Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
File: s901zP9sK4ah-tjxA7wgBw0J5Q0.mft (raw, json)
Hash identifier: o8lbdqp+Y/hkwb4hplkvVCYy0hsbPkbgoURD/yWdj08=
Subject key identifier: BE:86:C3:00:E1:A6:8D:D0:72:C3:38:94:6E:49:BD:6C:F4:B9:5B:BE
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial: 019A71EE69C1A637C3CF720C445E9D68284D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
Manifest number: 172E
Signing time: Tue 11 Nov 2025 08:00:41 +0000
Manifest this update: Tue 11 Nov 2025 08:00:41 +0000
Manifest next update: Wed 12 Nov 2025 08:00:41 +0000
Files and hashes: 1: 9-NB3ppe0EfeL2Nj37oF8VJ41t8.roa (hash: ZMKYndtOmSHpSKO5kfkDg42yZItGmF3H5NrIrUVaQPk=)
2: W3ef7yk_8thOKV8fePQf_c3aBKs.roa (hash: q4TpxDQr4+wv6OyV3D6r4UE1e0P7/7+4PMrtZl4uXJc=)
3: YRU1Ojg5qyXEoXOhvO7oLvQPC8c.roa (hash: TDJgwlET1jOQj6C/tybMD3s4rcsYrcr30h1aS7JqjFc=)
4: s901zP9sK4ah-tjxA7wgBw0J5Q0.crl (hash: pf8FQ7Pcvx85To+RvjAEF+58ktNdqVJEV1AVyFMzWEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:69:c1:a6:37:c3:cf:72:0c:44:5e:9d:68:28:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Validity
Not Before: Nov 11 08:00:41 2025 GMT
Not After : Nov 12 08:00:41 2025 GMT
Subject: CN=be86c300e1a68dd072c338946e49bd6cf4b95bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:f1:73:6d:97:35:cf:ac:8d:d2:a4:66:b3:
97:a8:8f:18:eb:92:ad:4d:76:5f:61:3c:e0:6c:a9:
36:40:c7:aa:f7:0b:ac:e4:11:e7:f2:8a:f0:96:bf:
27:5c:4b:03:6f:fa:25:e5:bf:e8:eb:4d:fe:65:f1:
fc:c7:5d:52:a9:ad:e8:a1:57:90:46:d0:66:ec:a4:
e6:fa:d4:11:cb:ac:c5:70:19:46:ed:d0:88:65:03:
90:d8:1c:d4:01:89:23:9e:f3:e2:2e:88:5c:91:a4:
fc:17:20:47:ce:94:04:2c:7c:0d:44:10:d4:76:3a:
24:2e:8f:7d:7d:b4:4e:bf:f3:b6:ff:00:6d:f8:22:
7d:c8:fa:e9:27:b4:9d:55:73:48:0d:09:50:60:d6:
63:b1:cb:fb:e9:e8:12:9d:14:15:58:d7:44:4b:e5:
c2:6a:59:4a:b9:d9:e4:e5:ec:f9:4f:50:6f:b8:bf:
70:dc:6f:11:ce:7f:3a:06:7e:b8:12:26:44:ec:5f:
9b:cd:61:56:ae:77:3f:8b:f6:76:c2:34:db:85:90:
09:ed:b9:e4:a1:7e:1e:c3:b5:f5:36:f3:4c:69:0f:
91:ca:95:e7:57:20:ea:e4:7b:bb:df:71:20:58:35:
01:0a:40:92:cf:b0:bc:36:f5:c2:64:70:0c:22:a0:
e9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:86:C3:00:E1:A6:8D:D0:72:C3:38:94:6E:49:BD:6C:F4:B9:5B:BE
X509v3 Authority Key Identifier:
keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:63:2e:a4:7e:ef:df:ac:16:55:61:0a:04:21:b0:db:c3:66:
db:70:c3:d2:ee:bc:30:34:24:58:4d:eb:a6:90:b3:44:da:ab:
ce:8b:7f:db:8d:e7:43:14:2f:3a:43:7d:e9:d5:b6:31:0f:42:
d4:9b:d8:51:fb:ce:fa:27:be:f7:ba:7e:83:36:30:0e:33:b8:
31:e7:de:9f:3b:b5:5b:8c:ca:93:3a:af:ac:7a:88:2b:3d:1c:
35:ac:67:5f:24:31:c9:91:53:e5:98:66:f0:b1:9f:73:38:92:
52:3b:0f:26:f0:1f:04:1d:b1:a0:a6:18:eb:dc:d0:66:ef:c5:
a4:0f:d2:33:57:20:de:61:6d:0b:a1:ff:88:a8:f3:7e:30:6d:
6d:a3:72:db:6d:20:ce:37:69:a8:57:ef:c8:8b:01:06:12:79:
a2:c5:d1:ef:90:bb:3f:72:6e:2f:d0:e6:1e:8d:6b:34:de:41:
43:fc:4a:1d:05:cd:af:2f:bc:a0:42:aa:0c:6a:b3:18:51:f9:
37:d5:67:3b:dd:b5:04:a0:33:b2:5f:6f:50:db:c7:c0:04:45:
30:56:1f:65:36:a7:55:c7:7f:80:37:21:fb:04:ba:d2:85:15:
98:17:23:67:be:11:46:e6:34:30:ed:cb:1e:43:e0:3d:51:f5:
95:39:99:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:01:47 2025 by rpki-client