Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
File: b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft (raw, json)
Hash identifier: lHkt1R8T961fVruSj4lA2IndJ7eafYjsWD2dbWo0BLA=
Subject key identifier: 85:C5:EF:21:CD:88:CC:E0:78:B5:05:8F:A0:59:82:C0:32:57:19:D7
Authority key identifier: 6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7
Certificate issuer: /CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7
Certificate serial: 019A71EED5FA9391A15F03914E4421D44556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:01:09 +0000
Manifest this update: Tue 11 Nov 2025 08:01:09 +0000
Manifest next update: Wed 12 Nov 2025 08:01:09 +0000
Files and hashes: 1: EtKR-kQx-fQIYWuQ-lYzi3aG73M.roa (hash: Tv2U/xkIvhOtN5S9AYeK8bEvblqxzhCnqAMAXe7i/DA=)
2: b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl (hash: tZYKT+IiTKg0wrDMFXXA+QD3eEjuA8HuFB4r3eAT+QM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d5:fa:93:91:a1:5f:03:91:4e:44:21:d4:45:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7
Validity
Not Before: Nov 11 08:01:09 2025 GMT
Not After : Nov 12 08:01:09 2025 GMT
Subject: CN=85c5ef21cd88cce078b5058fa05982c0325719d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0c:10:d4:35:0e:ad:0f:67:7a:ac:02:b2:56:
2d:3d:a1:48:56:71:0b:e8:0e:d3:26:cd:8a:08:62:
cf:f6:61:a1:65:73:46:62:39:5f:2f:de:7e:31:29:
a7:76:8e:fb:55:ac:73:10:fd:dc:03:1c:a4:43:35:
4c:38:3c:38:0d:c4:47:cb:4f:b4:76:5d:03:16:06:
72:3a:5c:91:3b:56:b7:34:42:a1:fd:be:99:23:3f:
e2:59:26:67:96:1c:0f:b3:3e:0f:cc:17:87:af:e7:
2f:a8:9f:93:78:c1:55:8e:a1:f0:63:db:eb:80:3a:
8e:f8:b0:26:61:1b:f8:78:b8:a5:c1:8b:5a:1e:9f:
c1:09:52:05:bb:62:d3:89:fa:96:56:94:44:14:15:
0b:d4:80:74:00:27:31:88:3a:20:88:51:f5:5d:e4:
0c:a0:45:b2:ba:c7:24:7c:dc:ea:6f:6c:5e:6d:5a:
46:52:2c:ef:08:a1:88:dc:7b:91:7f:ac:f6:97:eb:
91:dd:31:da:8b:b8:58:0e:b7:d5:d1:70:df:e4:bd:
2c:cb:c2:ff:a6:04:ae:4d:2b:66:ab:7d:89:9a:98:
29:ac:28:19:99:eb:c6:01:4b:d3:2c:61:d3:2e:70:
8b:d6:db:1f:c8:64:49:0d:fa:e1:c3:f7:a7:18:30:
85:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C5:EF:21:CD:88:CC:E0:78:B5:05:8F:A0:59:82:C0:32:57:19:D7
X509v3 Authority Key Identifier:
keyid:6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:61:a0:36:7d:06:02:4c:4b:7b:30:f1:4c:2d:f7:e0:07:00:
f3:f8:19:fb:e7:02:f5:76:99:cc:bb:af:cc:1a:cc:71:2c:70:
0e:92:5b:d4:7d:aa:0e:07:6f:a1:6a:f3:eb:52:ec:2b:ff:83:
49:e9:44:e7:42:ec:d9:8e:61:54:5b:ce:0a:ed:0f:26:83:15:
be:5b:74:5d:24:c9:ab:d9:14:3b:7b:6d:2a:86:46:e0:84:b8:
e7:1e:f4:a6:e4:58:2e:85:f3:0d:28:0b:1a:0f:74:db:3e:5e:
78:1b:45:a2:4c:fd:f0:6d:e8:a9:dc:c5:81:87:6f:58:f5:71:
6f:b0:26:2e:13:c7:0e:ab:c4:5a:62:60:99:df:64:8b:e9:b9:
5e:cb:e1:5d:fc:43:b8:58:32:1a:09:08:50:3e:ad:0f:af:c8:
68:0b:9d:3c:76:df:f6:bf:10:9e:42:f6:df:d7:71:38:24:5d:
71:5e:b4:46:12:3d:51:e1:bd:ed:b7:e5:c6:8b:52:5f:14:2c:
54:da:83:0b:3e:31:a0:97:47:f0:45:8f:b9:99:62:5b:c5:09:
0e:60:c6:17:b4:67:e7:5e:94:4b:d8:a5:78:01:11:2c:93:04:
b9:14:f5:64:e1:04:34:a0:2b:e3:50:e0:cf:de:68:3e:f2:cd:
f0:fa:ec:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:49 2025 by rpki-client