Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
File: m9_8i9uESXC44oubS-bywG39eYU.mft (raw, json)
Hash identifier: v60KN96hNiqgMesZRGgiGnWXAFSHAX37oHkSAAyJVMU=
Subject key identifier: 6A:B9:2F:CC:7C:67:EF:37:62:19:7D:61:EE:2F:FD:A8:21:AD:A3:1D
Authority key identifier: 9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85
Certificate issuer: /CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
Certificate serial: 0199FE7DE5EF174FB6444955DC7B11A03DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
Manifest number: 14BE
Signing time: Sun 19 Oct 2025 22:01:27 +0000
Manifest this update: Sun 19 Oct 2025 22:01:27 +0000
Manifest next update: Mon 20 Oct 2025 22:01:27 +0000
Files and hashes: 1: QAk6JCs2jjSqyiQ-YA0VdOCDCeI.roa (hash: FpR2ZM6Bp7jsZvcIkRbwo6z9Bs9HecznXsZ9i9f2MH4=)
2: m9_8i9uESXC44oubS-bywG39eYU.crl (hash: 44BcqVTJaV/UV+nkoWaDznHeLBIqPdqPcJiBMMyGp8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:e5:ef:17:4f:b6:44:49:55:dc:7b:11:a0:3d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
Validity
Not Before: Oct 19 22:01:27 2025 GMT
Not After : Oct 20 22:01:27 2025 GMT
Subject: CN=6ab92fcc7c67ef3762197d61ee2ffda821ada31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5e:19:30:08:2e:c1:8e:d2:97:f3:a5:bc:e3:
01:93:c5:e7:cb:9d:da:a1:3f:1e:68:5f:fc:bf:56:
41:ee:21:b8:3a:90:83:07:2f:84:39:9f:c5:0c:db:
6e:86:e9:4c:bd:75:d0:d3:3c:09:5e:de:d2:54:fc:
d1:6c:4f:af:10:a6:74:ca:a8:06:bb:bf:55:1d:31:
9e:2c:b9:22:fc:84:1e:00:2c:50:9f:1c:eb:8e:57:
2b:c6:08:9e:e2:9b:e5:59:d0:0b:33:d3:b4:16:a3:
ef:e3:23:fc:3b:dd:20:0e:e7:1d:f7:8f:6a:ac:3c:
1f:85:f0:59:ea:1e:ac:9a:b4:02:50:7c:e2:ba:55:
04:7c:45:de:b9:6c:2e:ca:74:a0:83:81:f4:11:1f:
16:f7:a1:92:f1:9d:b5:a3:44:2c:f9:59:a8:5b:16:
fd:84:63:f1:a3:4a:96:84:52:db:0f:da:63:3a:23:
05:c2:92:7d:3b:75:ac:72:32:1f:85:d7:91:0a:c3:
e1:f2:da:e6:aa:40:8b:23:42:0b:4f:dd:97:e3:6c:
62:e2:a9:88:52:09:62:bd:2b:87:8b:4d:ee:75:7a:
79:45:b2:35:08:82:72:5f:50:6c:0e:54:71:4f:4c:
73:4b:d9:62:6f:0c:12:72:9d:df:5d:57:bf:76:8e:
03:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B9:2F:CC:7C:67:EF:37:62:19:7D:61:EE:2F:FD:A8:21:AD:A3:1D
X509v3 Authority Key Identifier:
keyid:9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e1:03:b2:5a:6f:ff:4f:9c:b7:6d:28:97:df:06:a2:21:eb:
da:29:e8:ad:ca:26:a7:14:90:e5:03:88:0d:ee:ee:8f:27:b4:
ec:c3:52:d7:f3:e5:74:98:e7:2e:06:0e:0a:71:ed:5d:33:f8:
ed:10:af:d2:f5:63:9f:0d:09:15:25:cd:cb:c8:d9:9f:d4:64:
ea:55:0a:ac:21:ac:6f:63:d4:50:cc:31:c1:43:69:71:ed:9e:
b4:ce:89:a7:15:50:b1:a7:65:0e:20:98:5c:dd:17:d5:aa:59:
68:72:c9:b3:48:73:a7:ba:37:dc:60:d9:a8:31:2c:10:17:7c:
6a:d6:19:08:b6:3d:de:0c:5a:36:4a:3c:6d:86:2c:4d:94:9d:
21:a3:ab:91:05:f5:b5:f8:62:51:ae:30:c0:66:cf:74:d1:80:
c9:72:e4:10:e3:a9:b4:82:d0:0f:6f:90:10:72:1a:b9:49:26:
29:fc:86:ff:4a:21:3c:5f:d5:1d:27:e0:78:fb:a1:f6:f2:7f:
92:22:7b:ea:f8:56:49:d0:72:6b:18:1c:45:fb:8f:7e:22:ca:
e6:01:fb:f8:9d:72:af:6c:d5:d9:97:57:a4:c4:48:9c:23:7c:
8f:e9:52:33:e7:51:cc:24:2f:b4:4b:42:4f:95:29:44:b0:f4:
53:3a:29:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:49:44 2025 by rpki-client