Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: qLqM3gBEZi04waSkDjIbo9kw7enyW2JgcsbLSZePlWU=
Subject key identifier: 6E:85:B7:FD:94:E6:A8:A3:7D:7C:1F:AA:F6:B7:BC:33:13:D7:EE:80
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019A22895061737E5B5B77616B4BF282287B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 170B
Signing time: Sun 26 Oct 2025 22:00:15 +0000
Manifest this update: Sun 26 Oct 2025 22:00:15 +0000
Manifest next update: Mon 27 Oct 2025 22:00:15 +0000
Files and hashes: 1: 8YTLS_1mFrh55A62a2mBS518iAg.roa (hash: b+QiLic550TpA6gu3XGSKkJ7N3n9C2SCnWL5+/s9Vr0=)
2: W7Jge6ghVHbAsdaSdITf8b_3aVQ.roa (hash: eGgmHuw9ea32mMeNaCzUMNBUiaRSSoMmW6d0dFZkj5k=)
3: cOy-CAvP6otn2DzWCwsJGJTydS0.roa (hash: 0R2NVVpBG6pXvGjfU3eH+cXTry9Vt5bvO9CjIpEY18Q=)
4: oz-gpVKEUvOG9fOS01I-1A1aI-Y.roa (hash: 0NG9CVuIlSmbnaNtm7cZXsbOMNvpcIJrtm880P+NpNc=)
5: q9IaYjcr5RObBrW7hey_hpAIvpg.roa (hash: 2MfulwyVlfgKmQicfk78T3sq4tPTxMleY1Rp41M0dbI=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: 5HJ7LVKNL69oGQ3f0uc4IN55mPo6QCg1iMmJh6Tdj4c=)
7: vcy7WC8JEz9GH2wrI2xSRGFOQ8M.roa (hash: ppq+e7eDeIpGmxTNUn9DHommsEQqQfIeqXbSiT0TQpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:50:61:73:7e:5b:5b:77:61:6b:4b:f2:82:28:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Oct 26 22:00:15 2025 GMT
Not After : Oct 27 22:00:15 2025 GMT
Subject: CN=6e85b7fd94e6a8a37d7c1faaf6b7bc3313d7ee80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e8:8d:3a:2d:97:b5:81:13:0c:be:b3:41:5a:
23:31:65:f3:09:47:71:08:9a:46:c4:9e:6e:32:fe:
cf:7b:bb:61:26:68:5f:d1:77:26:d7:8c:de:eb:09:
d0:ae:a2:59:9a:fb:28:84:d4:06:86:30:15:99:e7:
ac:51:f9:b9:c8:ff:e3:a4:8c:04:83:c7:96:5f:56:
88:40:9a:05:70:90:89:82:ca:8c:9c:01:be:34:ef:
96:90:87:4a:1e:06:92:3d:3d:28:d9:6d:98:43:ba:
52:51:21:d6:12:91:6b:dc:0c:0a:20:f1:d7:3a:26:
04:0e:96:75:93:7b:7c:b8:09:52:f1:7e:26:04:1f:
13:ab:fd:56:dd:94:e4:ec:09:12:7c:a9:fa:30:46:
d1:66:e4:2f:f2:9d:bf:a9:5b:9a:0e:d7:6b:a6:42:
75:69:cc:03:70:38:4e:ac:60:63:9d:4a:3e:e6:3b:
dc:b1:58:dc:94:71:23:85:80:b5:33:20:f7:f2:15:
fc:05:8a:bc:ba:81:93:27:f8:dd:c0:81:08:aa:69:
dc:c7:5a:3b:a5:34:21:69:cc:19:a5:45:9f:9f:43:
f4:79:7b:3a:82:ae:87:37:35:80:ed:4c:59:92:8d:
8f:13:b7:40:e7:35:30:10:65:e3:23:7e:36:3d:d9:
a2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:85:B7:FD:94:E6:A8:A3:7D:7C:1F:AA:F6:B7:BC:33:13:D7:EE:80
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9c:05:1f:b3:a5:08:64:1b:fd:f9:63:ae:1a:20:c6:ad:47:
e6:a6:84:d5:8f:e9:15:93:5e:65:99:64:2d:30:28:a0:20:2f:
b4:cf:76:1f:fa:1c:1b:47:8d:11:ee:9f:41:c4:1b:de:3f:46:
e8:aa:84:20:51:8e:2b:58:fd:a5:29:83:e1:89:e0:63:86:d3:
4b:1b:40:5c:08:47:fd:43:fa:99:d5:ab:71:c4:35:64:52:71:
be:f9:69:15:7f:f2:43:bf:88:5d:6c:c2:1d:cb:65:31:28:b5:
71:f2:63:e8:59:1e:9b:03:4a:7c:24:5c:93:e7:eb:07:5d:92:
56:b3:3d:2d:f5:99:7c:2e:05:a7:df:93:19:e1:98:0d:a0:dc:
27:42:5e:2d:61:10:c5:5f:51:c2:ef:7c:af:c9:76:44:61:7c:
a9:7a:4c:6d:df:11:2e:c8:5b:67:69:8f:1d:bc:99:b9:bf:1b:
45:e2:ca:31:4d:f0:4c:5a:e5:ac:bf:52:c5:ed:79:91:27:96:
e8:f4:1a:22:a3:47:13:0f:9c:b8:dd:a8:22:fe:3e:2a:9a:99:
a1:84:a1:8e:d0:55:ca:c0:a0:54:19:b7:1a:f0:e2:9c:8a:ad:
e9:10:40:7d:f5:0e:c2:a2:81:5d:a5:2a:90:cd:1f:35:aa:e4:
83:5d:c0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 05:28:22 2025 by rpki-client