Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
File: c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft (raw, json)
Hash identifier: BRDyIdgRyPNTlVWzNVKT4A7tB7IercUqu4wGeVh6Ibs=
Subject key identifier: 90:05:20:F2:4E:C1:D4:01:4E:D6:DC:88:C9:01:A2:67:53:95:18:34
Authority key identifier: 73:D3:13:67:60:85:64:D8:78:3B:B2:42:48:6E:93:D6:50:6E:7F:95
Certificate issuer: /CN=73d31367608564d8783bb242486e93d6506e7f95
Certificate serial: 019A725CB9B8E6D69B64444FAA7D4FD776E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 10:01:10 +0000
Manifest this update: Tue 11 Nov 2025 10:01:10 +0000
Manifest next update: Wed 12 Nov 2025 10:01:10 +0000
Files and hashes: 1: c9MTZ2CFZNh4O7JCSG6T1lBuf5U.crl (hash: lfE92EZNdAtIm0P4Dz15FpTImdj0CbXKHYJVzWikg3c=)
2: zXpgIfivUxV3ksiBOIvLcsg5wsg.roa (hash: kEoJUet4XPH+HygffLp7TrLFhJPdEY2uJaOE3uj/HMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b9:b8:e6:d6:9b:64:44:4f:aa:7d:4f:d7:76:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d31367608564d8783bb242486e93d6506e7f95
Validity
Not Before: Nov 11 10:01:10 2025 GMT
Not After : Nov 12 10:01:10 2025 GMT
Subject: CN=900520f24ec1d4014ed6dc88c901a26753951834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:87:6a:7a:34:e6:bb:23:f1:66:9c:59:57:
d1:aa:c3:fe:e8:57:1a:f3:0f:97:52:8e:25:36:d5:
e6:68:76:76:de:a0:b7:97:b3:bf:e7:dc:bc:e3:f6:
74:60:b6:4b:5f:b7:13:9e:db:44:81:6b:e3:67:82:
69:c6:88:bf:5b:12:2b:f8:fc:5b:9f:57:a0:db:a0:
00:7e:30:4a:b1:52:b9:7f:f0:08:b1:29:9a:6c:f5:
49:bf:b1:4d:02:10:1b:b4:52:7d:80:fe:91:c9:af:
31:fb:74:b2:62:8d:f6:94:3d:16:f0:1a:c1:23:2b:
a2:2f:6e:30:d5:60:66:a0:ed:6a:45:47:d3:0e:09:
df:56:5b:c1:61:e2:f7:81:27:d0:70:15:62:38:4e:
f8:55:cd:23:d5:56:16:1a:c4:f7:fa:76:a7:40:41:
03:63:a6:90:45:00:d7:2e:8d:f6:b5:9a:e4:00:01:
60:c3:f5:ec:c0:26:47:98:18:44:b8:03:5e:5e:df:
c6:97:22:7a:5d:2d:f1:c8:a2:d6:4c:66:c6:a5:f9:
82:14:66:f5:41:1a:41:4c:ee:ca:f0:91:f0:4a:3e:
6d:c4:ea:d6:67:4f:4b:ff:d8:b7:a1:f5:12:b7:47:
9a:60:75:90:40:8c:51:49:4f:ce:c6:7b:ff:ab:4c:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:05:20:F2:4E:C1:D4:01:4E:D6:DC:88:C9:01:A2:67:53:95:18:34
X509v3 Authority Key Identifier:
keyid:73:D3:13:67:60:85:64:D8:78:3B:B2:42:48:6E:93:D6:50:6E:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e6:20:b6:a2:b9:15:44:90:1b:c0:e5:ed:cd:e3:09:88:63:
a3:36:78:2c:86:58:3a:f3:12:d2:e3:07:44:c8:00:8a:90:95:
87:dd:75:9f:90:62:b1:1f:52:7c:04:4a:2c:55:17:62:8b:02:
63:3e:40:b8:1b:7d:41:9a:9a:3c:ba:c6:ca:7c:d9:2f:80:66:
32:de:a2:74:fd:3f:d7:24:72:51:79:8b:37:a5:48:93:cd:a1:
ee:5e:bc:57:db:3a:af:11:ad:5f:7a:8e:90:43:ba:b7:37:a5:
f0:d3:e6:5e:c4:8e:cd:28:5c:c3:c7:b1:80:56:a4:dc:cf:d1:
56:40:f1:7b:30:c2:ef:61:83:8c:e4:ec:65:76:0f:d1:31:10:
7f:51:c0:a9:24:28:8e:84:36:ac:c0:b0:4d:49:ee:1b:fc:1a:
2c:62:53:9e:e0:0e:f5:45:50:a5:9a:c4:f5:44:8e:74:94:b0:
d3:27:c4:ef:9b:a0:24:a5:ca:1b:fe:07:17:36:08:e5:54:a1:
9a:7a:d8:f9:2e:1f:c7:3b:e0:5f:c0:f0:97:9d:c8:09:18:fc:
47:f8:21:96:3c:b4:1f:7e:da:3a:a1:96:a9:e2:ed:25:c9:9f:
2e:50:8f:a8:12:08:28:c4:2e:be:ef:52:6a:ae:5b:5e:f6:23:
38:2a:af:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:10:47 2025 by rpki-client