Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
File: 9JdnPHjvrl9r2AolrOPTw3GT54k.mft (raw, json)
Hash identifier: bbZoZFECqGxev+evNJdmNc6e6KfgzTweIv3WJZHTAJU=
Subject key identifier: 99:8B:28:13:6F:51:F2:36:8E:D8:31:F5:17:14:63:1B:AA:C2:C4:17
Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
Certificate issuer: /CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Certificate serial: 019A4D3CEB2008E3BC45EE8351A01DC03A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 05:00:29 +0000
Manifest this update: Tue 04 Nov 2025 05:00:29 +0000
Manifest next update: Wed 05 Nov 2025 05:00:29 +0000
Files and hashes: 1: 9JdnPHjvrl9r2AolrOPTw3GT54k.crl (hash: I68CdqcXXw1ZK2sHEJJBgJ7V7bgadxErPd3VTSbbiC8=)
2: EtJkvePPPWppk5nFnry3B6dGLBk.roa (hash: 7c42tElOeuBdoKmi4aSTV9LcX+EZc0MFBsv/1Jeuh8k=)
3: KYw5Kj_weN6Qm3KwiIVIrurQ0bc.roa (hash: EGFVxLdkIPiRC9X72BBMFwRMiHt1kYN13kO+xHp1ecQ=)
4: LttXh5eMv2jde6QYSngEubF_oow.roa (hash: Yan1EozpbgDCzFrwbK/bTYuqkgAj1nMSodRgwp+TLbk=)
5: d-0FuXxrgivXV_LPUKq93b_p0rk.roa (hash: IyU9YdBTUk2hBlGdTATB3ZTrCwmx/c6jIoibeyre6pQ=)
6: jlPcCTRsHvziUq2lkqlj4JDAVB4.roa (hash: WbQ2Xq5XOzyGj/4mNA7e9pYuBIwnNuiU8FsqrdgzPqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:eb:20:08:e3:bc:45:ee:83:51:a0:1d:c0:3a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Validity
Not Before: Nov 4 05:00:29 2025 GMT
Not After : Nov 5 05:00:29 2025 GMT
Subject: CN=998b28136f51f2368ed831f51714631baac2c417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:a8:73:71:ce:45:a2:c8:b4:8c:82:fb:72:
f6:31:3b:f5:5e:76:00:68:76:1a:e5:3c:a9:7f:89:
60:21:f7:66:a2:52:26:c3:b5:92:a9:b3:6f:da:e1:
d4:c2:31:ce:9a:28:78:42:da:f9:1a:db:ce:0c:66:
16:f5:d8:a7:e3:b7:41:bc:41:ab:7d:5d:28:6a:df:
10:80:95:20:d5:6a:ec:ea:c6:b3:57:92:77:5e:3b:
3e:0f:56:72:f7:f0:ef:f9:d8:d6:b8:df:99:2b:43:
34:a6:99:4e:29:d8:fd:a5:82:d5:e7:c1:be:cc:29:
b5:ba:fd:41:5c:72:d7:68:5a:9c:ce:c8:ae:8a:09:
bc:16:6f:6a:80:da:f8:d0:e7:32:29:94:fd:01:f7:
e5:ee:15:75:a8:18:20:a1:b9:d6:4a:a4:2f:2d:0e:
a6:f0:94:64:eb:99:35:3a:e2:93:6c:62:16:42:0d:
0d:59:82:48:71:a6:97:39:10:69:8d:00:22:43:9f:
36:f6:05:82:9b:55:5c:8d:76:ab:da:76:cd:e5:b4:
c8:ba:f9:64:8e:de:d5:e7:8c:2a:81:86:6b:5b:0c:
72:9a:76:56:f4:fd:50:52:8b:3b:b1:4a:8f:d6:0d:
61:4e:b2:a8:79:ff:3a:5d:4b:8e:80:a8:7c:94:9a:
ae:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8B:28:13:6F:51:F2:36:8E:D8:31:F5:17:14:63:1B:AA:C2:C4:17
X509v3 Authority Key Identifier:
keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b5:7e:b3:86:22:53:b1:39:c7:5b:59:1c:8d:4e:89:69:d5:
55:51:ab:98:f6:41:ab:6a:60:99:ca:d8:74:0a:77:2a:3c:4f:
10:ca:45:ba:c1:ef:12:7a:99:74:81:e4:ef:71:50:cc:c2:03:
43:6a:10:2a:c6:4b:ab:a7:07:82:ed:22:69:54:1c:b5:f3:88:
6d:95:95:6e:25:ac:7c:28:46:24:01:72:2a:35:83:e0:97:69:
5b:ae:1f:80:67:19:c0:06:79:32:b7:f1:e8:68:67:bf:a5:fa:
56:5f:90:29:db:4d:15:33:e1:09:64:f1:0d:a2:70:c6:d8:c1:
b6:fb:be:96:a7:1f:38:c4:b3:12:b5:57:ff:2c:a0:05:bb:a2:
b0:77:00:9e:e5:df:b3:c4:fb:d0:4a:66:54:e2:a7:e0:73:ca:
18:63:fc:cb:4d:f0:e4:61:dc:64:4a:23:18:b5:44:9b:31:9c:
a0:ca:30:40:ec:80:da:44:50:f3:2f:7f:57:13:f3:82:5c:45:
d0:cd:a2:58:4e:d7:d4:eb:b0:59:60:79:5b:95:5c:0a:9c:8a:
38:ee:77:e5:ef:1d:7a:8b:65:ed:16:48:91:b9:83:f6:4a:03:
b1:1a:9d:f2:77:43:42:d6:fd:34:5a:d9:0d:5b:d6:47:a2:58:
57:61:3b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:02:07 2025 by rpki-client