:8d:78:ab:ce:17:a3:a1:e3:80:6a:50:
3c:c8:46:87:c0:cb:79:63:83:d8:6e:29:c1:ad:6a:
df:f4:6c:34:4f:e6:40:62:06:bf:5a:0a:39:24:27:
8b:ea:a5:78:31:9a:5c:ec:06:61:25:52:61:5b:2b:
be:37:70:be:f7:e8:e4:39:48:11:f7:d5:dd:e8:b6:
1d:e1:84:dd:1f:6e:8e:62:cc:86:92:c2:c4:0c:d8:
77:8a:c8:a3:47:83:d5:86:29:d6:06:f3:59:fd:de:
a6:bc:7c:bd:e3:b3:8d:0a:6e:08:7e:b7:f2:c4:98:
4b:53:28:e2:6e:59:d1:37:cc:2e:e4:42:f8:c6:3f:
4d:66:73:77:f1:c5:3d:48:14:d1:c0:38:6a:de:df:
53:ff:03:50:2e:1a:ab:a1:f9:eb:68:20:ca:32:bd:
46:f8:10:f3:3a:c6:3b:67:0d:06:56:33:f9:05:6a:
f2:6e:8e:d9:a8:a7:7f:f8:b9:fe:4a:6b:7a:5b:d4:
2c:f9:07:b9:1e:83:70:18:96:c0:64:00:94:f4:e1:
d3:06:97:c2:86:9c:37:41:fd:e9:86:4d:2b:81:96:
fb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:87:8F:0B:8E:E8:3C:4D:CE:54:91:0D:EB:84:96:39:3A:5D:25:5F
X509v3 Authority Key Identifier:
keyid:F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:26:05:06:a0:0f:7f:e9:98:9b:6a:6f:89:6d:d4:75:b5:b7:
eb:47:a2:bb:72:c5:99:2e:70:3b:12:be:19:a6:9e:8c:30:6a:
5f:ed:a7:9e:b2:07:60:a5:2d:60:c6:b3:86:a0:0c:93:5f:b6:
cb:1e:08:c3:f6:d6:b2:c0:3d:82:50:10:af:ff:38:8b:a8:46:
54:03:5d:d6:33:2f:67:e7:9e:71:34:4e:fe:84:9f:c3:f7:27:
df:0b:7e:53:a8:00:c2:65:84:5d:81:50:44:27:55:58:1c:f1:
55:a4:67:00:85:91:89:3c:e7:bf:ba:1d:7d:52:32:a8:18:65:
b3:e9:a1:4f:7a:3c:bb:0d:5c:cd:b8:bc:63:b2:d9:46:50:3d:
e1:24:ff:41:88:1e:a7:64:94:64:aa:9d:de:1c:c0:0e:d0:91:
87:f0:37:3e:69:ef:b0:11:c6:5a:f1:c3:cd:84:22:c3:24:06:
9f:9e:28:41:18:2a:0e:e5:d8:9a:3d:06:e0:65:e8:da:a5:32:
dc:2c:03:e5:c0:1b:69:75:6f:88:bd:2e:b5:8b:ad:d0:05:46:
8b:47:09:46:b9:ff:06:43:26:93:e4:67:45:a0:55:32:18:ec:
ae:01:4c:c8:ba:b7:a5:8c:f7:36:59:a6:6e:20:64:30:c1:6a:
79:b6:fe:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:18:39 2025 by rpki-client