Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
File: 93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft (raw, json)
Hash identifier: jwXVyBy5uX25KCd4ibCHdZgmuXl0yHivz5vCJGABS5E=
Subject key identifier: BF:64:E2:06:06:33:FC:51:FC:1A:32:82:8F:53:55:47:76:F4:99:C8
Authority key identifier: F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
Certificate issuer: /CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Certificate serial: 019A725CE6DBF996BB7C7F558B65F1A73E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 10:01:22 +0000
Manifest this update: Tue 11 Nov 2025 10:01:22 +0000
Manifest next update: Wed 12 Nov 2025 10:01:22 +0000
Files and hashes: 1: 93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl (hash: cbQFE1Ziw5OFswzSeUdtUvcBpnaHSceX5yYtw76mUtk=)
2: J5xD8x8Eiwgy4zGdsrXk1K8DYiA.roa (hash: 7newoFO3EDGu7SMDbRmvP5ZCWRW7z0PexC6y00oZBYU=)
3: pzjmaLlAYg1GtB1-BPGxf_97w2k.roa (hash: TucPjnv7DB9fKhYA4FsUC+p2EKxC7XMfjGbXhyo7OXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e6:db:f9:96:bb:7c:7f:55:8b:65:f1:a7:3e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Validity
Not Before: Nov 11 10:01:22 2025 GMT
Not After : Nov 12 10:01:22 2025 GMT
Subject: CN=bf64e2060633fc51fc1a32828f53554776f499c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:d7:04:02:dd:04:58:23:00:62:e2:4b:49:
e7:65:de:14:bc:85:63:4e:2e:53:34:45:fb:fd:ce:
79:42:2e:57:10:8a:47:a1:8e:98:a4:5d:a7:96:c6:
ee:ee:b2:99:53:65:0a:0b:23:8f:49:f1:eb:37:4e:
fc:87:e2:ca:11:d7:c6:af:1d:eb:f6:9c:03:28:d6:
aa:07:dc:7c:59:0f:83:ab:e3:65:cc:00:d4:8a:88:
bd:07:5f:3d:ad:c3:c8:56:c9:82:d3:bc:dd:88:c3:
b9:c0:3a:7a:31:3b:c5:c1:eb:a2:c5:8f:54:77:4b:
df:c7:36:3d:50:7f:9a:b0:79:46:23:ec:45:47:51:
be:4e:29:b3:0a:a2:59:1d:1d:be:54:97:f2:ab:fa:
0e:a9:c4:b7:ce:10:3c:93:0d:35:38:f6:58:23:33:
a0:9b:b1:f9:05:f7:e3:69:79:2c:b2:72:b0:19:b6:
1b:a6:0d:f1:c5:83:65:be:49:ad:88:9e:19:d3:d0:
c2:a2:49:4c:34:53:34:36:ae:86:4a:5c:f0:ee:3a:
c8:f4:bc:18:0c:a6:ef:af:a8:23:02:80:92:66:5f:
fe:0b:9d:44:ad:8b:d2:42:69:9b:dd:f3:7c:bd:b6:
26:da:7f:be:52:30:04:23:36:57:40:f1:ee:2d:be:
ca:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:64:E2:06:06:33:FC:51:FC:1A:32:82:8F:53:55:47:76:F4:99:C8
X509v3 Authority Key Identifier:
keyid:F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c8:bb:9f:7a:ef:06:b2:d2:a3:d8:bd:d0:89:fd:9e:6c:30:
7e:0d:01:11:5b:ce:c9:28:65:b2:19:cc:22:89:8a:25:41:59:
85:3b:25:9b:07:1e:ac:c7:2a:a7:0b:e5:b2:27:ad:15:93:ca:
f6:89:27:8a:54:a6:9a:d4:42:5d:3c:d4:47:f4:f2:d2:d0:dc:
b0:58:9d:61:e2:45:6d:3d:3e:f3:7c:62:f4:f3:53:8c:9e:ae:
a3:9a:ca:6a:76:ab:3b:52:4d:4f:46:2a:94:7e:fe:09:d7:f3:
23:78:c0:56:62:fb:b5:e0:1a:00:f9:a2:36:be:64:f8:79:1b:
e7:0b:4b:0f:45:8a:38:c5:39:75:57:a2:5f:17:ac:21:a3:75:
26:c2:96:4e:92:56:71:28:a0:07:bd:a5:75:05:76:ce:eb:ef:
71:22:46:51:88:96:71:40:03:f0:11:67:12:3a:83:5c:09:10:
c7:a5:32:03:c0:7d:1f:48:7d:65:f7:3f:fa:28:1e:db:06:e8:
82:ad:eb:27:76:3b:bd:eb:40:70:87:c6:27:6e:28:cc:b1:3b:
1a:7d:f0:19:08:0c:cd:ab:33:44:47:d2:95:74:1d:f5:2f:78:
a0:ae:9e:c4:9b:5d:32:17:de:3e:7c:4f:73:17:ed:78:b4:8e:
a2:e7:40:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:23 2025 by rpki-client