Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
File: r9v0VgEKm9FJQcoskcpTPn71F4o.mft (raw, json)
Hash identifier: PmOeuHt6arBs9DiXLzROk5qwKXXAY49wli717g/shvk=
Subject key identifier: E8:E6:81:A7:BC:55:1E:B2:08:0B:A6:FA:CA:3B:32:AF:57:E9:1E:CE
Authority key identifier: AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
Certificate issuer: /CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Certificate serial: 0199FBEAA220B33D2DDCB589BCDB011EFB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
Manifest number: 0FBA
Signing time: Sun 19 Oct 2025 10:01:22 +0000
Manifest this update: Sun 19 Oct 2025 10:01:22 +0000
Manifest next update: Mon 20 Oct 2025 10:01:22 +0000
Files and hashes: 1: ajkzuEH8FnXzD6y9WqgTkvcAyWQ.roa (hash: ezeCzHTBFnMMCDhX8NkCA6ybD9xQfKuL+xUd+x4C3b4=)
2: r9v0VgEKm9FJQcoskcpTPn71F4o.crl (hash: Yw1fCNoc3JPMwn/S/hmFsHTmvSdRPbR5yqTu5/rLta4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a2:20:b3:3d:2d:dc:b5:89:bc:db:01:1e:fb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Validity
Not Before: Oct 19 10:01:22 2025 GMT
Not After : Oct 20 10:01:22 2025 GMT
Subject: CN=e8e681a7bc551eb2080ba6faca3b32af57e91ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7b:86:8b:65:8b:12:8a:c6:fb:33:c7:00:99:
58:56:b2:c9:f5:b5:99:65:82:2e:14:36:7a:46:82:
4c:85:d7:97:77:8c:01:54:60:39:4d:a6:a9:6c:86:
32:30:09:27:d4:98:05:ee:20:d8:fd:54:a1:aa:b7:
64:65:06:e7:51:f5:0c:d1:12:9f:0f:81:e8:0b:c1:
78:d8:98:a2:6a:1b:68:6a:99:59:58:61:c6:5e:b6:
cd:ca:62:04:14:c7:87:ba:d2:6e:35:18:d2:50:b6:
aa:76:d3:d3:fe:37:a8:61:dd:65:76:b9:0f:ed:59:
f1:df:b7:2e:a9:d2:32:a1:61:f7:82:5c:63:a9:46:
30:b3:ab:ee:18:23:29:6e:44:9e:a8:88:c6:54:56:
04:28:87:58:dd:aa:59:a5:16:84:34:7c:36:3b:69:
d5:11:e3:49:90:b1:92:7e:1f:37:10:ac:e3:b2:8d:
95:b2:be:bd:57:d9:16:07:33:2f:11:b8:0c:a1:24:
38:3d:63:00:ea:cc:89:8a:66:a0:8d:45:ae:9c:6e:
eb:32:bb:bd:ea:50:d8:7b:ee:df:42:1a:c1:18:ad:
76:61:b9:27:a4:dc:68:68:e2:49:12:26:4c:05:cf:
ef:3c:d7:07:4b:15:54:db:6a:e9:de:82:a5:a9:5a:
87:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E6:81:A7:BC:55:1E:B2:08:0B:A6:FA:CA:3B:32:AF:57:E9:1E:CE
X509v3 Authority Key Identifier:
keyid:AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e6:22:66:08:ca:7f:06:70:71:36:53:27:0a:50:36:e5:a6:
f9:cf:dd:22:1b:e2:dd:99:c8:1a:ad:7e:80:f7:1c:90:b5:59:
87:8d:22:31:48:f1:a8:43:45:22:48:5e:22:bc:b4:98:96:9a:
e1:5f:2c:28:87:35:18:85:f3:5d:d5:b8:3d:45:8d:67:b3:f7:
44:fc:ca:47:1c:87:1b:d5:c4:5b:90:c7:14:bc:5e:51:26:aa:
d9:c3:a3:c5:b7:79:5f:16:f1:a6:1d:43:36:6f:77:8d:46:37:
b5:bd:4e:d0:ee:15:d0:22:ce:f9:3b:28:d7:e5:19:57:76:ca:
b6:d3:20:66:6b:98:53:0f:be:f2:67:f1:55:2a:fa:44:29:22:
a8:6c:5d:43:72:0c:fe:ce:29:77:b8:93:44:55:fb:95:9b:02:
dd:a1:13:a0:77:5f:b1:1a:37:10:74:1c:90:f5:ba:4b:ce:89:
d7:f3:18:6c:0c:aa:55:12:0f:58:61:1d:2d:21:a9:e4:5f:fe:
ef:93:f7:30:f8:4e:ff:d3:76:1f:0f:06:60:de:b2:d4:c2:09:
e6:0e:00:3a:1d:0e:6c:19:d2:7c:17:d7:0e:2b:bf:69:4a:42:
6b:63:d6:29:26:ca:11:a1:1b:99:40:80:44:af:78:c6:a7:de:
6e:d8:90:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:27 2025 by rpki-client