
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
File: F92cI69p7Czbb-K5k260lM_RYh8.mft (raw, json)
Hash identifier: UCZ5D6eO4cqwqRQHeruIXQI88F8QDqL73e8EN0Oa9Fc=
Subject key identifier: 8C:77:62:02:D0:F8:23:F2:7E:51:2D:6C:7E:E8:32:C9:CF:37:66:C7
Authority key identifier: 17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
Certificate issuer: /CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Certificate serial: 019A72CAB7F48CD738895C9967E1A33A48A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
Manifest number: 172F
Signing time: Tue 11 Nov 2025 12:01:19 +0000
Manifest this update: Tue 11 Nov 2025 12:01:19 +0000
Manifest next update: Wed 12 Nov 2025 12:01:19 +0000
Files and hashes: 1: F92cI69p7Czbb-K5k260lM_RYh8.crl (hash: D8yC8chdY3Aj+IQtcRuuoaFKvjF1f1h+C6hG6EkFUNE=)
2: Kj5ZZT_QMGV8ggXHA75R7vnwc-Y.roa (hash: p+eVg1Sb75Egr4y3obi4lrz5P3sy7D8NwnWNwRsHb70=)
3: NIDKHm7_cZUNMihpKQDzfd-ZjRA.roa (hash: kaf5wyEDhcWh11clAHcF36F7W+dfPnAjUXKofTGxPck=)
4: amXihoIti_1rSNyGXmBzzCK307E.roa (hash: nLmxvSWML2dah+dCWe4SPAyANy3yKBIMLrJwHa4DIEM=)
5: cmnKESnx3pYzc_9zB3Nnd1QMDJ8.roa (hash: yO89D9gVpePds41T+w6tzQYVY3S3xzIRop0YPL+B3+8=)
6: kBXwPrMJB0ThDVQR40IlfFPNkyw.roa (hash: WSIqxfMf5Dc+EQRIcgzKS/cBelm31rF0dfb36H7aaLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:b7:f4:8c:d7:38:89:5c:99:67:e1:a3:3a:48:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Validity
Not Before: Nov 11 12:01:19 2025 GMT
Not After : Nov 12 12:01:19 2025 GMT
Subject: CN=8c776202d0f823f27e512d6c7ee832c9cf3766c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7d:8f:42:54:fc:11:9c:78:22:4f:bd:2f:38:
09:98:28:c2:aa:17:92:50:c6:6d:fa:03:64:77:b7:
05:c2:12:35:d1:b4:1a:13:f4:27:54:b2:32:9c:c3:
61:9e:d0:2f:30:71:c5:f9:03:5e:3c:25:cc:50:2e:
82:be:b9:e6:7c:55:4f:96:09:d9:3d:5b:36:f7:94:
8e:2e:08:75:50:f6:31:72:1e:3e:66:5f:cd:c3:32:
a0:6d:50:1d:33:8c:c0:82:df:92:60:54:e6:ec:3a:
f9:20:93:28:6a:c8:26:01:1e:8c:7f:64:a3:c8:53:
28:be:30:af:94:d3:9d:68:a4:fa:8a:f4:81:6e:d8:
10:7a:7b:7a:39:b6:5d:48:86:97:c4:d7:a2:cc:05:
c3:6a:84:34:84:25:69:9c:c4:b1:65:b1:1f:a6:a3:
51:1c:52:65:83:a8:45:83:b1:c6:d8:e7:51:1a:19:
0e:ef:35:8c:15:2c:3f:88:a9:76:d5:60:6e:b9:9b:
af:71:d9:90:c8:0c:a3:e3:f3:9e:a9:fe:78:02:19:
7c:f4:80:51:f9:91:32:57:3f:ab:79:7f:e3:2a:fb:
54:92:2c:78:25:07:4b:dc:0b:6a:0d:7c:04:f8:58:
d0:cb:77:22:4a:cf:50:45:0b:2d:a6:0f:8a:48:df:
11:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:77:62:02:D0:F8:23:F2:7E:51:2D:6C:7E:E8:32:C9:CF:37:66:C7
X509v3 Authority Key Identifier:
keyid:17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a9:b2:72:2a:6a:21:ff:00:c8:74:d9:89:11:f0:1b:a6:b4:
44:b9:b4:42:b3:5a:d8:d1:eb:63:28:56:60:60:b5:dc:ce:15:
d3:d4:66:bd:94:d5:ae:47:be:90:36:5c:27:53:07:d3:09:77:
e7:a9:07:53:05:7f:c8:fd:16:28:49:97:e2:86:42:70:36:3e:
d5:05:5e:16:68:cf:6f:14:74:8f:d4:ba:1a:f8:12:4d:d3:21:
8d:54:06:64:a7:d8:62:94:35:cd:1e:2e:f3:dc:d9:6a:d9:4e:
06:dd:45:fc:88:d9:07:d3:9b:5c:49:f0:e1:f2:0f:e8:27:0c:
c7:1c:35:2d:f5:12:ed:4b:40:03:ca:57:48:ae:b1:43:dd:55:
98:62:7a:2b:1b:0b:1b:89:39:f8:f9:92:26:e5:ce:9f:0c:91:
63:2a:0c:ba:6b:a1:47:fd:14:54:f0:a3:e9:04:bb:41:0f:b1:
fa:dc:d6:8c:38:4a:ea:ef:c5:4d:41:9c:9a:de:a8:16:46:8a:
fd:6f:4b:74:bc:8b:bf:9f:42:93:e3:17:4b:75:a5:96:fb:fa:
02:ad:6c:91:84:94:30:7c:86:ae:15:bb:e0:b0:65:dc:f5:35:
2b:ad:2c:7c:c4:5c:56:e1:55:9d:03:23:f5:4c:c8:cb:08:03:
33:6a:7b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:16 2025 by rpki-client