Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: NiRxTAGMyoBEKv5GJgOGUUgwMJaszoY37VBa4bacqo0=
Subject key identifier: FB:95:E9:4B:D0:FE:0A:A4:0D:D8:35:B5:EF:BD:6E:C3:D2:9F:98:21
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 019A7338566F1C36D83540010A0B2632AE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 14:01:03 +0000
Manifest this update: Tue 11 Nov 2025 14:01:03 +0000
Manifest next update: Wed 12 Nov 2025 14:01:03 +0000
Files and hashes: 1: FlduQKMxPetRFEf3K99xaEoZ7QU.roa (hash: 2r4TM6IwMUnx2aicUZFPb2Iq+BV2xdiFUdzdromgaYg=)
2: aX_b4UaRWSPBF6_UJgMjS5N9O-c.roa (hash: YV9fhTwKDLCkfBPeMSZl5AvTP7h0hbaT54bWMdXdAUo=)
3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: DqDAd3mhI3dd+2JLpoRTKFxckJdIH94XLGV746MM9AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:56:6f:1c:36:d8:35:40:01:0a:0b:26:32:ae:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Nov 11 14:01:03 2025 GMT
Not After : Nov 12 14:01:03 2025 GMT
Subject: CN=fb95e94bd0fe0aa40dd835b5efbd6ec3d29f9821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c3:f5:37:ae:9c:10:f7:0a:db:33:3a:ac:1f:
b1:2d:ed:d9:b4:b2:57:96:df:67:d4:00:2a:15:34:
42:3e:ec:c1:f9:85:ba:ac:60:ea:a9:83:e3:bb:4d:
ae:d9:44:fe:fc:90:9f:2c:0b:33:01:45:ae:ff:f4:
d7:78:03:04:e9:1a:1e:d6:ea:00:18:a1:cc:5d:83:
47:5f:32:42:eb:e3:97:d4:28:4e:34:81:8b:ff:99:
43:a9:4e:34:f1:e5:8e:bf:5a:76:f7:08:de:a1:01:
13:3b:2e:43:01:a3:cd:e0:d4:d9:f3:5b:72:f1:30:
85:8d:03:74:6e:cc:c9:9e:64:05:fe:2e:f2:cb:53:
63:ab:2c:e5:97:73:a4:42:20:40:36:9b:77:09:f0:
94:c5:a9:23:b3:9c:73:ba:0d:fd:62:a9:16:60:9d:
b1:12:9b:79:26:c7:cf:b8:d9:4c:95:8e:5e:cb:1f:
8c:57:53:f7:8d:33:4b:0a:c9:57:46:12:54:04:1c:
a3:06:77:08:70:92:49:38:e3:05:0b:2a:35:3a:85:
74:0c:5f:50:2d:bd:25:3d:e7:71:9c:0f:a7:db:1a:
84:92:4c:2f:d2:76:6e:8f:d5:39:9f:d3:cc:74:62:
b7:f4:12:da:bf:47:72:35:16:00:cc:52:41:ce:8f:
41:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:95:E9:4B:D0:FE:0A:A4:0D:D8:35:B5:EF:BD:6E:C3:D2:9F:98:21
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:71:32:f8:79:23:51:ab:fa:82:fa:12:18:78:31:c2:f4:86:
e4:ca:0d:6d:a5:01:67:df:44:f2:9b:a8:c1:1e:47:84:c8:78:
7f:47:af:35:7d:fe:21:a1:54:36:bf:1a:84:d4:0c:62:dc:14:
23:51:9b:fe:9e:d5:17:7c:21:df:70:14:36:c9:dc:3c:f1:c0:
17:7d:a4:06:87:f3:46:23:82:11:81:6b:0f:b6:9b:0e:59:8a:
49:a4:e0:59:76:93:67:47:3a:c8:f9:c0:7a:18:e8:fa:13:71:
1d:63:98:e6:d0:ef:d0:61:c3:92:e5:f5:63:c8:85:0d:2e:a9:
51:46:78:e6:93:3d:46:87:78:ae:89:b6:6e:28:a1:85:6e:2b:
71:c3:36:00:66:8a:ab:51:3b:2e:cd:50:c8:59:91:d0:7f:69:
7b:a1:3e:f0:40:5c:9c:b6:21:44:9a:60:7f:6e:73:1a:9e:33:
11:40:ca:89:83:f5:be:71:e7:b7:0e:f3:9d:5f:7e:2f:07:f9:
e1:d0:d0:58:65:16:50:ba:bc:22:53:6b:2d:35:1b:12:57:c0:
49:6c:b8:a9:f3:2f:14:1b:ab:a0:1e:c3:78:a8:8e:cb:25:03:
db:96:4f:01:6e:fe:68:60:1b:98:d4:b6:6f:f8:00:a3:15:bc:
89:01:b9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:00:44 2025 by rpki-client