Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
File: m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft (raw, json)
Hash identifier: 8hHkEAHJNJFJH8rsyRlvFyBJ4WRJzoqCcbyTG2ACyGk=
Subject key identifier: 4B:13:ED:C8:1B:75:BB:A2:75:50:BD:0E:2B:7C:0F:F5:AE:CF:D7:8E
Authority key identifier: 9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95
Certificate issuer: /CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995
Certificate serial: 019A4F2B23B8798EAFA8953E8510B3CC7639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:00:18 +0000
Manifest this update: Tue 04 Nov 2025 14:00:18 +0000
Manifest next update: Wed 05 Nov 2025 14:00:18 +0000
Files and hashes: 1: 6gwfZ0imtXXPhJEbNpqe4SziOnE.roa (hash: Pn+V1Yp5GxtDMsze+Fax5FaJ18PgHU1//S1rPV1x8cg=)
2: m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl (hash: qgbav4JsmXDArJMJWQuFNLclwW6BSxLybdoV7xhOBbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:23:b8:79:8e:af:a8:95:3e:85:10:b3:cc:76:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995
Validity
Not Before: Nov 4 14:00:18 2025 GMT
Not After : Nov 5 14:00:18 2025 GMT
Subject: CN=4b13edc81b75bba27550bd0e2b7c0ff5aecfd78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:bb:5f:61:74:a6:52:c5:61:42:b3:ca:27:
c7:5b:b2:fb:8f:ef:5f:81:eb:ed:90:05:06:c8:90:
3b:3a:ac:f0:ca:46:3c:e1:7a:d7:ff:11:3b:c8:35:
cb:8f:18:cc:86:3d:4d:e6:f9:f5:fd:b3:03:c9:ab:
52:92:4f:1e:77:77:06:d5:dc:04:c5:67:96:18:73:
e8:36:2f:41:8d:87:a0:a1:71:b6:cd:a4:19:c3:42:
3e:38:51:4d:e2:ca:1e:ff:2b:1c:02:19:79:ad:9b:
ff:62:ab:a5:1e:ce:29:49:9f:f6:08:fa:9f:b5:20:
86:80:66:8b:fe:2f:4b:a7:24:63:d5:ac:0a:56:70:
f8:29:98:09:63:05:5e:f9:45:ae:f8:ea:52:e5:73:
54:7d:18:12:a2:fa:7f:0a:d4:95:1e:a9:5f:d0:48:
ed:b6:f7:60:58:93:3e:69:53:1b:6a:d9:65:5c:6f:
4c:7d:74:32:7c:fa:f4:3f:ea:4c:ea:39:48:63:b6:
79:b8:b1:c6:e9:4a:9f:3f:3f:95:f1:08:27:2e:8b:
ed:d9:d1:22:48:2a:b7:3f:bf:b4:a8:fe:90:e6:be:
6f:dd:81:f4:20:2f:50:7d:a1:9c:d8:1d:ed:89:9d:
57:52:5d:8a:6c:b7:19:e8:a1:b7:12:fe:cf:e7:d4:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:13:ED:C8:1B:75:BB:A2:75:50:BD:0E:2B:7C:0F:F5:AE:CF:D7:8E
X509v3 Authority Key Identifier:
keyid:9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:0d:cc:a6:12:eb:66:b3:44:1a:ef:d1:01:65:63:c1:92:78:
34:9b:d3:09:5b:9f:a1:72:60:65:20:52:e9:d1:16:07:58:27:
0b:d8:be:2e:5e:d2:7e:e9:03:a2:ba:8e:af:b0:60:db:41:ee:
da:1e:d3:cd:a0:16:c9:61:d8:c0:3b:d2:43:8f:53:b5:5e:ca:
dd:28:59:ca:61:60:10:b4:dd:65:cc:ca:cd:42:b5:0f:ef:e6:
4a:87:4f:b4:bb:cf:33:10:5c:8f:75:ce:de:82:91:53:c8:fb:
c9:45:a4:1a:7f:d8:55:4c:6f:fb:2f:26:4f:6a:ee:8a:4d:13:
53:3e:7f:1c:5b:3e:26:c9:48:2d:2e:1a:47:fc:0f:78:33:e8:
b6:39:b2:9d:83:d7:5f:e3:47:b5:35:45:eb:ca:80:a9:d0:e9:
f5:d1:2b:a0:65:82:a3:f4:aa:c3:13:a6:bf:97:94:dc:23:28:
1b:97:5e:03:ab:51:75:72:f2:14:15:80:d1:58:52:10:3c:15:
5a:20:0e:9d:83:e0:41:18:06:f6:38:77:85:a1:c0:34:54:0e:
0e:98:94:50:07:c3:dc:f2:e4:36:2d:3c:9f:83:21:5f:a5:36:
c2:17:95:65:05:f4:29:4d:c7:d9:cd:f6:f6:a9:bf:cf:7d:4b:
5f:33:89:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:54:25 2025 by rpki-client