Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
File: f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft (raw, json)
Hash identifier: r7+Cs+D1GYmAiPqBYvinqWo1I2zHYFS/CfJ1wkqP1kU=
Subject key identifier: 54:9B:2D:96:DE:A5:96:4D:E4:8A:33:EC:3B:56:81:A3:5E:EC:1A:6D
Authority key identifier: 7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20
Certificate issuer: /CN=7fefebd15fbc651487acaf67424f4783d43eb420
Certificate serial: 019A718088591DCD002FC12CD869CE6F4567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 06:00:39 +0000
Manifest this update: Tue 11 Nov 2025 06:00:39 +0000
Manifest next update: Wed 12 Nov 2025 06:00:39 +0000
Files and hashes: 1: aoK4LjzvW24iCl2Hm5SfIHEA-7M.roa (hash: JYGSbmnC0FqsVCIRhlEAGEVGEQbQz4POmiiJzlboiKY=)
2: f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl (hash: acTVTI33pX4PC7kfJajAzFUkXJ+gpuQhYOKCpwz/8SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:88:59:1d:cd:00:2f:c1:2c:d8:69:ce:6f:45:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fefebd15fbc651487acaf67424f4783d43eb420
Validity
Not Before: Nov 11 06:00:39 2025 GMT
Not After : Nov 12 06:00:39 2025 GMT
Subject: CN=549b2d96dea5964de48a33ec3b5681a35eec1a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4b:ef:1b:5f:89:26:5b:a5:ec:44:3c:ff:1c:
7e:25:17:09:06:ee:a3:44:b3:2e:28:2c:1d:95:b4:
3c:4b:9f:68:1b:bd:fb:6e:77:87:f4:e6:aa:54:13:
80:12:ce:e7:4b:8c:a3:87:82:99:ce:d5:03:6f:38:
2c:fd:5c:2c:2a:a1:57:68:0a:3e:d6:83:48:cd:d5:
ab:e5:ff:35:fe:fa:a2:e8:62:ba:80:9a:0e:df:20:
bd:8c:f6:aa:b2:dd:e4:46:a7:9b:c0:1a:c0:45:a7:
09:db:dc:1f:de:38:cb:f8:cd:26:db:bf:09:b1:95:
65:d6:bc:8c:be:2d:cf:8d:cd:cc:cf:d4:d0:eb:c9:
77:c0:28:06:fb:8c:19:14:a2:d6:29:15:2a:2c:41:
cd:d0:e4:83:31:d1:b8:08:1f:f7:f7:00:89:12:dd:
d6:10:38:0e:84:72:66:37:90:8f:c8:34:82:3d:fc:
4c:00:6f:85:33:15:e6:c2:fa:ed:e0:9c:69:1a:19:
61:2a:ec:d0:b3:c9:22:25:fe:2a:19:7a:f9:5a:07:
a2:23:65:f5:ac:0a:4b:0e:a2:35:4c:8f:35:8e:c6:
f0:a3:6b:dc:39:57:2e:b5:14:af:ba:25:82:ca:e8:
d5:4b:39:7f:c8:4e:af:5d:2d:8a:79:86:11:6a:f6:
ab:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9B:2D:96:DE:A5:96:4D:E4:8A:33:EC:3B:56:81:A3:5E:EC:1A:6D
X509v3 Authority Key Identifier:
keyid:7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d2:4b:fc:80:d3:d9:53:7a:b6:61:06:eb:df:94:06:99:1a:
0f:51:bf:af:80:05:cc:32:7d:44:60:3c:c2:23:c8:ab:0a:b9:
86:de:4a:cc:d9:00:bc:53:61:07:55:a1:a1:81:bb:f4:a1:85:
a9:25:66:3d:22:92:c7:9f:d4:6d:e7:a8:0f:90:7c:4b:b5:23:
7f:2b:56:79:66:0d:68:f8:f3:57:a9:b7:fe:e6:f7:74:9c:ec:
e7:ee:f2:cc:a4:34:4f:22:67:bd:dd:67:7b:1a:a0:6a:92:0c:
d6:a8:2f:68:72:66:b2:db:59:84:e8:ae:66:4a:23:c2:82:46:
4f:8a:6f:b7:92:cf:79:7f:28:7d:f8:6b:06:e5:20:07:94:ad:
00:3e:3b:ac:93:dc:78:4b:26:2e:c7:32:f8:62:b0:05:60:62:
cb:4c:43:5e:9a:26:f2:4b:96:7b:3d:08:ef:7c:0b:0e:94:6e:
27:4d:11:83:a6:38:db:f1:c0:3f:70:83:86:37:49:85:b8:e3:
9e:0b:c5:e6:ea:95:7b:c4:d0:cc:3f:56:e9:d0:4c:9e:c7:0a:
cc:a2:6b:5b:69:62:27:3e:23:72:48:d1:7e:d9:81:a6:6a:e2:
1d:37:7e:3f:9e:a3:67:6c:7e:ee:df:19:24:54:74:3e:b6:a4:
b1:5e:3d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:54 2025 by rpki-client