Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
File: 9XIyXS0hl0ZpxIj566pru5LNX-0.mft (raw, json)
Hash identifier: /vJt0YyWB26EcOysIMlscI6NzNtmM8Q+lpvKHnWGHYE=
Subject key identifier: 21:BC:FB:4D:03:38:E4:F4:46:76:93:18:6B:B7:4D:3B:84:D0:60:28
Authority key identifier: F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
Certificate issuer: /CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Certificate serial: 019A71B980ED22A3BF8EC7AF65246225E8E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:53 +0000
Manifest this update: Tue 11 Nov 2025 07:02:53 +0000
Manifest next update: Wed 12 Nov 2025 07:02:53 +0000
Files and hashes: 1: 9XIyXS0hl0ZpxIj566pru5LNX-0.crl (hash: X23m4+c5D/DBQtLKHxscyo9C22TkByly0uGfJ+N0lRo=)
2: cBAS0GUhF4mz2fqaOHRlVgN3CFs.roa (hash: Lp1yFkf1vOWXjEEeUSdOv9NCeGF4SfR636ANc/ZvdMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:80:ed:22:a3:bf:8e:c7:af:65:24:62:25:e8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Validity
Not Before: Nov 11 07:02:53 2025 GMT
Not After : Nov 12 07:02:53 2025 GMT
Subject: CN=21bcfb4d0338e4f4467693186bb74d3b84d06028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:be:d8:98:e6:c2:36:06:6c:0a:5e:72:9a:
1d:c5:d3:6a:cc:13:86:da:b5:56:1d:ad:2c:ee:ae:
ce:35:32:57:4e:3a:2e:bf:f0:72:20:17:1b:4c:5c:
66:60:5c:9b:29:96:03:ae:be:3d:61:d9:8b:58:61:
c2:05:31:2e:b4:44:5b:8c:a7:2c:2a:a6:38:24:bb:
97:03:e6:2d:06:55:5d:2c:8e:70:fb:51:ea:80:b5:
0b:9c:e6:18:97:d7:84:56:32:99:99:40:45:8b:ac:
18:15:7e:d6:79:23:bc:95:e8:e8:b0:ec:5c:fb:ae:
ed:07:24:1d:71:fe:76:eb:51:ba:73:42:ba:2f:b1:
b8:2f:16:47:dc:af:15:64:36:6f:68:56:36:f4:d5:
cf:0b:22:8a:48:6b:dd:5f:a5:20:5e:a4:81:65:aa:
80:01:a8:36:ef:64:5c:df:c0:d7:01:69:eb:a8:b5:
67:4c:49:9d:da:21:c0:7d:2b:b9:70:25:3a:40:6f:
ff:4f:06:8b:b4:35:09:32:3e:95:e5:47:96:a4:8a:
41:ec:75:05:60:9a:ff:d7:11:b0:33:c9:41:cd:10:
98:f6:ce:08:28:8e:f5:fc:e1:9c:9a:32:e2:0f:09:
ae:ca:a2:e2:44:f9:e6:52:a6:cd:50:49:29:39:a9:
f6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BC:FB:4D:03:38:E4:F4:46:76:93:18:6B:B7:4D:3B:84:D0:60:28
X509v3 Authority Key Identifier:
keyid:F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:3b:c6:6c:34:6a:81:57:a7:4a:ea:2a:34:32:91:2d:97:83:
b3:77:ed:10:cb:44:af:a4:b4:ac:8c:46:ed:f9:33:48:2d:b5:
28:7f:1e:ca:58:cc:bc:bc:8b:7f:cd:0e:9f:9f:47:44:71:a7:
76:2c:0e:64:6f:d9:31:7b:a3:a6:e3:fd:bb:d1:1d:72:d4:cd:
ec:0a:ca:43:f2:1e:97:3a:22:ef:cc:68:55:75:5a:8c:65:71:
a8:8f:55:4b:cf:a2:00:3c:35:33:b3:40:9a:ca:6f:f7:a2:90:
6e:84:45:92:49:5f:b7:7d:67:ed:cf:8e:f6:d4:83:66:a8:fe:
3d:89:48:f8:81:90:d9:9f:dd:1d:ac:0a:08:d9:a6:6c:00:66:
b5:55:70:73:b7:0c:2b:5c:e9:53:b6:32:5f:77:d4:cf:f9:f5:
a7:6c:42:24:96:d6:22:6b:f6:3d:92:97:42:27:fc:cb:92:a6:
d8:cb:b7:ef:09:86:87:58:c2:88:1b:a4:9c:92:36:b7:dc:3d:
e0:a8:91:89:09:3a:5a:29:05:20:ee:e3:6c:40:ca:a2:08:e8:
65:52:67:3b:51:a7:1c:cb:79:72:d1:71:02:e3:74:81:ae:f4:
11:21:d8:53:1c:99:80:e2:e3:7c:cb:4c:30:79:d4:12:36:b2:
d2:13:2c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:38 2025 by rpki-client