Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
File: k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft (raw, json)
Hash identifier: OZKm8OOurNkpaHx4NaFn3CGyEWZo1WwDeRXIhu83J10=
Subject key identifier: B0:6D:E9:51:07:EA:4F:F2:EC:0C:C3:D7:9C:38:5A:7C:47:C4:D1:67
Authority key identifier: 93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
Certificate issuer: /CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Certificate serial: 019A72CA3956367B8ADFE8E3F25457C83CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 12:00:46 +0000
Manifest this update: Tue 11 Nov 2025 12:00:46 +0000
Manifest next update: Wed 12 Nov 2025 12:00:46 +0000
Files and hashes: 1: I9i3fnf4Nk0WsFMmWEWJhe5vh40.roa (hash: llYywC4U70yW6sSChiJ+ZHwIZzZjQAej/EchqIalMeA=)
2: IGJfVzvhS1XNfQJqw7b44W8rh5Q.roa (hash: ps4BuWOubuNVlVOQpqaTImNMOhN/B2m1xTG8lC4cqCo=)
3: k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl (hash: PrHGUVxa0LB8wp8FgwheF9SaAQEsP+HKa64zBdhdke0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:39:56:36:7b:8a:df:e8:e3:f2:54:57:c8:3c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Validity
Not Before: Nov 11 12:00:46 2025 GMT
Not After : Nov 12 12:00:46 2025 GMT
Subject: CN=b06de95107ea4ff2ec0cc3d79c385a7c47c4d167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:2c:be:6a:d3:56:5b:0a:28:5d:16:61:fd:
d5:1e:8d:71:1d:36:af:02:4f:a7:fd:65:2d:d2:92:
d4:0e:b1:ea:e3:3c:72:02:a6:d1:38:32:59:c9:1d:
bb:2b:36:6c:97:3b:82:f9:52:b0:4f:e2:ad:41:e7:
39:f6:4d:c2:18:3f:8a:40:ea:75:51:c8:54:49:f4:
e0:fc:34:5f:3a:54:4f:d2:25:bc:4d:77:14:32:6c:
14:f3:a4:a0:2a:b8:bb:2d:b9:82:98:de:47:0d:fe:
34:a7:76:50:71:5c:86:d9:cf:90:5e:19:1b:e6:16:
80:82:3f:91:6b:8a:9b:eb:56:47:f7:60:d3:e3:7c:
30:e4:6d:f0:85:17:91:76:ee:72:c5:8e:ee:2b:c0:
35:27:50:4a:42:ca:6f:e5:ca:17:7b:2b:24:bd:9f:
e7:01:a5:93:7e:75:44:30:03:df:54:e9:3d:72:4c:
64:bb:43:ed:4f:ae:94:c5:f6:88:8e:dc:54:de:f2:
85:d3:52:5a:6d:7d:eb:f0:a0:21:49:4c:76:4e:19:
95:c1:f2:84:b0:38:8f:22:90:bf:ec:37:2c:3f:41:
2f:e1:28:b2:2d:20:34:e9:14:07:7c:b3:65:81:c1:
e1:e3:02:6e:16:fa:60:34:07:da:c5:2f:6f:99:5f:
64:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6D:E9:51:07:EA:4F:F2:EC:0C:C3:D7:9C:38:5A:7C:47:C4:D1:67
X509v3 Authority Key Identifier:
keyid:93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d5:18:c0:c1:e6:9f:f4:6c:eb:36:1f:a8:66:10:32:8f:b2:
29:a2:48:53:7a:38:ca:5f:a3:e3:4d:c3:f8:45:b2:86:0a:76:
f8:80:12:db:ae:dd:f1:03:87:cc:6f:cd:92:91:bd:06:11:6a:
15:63:de:2c:c1:d0:84:b1:b2:f9:5e:a0:2d:ba:ba:1e:0f:d2:
ee:b8:28:a5:8e:03:bf:3b:a9:32:72:9f:78:7e:6a:d8:b3:f1:
1d:9e:26:5c:00:d5:50:e5:5d:c4:a5:66:18:af:da:b8:72:66:
f0:e6:bc:19:ac:e3:c1:77:60:8e:37:3a:9c:86:03:7c:f2:03:
98:1e:91:b2:44:05:7b:75:4a:5d:7d:d8:25:40:e4:11:71:e9:
8c:70:60:9c:1a:ae:ec:41:6b:1c:90:07:58:0e:0e:fc:bd:d2:
5a:7a:17:f1:3b:0c:b1:52:10:30:5f:6c:18:d9:4e:9e:33:0f:
b3:be:a5:55:56:4c:18:06:b2:ec:05:fe:4a:ff:ec:b0:54:cf:
99:b2:06:65:ae:53:8c:02:ad:35:9b:19:c5:52:79:cc:21:a1:
4a:46:fd:13:ab:70:49:56:8f:12:d1:c7:88:fe:59:50:9d:f2:
26:7a:42:4a:2d:f1:ae:41:ac:dc:d8:bc:06:9e:82:1b:66:b3:
a9:f7:de:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:41 2025 by rpki-client