Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
File: 9vHFba9wXxLpXUL0d_jgo9hvOZY.mft (raw, json)
Hash identifier: FbUUT3wUtG8V+7htk+1CqyA7xnM7jxJVYEX/mXn+3PQ=
Subject key identifier: F9:34:86:D8:81:6E:CE:5E:C7:96:71:BE:C7:C9:D2:F9:90:4B:07:05
Authority key identifier: F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96
Certificate issuer: /CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
Certificate serial: 019A52D1D21F74527A9349B88F97D13DD582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 07:01:13 +0000
Manifest this update: Wed 05 Nov 2025 07:01:13 +0000
Manifest next update: Thu 06 Nov 2025 07:01:13 +0000
Files and hashes: 1: 9vHFba9wXxLpXUL0d_jgo9hvOZY.crl (hash: 82fD+J7Luh1/d/x5DW5zwvuLasfA2MCoKj5VC8q/I18=)
2: Img54cKN_P2HeWXe3kxJunOOT3s.roa (hash: ZYdWRN98ug8vbW7f1puvPVmIzjvPFY5NjRNyBZI+eL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:d2:1f:74:52:7a:93:49:b8:8f:97:d1:3d:d5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
Validity
Not Before: Nov 5 07:01:13 2025 GMT
Not After : Nov 6 07:01:13 2025 GMT
Subject: CN=f93486d8816ece5ec79671bec7c9d2f9904b0705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:39:01:dc:38:3f:4e:2d:73:23:d2:3b:e7:ae:
ae:73:dc:e0:78:82:30:6f:93:f4:b5:ef:45:36:cd:
93:d8:ea:31:34:91:ad:29:ff:79:d9:1d:c9:38:08:
35:25:dc:7c:9a:98:32:c6:0b:ac:87:8b:c9:a1:c1:
d3:a8:89:fc:0b:17:3f:7d:b4:23:dd:a4:44:3f:01:
31:96:2a:b2:9a:c1:8c:3b:b5:fb:14:76:7f:9d:0d:
74:f2:75:93:a6:92:62:76:3b:b9:d6:f8:d2:05:f0:
b4:c2:c3:de:6b:b7:0e:bb:d7:71:62:aa:36:ff:44:
84:d5:1f:43:13:ef:9a:55:b2:8a:f3:51:88:5e:7f:
4e:47:e4:e2:69:0b:fa:02:d5:b9:44:50:17:8b:cb:
ab:79:8d:99:1e:ec:ec:a8:71:06:8e:a8:fd:7e:26:
25:01:e8:01:6d:69:62:b6:e6:48:74:f9:1e:6b:f8:
32:dc:d4:c4:01:e6:dd:49:5c:8f:f4:bc:3f:ae:f1:
2a:e7:c3:09:02:8d:48:32:0e:c2:4c:7b:97:60:ba:
fa:77:4f:41:6c:5a:ea:e6:67:cd:17:dd:63:e1:c9:
75:b6:b6:f0:82:f9:7b:50:d9:d3:e8:d3:4d:0a:10:
1a:8e:38:69:da:ee:e5:30:56:29:74:0b:a0:1d:aa:
fb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:34:86:D8:81:6E:CE:5E:C7:96:71:BE:C7:C9:D2:F9:90:4B:07:05
X509v3 Authority Key Identifier:
keyid:F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2f:10:76:ce:db:d4:dd:a2:8c:03:24:b0:a8:9f:4a:74:c9:
eb:e0:e8:7e:e0:e7:ce:7d:35:b5:9b:e2:1f:89:a3:b4:84:b2:
13:4b:c9:a7:f2:d2:06:a7:56:12:b7:f3:0a:0d:60:43:88:18:
54:a2:21:19:96:d0:01:42:33:88:06:19:7c:81:55:73:b0:51:
af:ca:93:dc:49:f1:33:aa:ca:f7:7a:b7:27:a9:22:80:28:a2:
da:3b:0b:bf:e8:ae:6d:cc:4d:cb:e0:45:16:a1:7a:6a:85:b6:
69:00:ee:57:f1:b8:98:e8:c6:65:4d:1b:6c:4a:a0:a9:e1:9e:
7a:86:68:8a:93:7b:97:f4:17:7e:2b:0d:a3:40:1f:16:d9:53:
2c:cc:52:c9:3a:f6:87:e0:27:01:a7:71:43:3c:68:9b:16:5b:
b9:26:a5:17:a6:c6:9e:96:c5:3d:4c:46:f2:b2:50:43:8a:c5:
21:63:48:77:89:b5:aa:93:4f:5c:d9:1c:25:b4:8a:13:c2:79:
e8:80:3a:4e:7f:cd:65:ed:02:c6:4d:b5:20:9e:36:41:ad:92:
67:30:4f:5f:b8:22:26:b0:92:48:50:4f:e2:f7:6f:f0:5e:31:
66:ba:55:fb:d5:0c:69:cb:2e:eb:f7:26:09:49:6e:e0:4a:cf:
ea:c2:9a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:39:10 2025 by rpki-client