Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
File: 9NavTeibuoEYlTzO6_s59FqO0bw.mft (raw, json)
Hash identifier: Qo/SC08EXh55We4+BbpfiVXpFlGXbfhTAiBITRCV/Fc=
Subject key identifier: F8:C8:F1:C4:F2:C0:0B:D9:AC:94:F4:85:65:F9:02:7C:E4:A2:78:18
Authority key identifier: F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC
Certificate issuer: /CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
Certificate serial: 019A71B7D8D8A31D5C94ED71194CCC22D5C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:05 +0000
Manifest this update: Tue 11 Nov 2025 07:01:05 +0000
Manifest next update: Wed 12 Nov 2025 07:01:05 +0000
Files and hashes: 1: 9NavTeibuoEYlTzO6_s59FqO0bw.crl (hash: fBGD+7fdC0jjlZvDHXgiB4U/1UOsxzNuQSzihoFgskE=)
2: RSBqMA8SK5hkaH899w74rpWOWzA.roa (hash: ZarbLd1gWH81UzY1+uoaATMpd5XCQStSn4LP/xfm248=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d8:d8:a3:1d:5c:94:ed:71:19:4c:cc:22:d5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
Validity
Not Before: Nov 11 07:01:05 2025 GMT
Not After : Nov 12 07:01:05 2025 GMT
Subject: CN=f8c8f1c4f2c00bd9ac94f48565f9027ce4a27818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4f:5a:e0:53:e5:88:17:aa:f5:9b:62:e3:fa:
b0:62:cb:e6:be:08:c6:82:28:6d:76:48:2f:6d:be:
bb:c7:5f:f7:86:97:a2:b6:3b:45:25:1e:99:4d:b3:
50:41:c5:19:25:23:0a:b7:3d:44:ec:06:6d:02:11:
e0:fe:c7:96:0e:b9:27:4c:76:51:e4:2f:25:72:db:
3b:fb:06:2f:43:61:7f:dc:15:e7:ec:d5:4d:cc:a5:
c7:7b:7c:be:a0:e1:dc:1a:a5:3e:a4:d6:54:ac:cb:
c2:eb:b9:e0:59:1e:fb:df:15:9a:6a:33:42:30:ae:
ee:99:a3:53:45:b1:54:7e:84:87:d9:82:27:af:61:
31:dd:73:d6:48:67:64:fe:29:bf:60:70:c4:b9:82:
4b:03:43:35:50:bf:6c:6c:f5:08:09:85:4f:d6:c7:
72:a3:f0:06:dd:86:1f:83:ba:0f:3a:b6:e3:6a:dd:
9d:a4:11:79:32:08:e3:12:09:4d:19:8d:73:5b:fe:
7b:73:d9:b6:57:00:f3:e3:2e:aa:81:5e:f2:07:d0:
48:bb:bc:27:64:72:c3:69:f7:64:68:8f:6b:f7:87:
b6:e8:8c:89:de:98:b3:d0:55:78:bb:8b:71:12:48:
a9:9f:66:3f:b9:ec:18:ce:05:4f:ba:67:ce:aa:96:
52:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C8:F1:C4:F2:C0:0B:D9:AC:94:F4:85:65:F9:02:7C:E4:A2:78:18
X509v3 Authority Key Identifier:
keyid:F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a3:7c:99:d8:a4:0d:e4:ed:ff:f9:ee:7a:c4:88:75:25:3a:
a6:91:10:33:ac:28:6a:c1:52:a2:c1:0f:23:4d:e2:bd:f9:6c:
bf:f5:0d:f6:8e:fc:23:64:67:02:6d:35:c3:e1:16:7f:7c:e8:
ff:09:58:98:2c:f6:63:ae:1f:9e:97:ae:41:06:de:30:a4:0d:
3b:94:4a:1f:93:80:52:a9:0b:a4:32:35:e1:e8:fe:35:e2:aa:
3c:5a:71:79:57:0b:84:d5:72:cd:7c:a6:48:84:b1:69:f0:74:
8b:69:a5:69:1a:19:31:5f:d4:6f:35:7b:85:7e:d3:72:a3:6b:
41:0c:4e:b9:f2:c3:76:de:9f:7a:cd:58:63:84:4a:14:1a:c6:
c2:29:dd:f6:66:1d:7e:d3:22:b8:d1:c5:2e:0c:22:2e:ae:43:
99:1a:58:a2:bb:f3:f1:fb:b8:cd:c8:f3:7e:a5:7b:f0:5f:6d:
be:1c:79:db:b1:ec:62:74:93:3a:0a:d5:68:fd:2a:38:3a:65:
ae:23:26:42:75:74:75:82:0d:b4:11:75:c2:75:65:c8:59:e3:
65:6e:c1:2d:d0:11:a7:b3:c1:ec:52:27:38:b9:23:91:31:a4:
83:65:04:7b:0c:14:c0:17:87:37:d1:81:7f:b4:7f:bd:a2:e7:
b5:2a:57:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:14 2025 by rpki-client