Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
File: 9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft (raw, json)
Hash identifier: ROaxXosxDcivWy10cQmemhLtgA/5aLbX8vOCbhA+EOc=
Subject key identifier: 96:C4:21:47:9B:DA:31:03:62:74:6F:31:F4:F7:31:B4:D9:C1:A3:13
Authority key identifier: 9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
Certificate issuer: /CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Certificate serial: 1B69A9B0C1A4BDE8B7ED56661ED4F53FF53476ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
Manifest number: 8E
Signing time: Tue 04 Nov 2025 13:38:29 +0000
Manifest this update: Tue 04 Nov 2025 13:33:29 +0000
Manifest next update: Wed 05 Nov 2025 15:55:29 +0000
Files and hashes: 1: 9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl (hash: Kj9zX+sFpHY5QeLa7QbW4AUw/3feKRzWP1/t81TuB/k=)
2: AS214809.asa (hash: twDSgOmLlkZzcvx0mDRRIi71WRXYCfTsSol/H2pUsYI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:55:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:69:a9:b0:c1:a4:bd:e8:b7:ed:56:66:1e:d4:f5:3f:f5:34:76:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Validity
Not Before: Nov 4 13:33:29 2025 GMT
Not After : Nov 5 15:55:29 2025 GMT
Subject: CN=96C421479BDA310362746F31F4F731B4D9C1A313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:36:f2:14:b6:30:f5:b8:dd:a3:fb:fe:33:
3b:88:ae:86:98:c9:22:31:c1:a7:98:93:f3:05:a9:
13:21:0c:15:cc:85:b0:7e:59:d5:39:43:94:d3:09:
97:7b:a2:9f:0b:3a:98:7b:b7:ce:25:1c:71:c4:ab:
a9:75:c0:4e:c9:6a:6b:fc:bc:f7:b0:0e:ce:0a:de:
bd:17:3a:93:9e:f7:55:36:57:40:15:8b:15:57:64:
d8:d2:c5:55:84:09:d3:13:34:2e:97:22:c9:3a:3b:
17:9c:d3:f3:1d:a1:af:4f:4c:25:83:30:01:05:ba:
4d:db:32:f2:02:01:1d:10:30:5c:8f:8e:88:06:e2:
4c:5f:89:09:b6:98:e9:fc:15:4e:55:46:2c:4e:a5:
f9:ef:9b:78:e8:64:4c:ec:3d:76:41:b2:62:64:44:
b9:69:1e:5c:f9:cb:b5:8f:16:67:31:a4:70:2d:cc:
6f:b6:a7:01:e6:ee:41:0e:26:5b:10:c9:ac:63:e4:
76:d8:ee:ea:c0:62:8f:12:ae:45:37:c8:92:c0:81:
11:fb:ce:03:73:45:89:a3:fc:ed:3e:d3:1e:af:71:
08:f6:9e:8d:0e:b0:50:d6:2e:aa:a7:6a:05:11:35:
0b:82:39:28:e8:03:94:94:54:6c:df:a7:ca:9d:89:
69:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C4:21:47:9B:DA:31:03:62:74:6F:31:F4:F7:31:B4:D9:C1:A3:13
X509v3 Authority Key Identifier:
keyid:9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c1:08:73:09:41:1f:ad:88:5d:55:dc:6a:34:59:44:88:43:
2a:5a:a7:8a:75:c2:e5:e4:9a:a5:02:a6:39:7e:86:53:47:83:
8a:ad:c9:41:54:29:f5:6a:8b:26:1c:09:ed:48:95:c3:c6:5d:
d7:ec:b1:cc:8f:d3:08:d2:8a:53:7c:d6:26:58:fe:e4:4d:bb:
02:bd:a3:3d:a3:dc:1a:ac:ec:4b:5e:58:9a:3e:f4:c1:6b:c7:
05:13:90:9b:12:2b:a1:bb:a8:5d:32:fc:b3:64:22:c6:ab:96:
b2:da:f1:2f:87:12:e0:17:ed:32:2a:89:c9:03:7d:c0:bd:1d:
5f:d2:5a:8d:2e:7b:41:8b:50:b5:25:13:46:ff:6d:40:50:d9:
42:e7:fb:33:31:f7:3b:89:26:8a:fc:bb:4c:26:fd:84:44:d8:
cf:c1:50:13:51:3a:25:89:33:45:e8:4f:1d:87:2f:d9:37:53:
99:0b:43:47:5a:aa:fc:90:6f:d0:ec:6b:98:27:f0:e5:b5:fa:
6d:bf:2f:d4:1d:65:52:29:67:4c:08:27:a1:17:dd:f3:cf:6d:
b2:b9:3a:2d:52:a7:e7:5b:98:e6:d9:2f:82:4f:75:6e:5d:fe:
27:03:d1:da:1d:d7:c7:b6:53:b9:df:31:35:07:4c:28:12:17:
92:63:5e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:02:46 2025 by rpki-client