Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier: acH+RyIxHWfv172VidiWIetz9nrabosLb5OfO5GLsvk=
Subject key identifier: F1:68:BF:C6:90:DD:A4:39:84:65:0F:06:13:0B:51:29:C2:73:52:67
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 019A72CAD919AC682A4FABF44B3787E0D179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 12:01:27 +0000
Manifest this update: Tue 11 Nov 2025 12:01:27 +0000
Manifest next update: Wed 12 Nov 2025 12:01:27 +0000
Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: o8C6vslqxBW7jKgFozbHgUU5zEIChLztwBuwAjtWucg=)
2: xXvr5N3cdjjVXwcVtqed053TqTM.roa (hash: RPXbgfGCQVhnjZtFi6ez4KE4+8jSRCf133mSXRnDHCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:d9:19:ac:68:2a:4f:ab:f4:4b:37:87:e0:d1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Nov 11 12:01:27 2025 GMT
Not After : Nov 12 12:01:27 2025 GMT
Subject: CN=f168bfc690dda43984650f06130b5129c2735267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6d:92:b2:5e:d2:74:65:6b:67:2a:a9:12:c7:
09:2d:44:0a:49:d7:8b:84:e8:1a:2a:86:2c:f3:58:
2f:b7:11:2b:0f:41:98:2a:32:5a:04:a8:49:3b:c1:
e1:d6:5a:d5:91:57:fa:bb:df:38:a1:9c:ec:02:4c:
b2:cf:bb:eb:8e:c8:fe:26:ae:94:9a:fe:6b:6a:94:
64:da:a2:f4:df:23:73:cc:47:83:ab:af:13:a0:a1:
90:67:3b:93:47:b3:66:16:89:d8:eb:45:6a:3e:ca:
0a:e9:4b:65:05:db:57:fb:6a:d6:68:7b:34:b3:11:
23:37:62:7b:62:a6:66:cc:f0:92:10:d9:36:31:cf:
af:dd:34:05:93:e0:54:80:fd:8f:25:c5:64:97:59:
7f:c6:3e:9d:a9:dc:5e:81:d9:50:03:24:cc:cd:63:
58:e8:11:5f:8b:2f:a2:a8:d0:7d:12:e6:4c:bf:e3:
58:c9:65:82:a6:c6:70:3f:5a:30:ca:2d:61:1d:92:
fc:3e:db:98:e2:41:66:4f:30:03:99:47:2b:e1:49:
5e:de:b3:56:3c:19:dd:84:8b:5f:e5:d0:e2:c0:bb:
2d:12:91:90:b1:a8:35:f0:20:a5:b6:f3:4e:02:87:
d2:10:a3:b5:38:1f:6c:99:80:97:2b:ca:a7:3e:c9:
6b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:68:BF:C6:90:DD:A4:39:84:65:0F:06:13:0B:51:29:C2:73:52:67
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:57:b9:39:0d:e8:f1:d2:94:ff:04:f6:52:48:5b:d1:36:a0:
e5:14:c9:e9:09:df:f4:21:1d:78:fa:06:59:e4:bd:73:79:f9:
64:2f:14:47:04:0a:b9:7c:65:4f:e6:1c:8e:56:81:6e:9b:00:
5a:77:2f:8c:80:a8:bd:24:94:f3:c1:21:8a:b9:74:2b:67:16:
6f:83:d5:c8:67:14:74:01:c8:24:d5:ce:08:f1:93:83:91:88:
d4:69:03:84:19:56:0a:7b:fa:3c:40:f7:04:c6:3b:75:77:9d:
8f:2c:d8:d3:14:8f:94:52:86:e4:84:a4:c5:0f:8b:65:f6:b1:
2a:52:93:2b:6a:34:95:ff:0c:8b:2d:c1:d4:73:71:84:05:3c:
4a:0e:81:6a:1b:22:eb:90:04:f6:b2:e2:3e:c2:6e:5f:c5:ca:
b9:1a:ab:77:55:00:3b:96:7b:9b:cd:f3:0a:5b:dc:7e:46:35:
ec:6d:e8:33:c8:d2:09:d7:22:68:65:19:69:64:62:80:9c:ae:
92:50:8c:95:84:ab:d2:6b:44:ad:99:e4:0b:82:ba:5c:1b:be:
6a:09:2e:73:4d:f5:7c:4a:0e:7f:b8:ae:5f:4d:21:d7:ac:93:
8f:a6:9d:3d:aa:41:41:6d:28:59:b9:38:32:75:de:75:22:75:
29:35:8f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:34 2025 by rpki-client