Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: FIF7DAxXMkhF6e/ocD0OjY51Tk2Ww5/Om+x4jFZx5+g=
Subject key identifier: 83:A6:38:47:92:A4:51:41:C2:1A:09:5A:A8:D8:CB:02:DD:80:FC:02
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 019A559B9D7D1339BC1C231F6CC4F0677E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 0E1E
Signing time: Wed 05 Nov 2025 20:00:52 +0000
Manifest this update: Wed 05 Nov 2025 20:00:52 +0000
Manifest next update: Thu 06 Nov 2025 20:00:52 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: 6qIAtEkIA63cioUZ7eXihw7CS2/yCa2mWjLjNfe9PrM=)
2: B8bTTGpK1L-pMyO-WGFk_7H-LC8.roa (hash: r0JNxuBgg4on067YK5COQPlyCkk+tp458uDvr2IE4z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:9d:7d:13:39:bc:1c:23:1f:6c:c4:f0:67:7e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: Nov 5 20:00:52 2025 GMT
Not After : Nov 6 20:00:52 2025 GMT
Subject: CN=83a6384792a45141c21a095aa8d8cb02dd80fc02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1f:d8:f3:fa:87:40:a9:ee:7b:b5:0c:9f:8e:
22:3d:4c:87:5b:54:f1:c9:36:a3:b5:0e:31:10:e0:
5d:c5:02:9a:e3:c5:99:e9:34:24:40:e3:6c:b2:ef:
af:c7:5b:be:30:bd:07:63:e1:2f:23:b1:5b:70:f0:
d4:3e:f6:ca:05:f7:47:fe:44:09:3c:50:43:9e:e4:
67:3d:ec:df:b4:31:d6:4a:4f:c6:68:b1:5a:01:a3:
6a:41:f7:28:f6:e0:82:cc:93:44:75:53:dd:8f:19:
cd:3a:76:02:6c:11:fc:aa:d7:f3:27:10:fd:c3:c9:
c4:6d:af:35:58:06:a4:12:7d:17:f2:e2:51:03:df:
98:d1:f0:1c:89:64:33:dc:55:51:2d:ce:ef:31:ab:
5e:71:fb:b6:2a:73:c9:36:a2:77:f7:87:8f:2d:62:
09:ce:0d:de:83:b5:9b:a9:20:20:91:cf:00:f0:61:
6f:31:c3:c1:3d:1c:07:f8:13:54:68:5e:77:d3:c4:
15:12:bb:39:4f:b8:92:1c:93:d7:8d:d6:e7:1e:bf:
72:f3:89:4d:d5:21:13:f4:87:35:7a:19:83:ab:f7:
cf:f9:1d:f3:46:e9:00:70:fb:45:67:97:86:40:de:
71:eb:47:09:bb:25:41:eb:2c:d8:5c:ea:21:a5:a5:
10:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A6:38:47:92:A4:51:41:C2:1A:09:5A:A8:D8:CB:02:DD:80:FC:02
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:09:54:08:52:fa:87:ee:66:dc:b3:e5:a0:05:18:e7:bb:8a:
0b:f5:0a:7c:5b:12:c5:23:f5:75:b8:95:b0:54:79:cc:ab:b6:
ce:27:d5:80:72:af:73:64:9b:97:f4:c8:f9:53:9c:cb:8a:4a:
e8:52:ac:a4:5e:e3:38:45:9d:54:11:71:32:d6:23:4e:03:6a:
4f:62:7c:c4:c0:6a:32:08:6f:d8:9f:86:06:67:7c:7e:3c:24:
b0:0d:86:41:ca:2b:fc:d0:fd:33:d9:5b:f8:8a:5a:25:4f:00:
4c:9e:47:7f:a7:d6:4c:f3:f7:45:7f:b6:46:fa:96:d4:4e:3b:
84:e9:b0:de:3b:81:3b:56:b1:d4:c0:97:5f:b2:69:c8:ea:d5:
0d:53:7d:7c:e7:bb:e4:4c:20:e2:2c:0a:cb:d4:ef:4f:d9:0e:
4d:28:85:82:74:b8:aa:7e:f3:e9:5e:82:49:dc:d3:65:cb:c2:
10:6e:73:62:1b:5c:2e:71:ff:e8:11:ab:0b:83:05:a1:8d:70:
3e:e8:57:a6:f0:bc:7e:6b:fa:dc:43:6b:ee:28:73:fb:d2:e1:
df:ed:7a:bf:c6:c0:28:0d:70:d2:2c:21:3c:20:3e:63:4c:05:
bf:e0:7f:8d:9c:61:c2:17:3d:c8:44:7b:88:f2:07:f1:15:e9:
b5:74:42:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:12:36 2025 by rpki-client