Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: orEgJPkbUXSjn7gKdluMu3hm5YAewyFnoFjJgIcBZuI=
Subject key identifier: 07:89:75:87:B1:BA:7B:7B:DB:FB:EC:4E:1E:FF:DC:F7:09:CB:47:83
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019A69FF7FF3C41BC45DBDDA7BD8636B0607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 1730
Signing time: Sun 09 Nov 2025 19:02:23 +0000
Manifest this update: Sun 09 Nov 2025 19:02:23 +0000
Manifest next update: Mon 10 Nov 2025 19:02:23 +0000
Files and hashes: 1: 8YTLS_1mFrh55A62a2mBS518iAg.roa (hash: b+QiLic550TpA6gu3XGSKkJ7N3n9C2SCnWL5+/s9Vr0=)
2: W7Jge6ghVHbAsdaSdITf8b_3aVQ.roa (hash: eGgmHuw9ea32mMeNaCzUMNBUiaRSSoMmW6d0dFZkj5k=)
3: cOy-CAvP6otn2DzWCwsJGJTydS0.roa (hash: 0R2NVVpBG6pXvGjfU3eH+cXTry9Vt5bvO9CjIpEY18Q=)
4: oz-gpVKEUvOG9fOS01I-1A1aI-Y.roa (hash: 0NG9CVuIlSmbnaNtm7cZXsbOMNvpcIJrtm880P+NpNc=)
5: q9IaYjcr5RObBrW7hey_hpAIvpg.roa (hash: 2MfulwyVlfgKmQicfk78T3sq4tPTxMleY1Rp41M0dbI=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: 30JRUxul1EhoLCb3EvsVK6B2clWUMsNLWATCSwI9GzE=)
7: vcy7WC8JEz9GH2wrI2xSRGFOQ8M.roa (hash: ppq+e7eDeIpGmxTNUn9DHommsEQqQfIeqXbSiT0TQpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Nov 2025 19:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:69:ff:7f:f3:c4:1b:c4:5d:bd:da:7b:d8:63:6b:06:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Nov 9 19:02:23 2025 GMT
Not After : Nov 10 19:02:23 2025 GMT
Subject: CN=07897587b1ba7b7bdbfbec4e1effdcf709cb4783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9d:52:fe:b3:2d:50:e5:4c:8b:70:15:d9:87:
ae:89:e9:0f:57:3f:ee:2a:b8:7e:9c:fe:9d:21:e3:
31:53:fb:62:ce:87:1e:bd:49:d0:47:cc:fe:59:9d:
1e:67:51:55:20:00:fb:19:1b:12:95:47:43:24:07:
76:5d:1c:45:59:e4:bf:a7:38:b0:6c:56:2f:0a:69:
17:b0:56:fd:3a:78:2c:09:b3:bf:5a:69:54:85:7e:
45:10:44:b5:39:87:37:9f:ab:81:09:28:9b:45:87:
7a:16:63:df:c6:a3:53:a7:31:ba:b7:c7:41:18:78:
a8:08:30:56:4e:ae:6a:81:61:f2:b9:01:7a:85:32:
e9:19:cf:1c:c7:60:95:40:30:03:04:f2:8f:86:3e:
83:b8:cf:22:00:ad:40:a9:84:64:c3:41:5b:03:11:
51:f7:d4:05:d1:84:5d:0f:67:de:64:33:8c:d7:9f:
27:5b:df:82:f0:75:21:52:5c:7e:92:93:c5:14:92:
64:12:81:81:72:40:df:3a:cd:00:31:ee:b9:d9:de:
23:3a:ea:41:70:e9:fe:2b:26:5c:f8:18:9c:69:67:
26:97:1b:3d:37:3a:2d:51:c2:03:0e:b5:2c:d2:29:
2c:a3:ec:28:ff:3f:1c:18:82:d1:5e:88:df:4b:7a:
dc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:89:75:87:B1:BA:7B:7B:DB:FB:EC:4E:1E:FF:DC:F7:09:CB:47:83
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ae:92:37:fc:8c:e7:51:25:96:a2:5f:16:23:78:b5:71:42:
99:bb:19:1a:e4:07:95:34:34:b6:51:31:a1:3b:e6:ae:17:75:
8d:b3:a2:f2:71:26:ac:6c:53:18:0f:f5:be:d7:7b:0d:92:05:
32:36:82:47:eb:0b:12:40:34:4b:24:0c:2f:fe:33:ee:a8:ac:
52:26:f3:81:5f:5b:97:7b:6b:c0:d2:94:d0:3e:31:fc:a7:c4:
eb:69:09:fe:2c:47:93:c1:4d:48:63:2f:b8:64:50:b0:d1:85:
f0:3e:a7:54:5e:7d:78:4a:56:d9:b4:dd:cd:f6:bc:67:1f:78:
ea:85:58:cc:db:58:6f:70:34:46:17:ab:58:71:42:b0:45:7f:
74:b2:94:49:09:cf:f4:86:71:ab:7e:b6:00:89:33:af:bb:c4:
27:5a:4d:8c:93:ab:93:79:c7:bb:b5:b3:6d:93:7e:5b:91:aa:
ee:07:34:00:a5:f9:c7:e8:d5:2b:99:56:a3:04:19:72:1a:85:
06:a2:12:f8:6d:d2:68:3c:0f:0c:d9:67:0e:34:5a:a7:76:22:
aa:df:55:75:04:11:93:f6:69:b2:42:a2:94:50:5b:97:80:80:
79:02:f8:8f:df:41:de:76:6a:f2:49:73:91:b4:4c:01:2a:90:
fe:0f:3a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 10 04:38:11 2025 by rpki-client