Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
File: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft (raw, json)
Hash identifier: 7gkE01zplVw5KnBUA3xyiiUeVju7N9MKRLA2y1u6o1M=
Subject key identifier: 10:95:25:EF:AB:52:49:2E:98:C1:C2:0F:ED:39:39:B0:03:0D:3E:60
Authority key identifier: F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
Certificate issuer: /CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Certificate serial: 019A4E8635F47BA1D253A45BD2FAFE7AB591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
Manifest number: 0AEE
Signing time: Tue 04 Nov 2025 11:00:09 +0000
Manifest this update: Tue 04 Nov 2025 11:00:09 +0000
Manifest next update: Wed 05 Nov 2025 11:00:09 +0000
Files and hashes: 1: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl (hash: Pg02Io3L8iWOjAzbn6LIbLS6AKKRhFdgoWbSeW6gbYY=)
2: rVvEPxI-l2KV5RW4qoRYscyYDw4.roa (hash: 0O6ssmxEK7LDtpVncPYWugPc3GeZirxznz/PZThAqb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:35:f4:7b:a1:d2:53:a4:5b:d2:fa:fe:7a:b5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Validity
Not Before: Nov 4 11:00:09 2025 GMT
Not After : Nov 5 11:00:09 2025 GMT
Subject: CN=109525efab52492e98c1c20fed3939b0030d3e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:54:f5:44:ce:dc:a6:e1:85:c7:5d:c4:9a:
cc:2d:db:36:e0:34:27:94:3e:59:04:96:bf:20:6a:
cd:7b:5c:68:5e:36:71:b5:52:b2:de:2d:11:25:cd:
78:93:9b:54:d0:5c:3f:f0:8d:76:e7:94:d4:71:cd:
ba:48:50:74:68:61:d3:7b:81:a8:d3:46:3f:0e:a3:
c1:56:55:21:6e:13:be:5a:2c:34:45:b1:21:c8:7d:
fe:20:73:91:45:96:63:ca:84:63:8b:f2:79:88:3c:
e1:5b:28:b6:45:5a:0b:18:de:b8:e9:01:be:6f:f1:
de:ef:c4:e2:a2:69:a1:0c:e8:ff:e3:17:5a:0e:88:
24:08:1f:ca:89:98:e3:f8:0f:90:a0:38:79:fc:e0:
1f:3e:dc:6c:08:a7:ba:23:b8:79:7c:9b:de:6e:62:
82:51:d8:2a:13:40:42:dd:e1:5c:8b:e0:93:41:b7:
5a:2f:23:4e:ba:7c:b7:64:28:c0:47:6b:c7:0a:55:
b4:80:2c:89:f9:5f:2a:9f:49:15:f6:0d:d8:a7:99:
9d:3a:85:95:2b:12:33:2c:0a:01:80:80:db:00:8e:
ae:b8:89:b1:59:1b:fb:7a:64:92:c8:d1:2e:9a:a1:
90:c7:dc:37:06:48:a8:14:32:69:16:84:2b:62:fd:
34:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:95:25:EF:AB:52:49:2E:98:C1:C2:0F:ED:39:39:B0:03:0D:3E:60
X509v3 Authority Key Identifier:
keyid:F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ea:82:35:93:df:a0:6f:91:62:94:07:c1:71:10:92:d3:50:
76:2a:04:e6:f9:6b:53:ab:28:dd:ba:b3:41:d0:d2:7d:2b:e8:
b8:c3:e2:51:a1:10:00:75:bc:4a:b5:21:b9:33:cb:0e:0d:82:
2c:1a:ff:09:17:aa:b9:64:19:75:e7:6d:0d:81:c8:47:79:be:
b3:6d:3e:29:ca:f6:62:52:24:41:59:27:36:a8:cd:1d:25:93:
ab:66:81:98:b4:33:4a:29:0a:76:0e:ce:d6:35:4d:fa:25:03:
13:f4:4a:7a:cf:de:80:aa:fd:7b:9c:3d:3a:96:57:9d:2a:fc:
bb:5a:c0:64:1c:d9:3a:84:c1:91:71:d0:a3:02:8f:96:30:22:
b4:ec:ff:ea:4f:f5:1b:ab:5b:37:bb:34:09:0b:a3:17:75:a8:
20:ff:65:3a:8e:68:ee:e2:1a:9f:83:39:20:92:26:22:b7:9b:
e3:be:68:7c:89:7b:ce:1d:04:34:88:8d:9f:fa:d1:64:3f:90:
32:6e:d1:2b:83:e1:77:7a:68:f6:76:37:9e:04:b1:15:7d:cf:
23:80:b2:fe:d6:6f:ce:1e:c4:89:59:e1:91:b0:6f:20:5e:82:
3c:61:99:8f:db:71:54:16:3e:f4:bb:bb:56:34:49:2c:ca:1b:
14:d9:fc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:34:34 2025 by rpki-client