Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
File: saC9QgWKA5D0Y8_rexfiHeC3VQA.mft (raw, json)
Hash identifier: TiqDP8cN34XaH0S895k3W7IiS4tSX6RscZHptmB9dKs=
Subject key identifier: 06:00:1B:3B:E5:98:BE:BE:28:30:71:C6:A5:CD:04:6E:C0:8E:7C:F3
Authority key identifier: B1:A0:BD:42:05:8A:03:90:F4:63:CF:EB:7B:17:E2:1D:E0:B7:55:00
Certificate issuer: /CN=b1a0bd42058a0390f463cfeb7b17e21de0b75500
Certificate serial: 019A7149F82D189EE5186B6603AF12752279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:01:04 +0000
Manifest this update: Tue 11 Nov 2025 05:01:04 +0000
Manifest next update: Wed 12 Nov 2025 05:01:04 +0000
Files and hashes: 1: M5ygsUf6TUqUYI8FV2cjTiESBdE.roa (hash: inJMcRO+0HtRn269DlSaUq0NeeQUCkuMxbxILPu+WG8=)
2: saC9QgWKA5D0Y8_rexfiHeC3VQA.crl (hash: U46c0y40CPUJc1Ogt1tafN4I4xigHEqGltBxLWSUL+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:f8:2d:18:9e:e5:18:6b:66:03:af:12:75:22:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a0bd42058a0390f463cfeb7b17e21de0b75500
Validity
Not Before: Nov 11 05:01:04 2025 GMT
Not After : Nov 12 05:01:04 2025 GMT
Subject: CN=06001b3be598bebe283071c6a5cd046ec08e7cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7e:4e:e2:15:e6:14:87:de:ca:30:f8:32:b3:
a8:99:70:83:e5:9f:6a:fd:2e:15:f9:93:5c:3c:07:
79:97:43:32:18:f6:38:e6:a5:04:f1:39:ec:31:23:
73:26:2c:ea:3f:ee:b3:8d:89:e8:75:94:cd:87:df:
b1:ce:ef:65:75:92:55:af:8f:d7:f3:f2:f3:ff:79:
09:2d:ce:4f:a8:25:16:9d:9d:a0:15:a1:d6:87:45:
90:ef:68:37:b7:d4:79:6a:e6:d2:98:db:01:75:29:
cd:92:5a:9f:70:b7:3b:89:ad:57:97:d6:96:3f:9f:
71:46:8f:83:a8:2d:5d:b1:c9:40:3a:de:ce:fb:14:
ed:db:30:e2:c3:09:40:9d:bd:74:8c:44:c1:c2:34:
41:40:2e:fd:1b:7c:88:bf:a0:49:5c:52:e6:18:d1:
cc:f8:ca:a8:10:b3:e4:39:99:11:04:49:eb:70:38:
5a:ba:da:27:56:13:9c:f5:d8:89:ee:50:07:24:17:
2d:dc:67:3a:18:77:2d:67:e8:70:29:d1:52:14:b1:
2e:86:58:4b:c5:1c:0a:fb:14:0c:5b:76:0d:f9:6e:
2e:b8:63:57:a2:a7:4d:7f:df:51:f4:2a:bd:2b:86:
92:bb:78:56:1d:f6:5d:ee:77:6e:d9:e7:92:95:95:
00:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:00:1B:3B:E5:98:BE:BE:28:30:71:C6:A5:CD:04:6E:C0:8E:7C:F3
X509v3 Authority Key Identifier:
keyid:B1:A0:BD:42:05:8A:03:90:F4:63:CF:EB:7B:17:E2:1D:E0:B7:55:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:fe:ca:7d:c7:49:00:16:53:34:33:2e:91:65:40:8a:fb:32:
74:cc:01:d3:8d:f9:97:2a:91:c9:06:19:92:ac:b6:d1:81:0f:
b6:25:4d:64:2f:d4:d1:d5:14:90:91:32:d6:7b:aa:cf:79:46:
8c:0c:46:5f:82:49:9b:27:28:ab:53:a8:ea:26:d2:6d:fd:f0:
3a:71:d0:23:0f:23:a0:12:be:8d:d7:b9:bb:81:63:60:21:c1:
53:50:6f:57:a6:31:fe:23:8f:18:43:c6:96:2d:0d:ba:fc:85:
56:77:be:3e:9a:6e:e5:3c:e4:50:35:a7:f0:9f:6a:db:69:fc:
e9:8e:7c:f6:af:85:90:9a:93:70:54:2e:87:b4:41:90:ff:29:
96:ff:0b:f1:bc:6a:8f:d9:2c:6c:24:ff:47:0e:c9:a2:db:49:
2d:3a:c9:de:31:45:8d:3c:d9:ff:4d:51:cd:e8:a7:bc:31:01:
1d:03:fa:b5:84:db:17:a0:c5:d8:c0:6e:2c:c7:d9:96:25:82:
32:df:d7:b5:23:1b:6d:13:83:9e:37:4c:cf:4e:7d:7b:d0:40:
f2:39:f8:bf:1a:70:c6:0e:8b:35:b2:cc:00:87:fe:5d:42:03:
5a:e5:76:52:b9:2c:12:14:89:d1:c4:ad:9c:23:d5:8b:6e:2d:
82:dd:c5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:37 2025 by rpki-client