Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
File: B9dTNfd79CQJdid7HdDhm7I6jh0.mft (raw, json)
Hash identifier: 6ozTPQaYJ1CuMYqROo6NPtzSZeFrfeQig3/lxCC8lYM=
Subject key identifier: AD:55:42:D4:25:D8:7E:7E:BB:50:18:C0:2C:8E:3D:FF:31:91:F6:46
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Certificate issuer: /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial: 019A484D5E88A966B26B4DE27561C0A5E609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
Manifest number: 170D
Signing time: Mon 03 Nov 2025 06:00:21 +0000
Manifest this update: Mon 03 Nov 2025 06:00:21 +0000
Manifest next update: Tue 04 Nov 2025 06:00:21 +0000
Files and hashes: 1: B9dTNfd79CQJdid7HdDhm7I6jh0.crl (hash: QtgX3ZWUJDkmv+6E3ntGyelkrhsoYTdSrPu0GEy0mVE=)
2: f3raIBer4Wbe3buOh8JkfhD4mEA.roa (hash: B9RYB76x05XWJNka7NBoycDREl2ucTVGVKrV+eIK26g=)
3: hfYnlizg3MwR5qQug8OaGFYUftA.roa (hash: DTFlk5aAr3e9+sYI7V08QHNOE3ZymaaIt731TRyJnHQ=)
4: tBNDimUXEukADWJF9dJCQTAu8Xs.roa (hash: xy9pbAco54L3WlU6x7baSUsepcCgwp7AyR8Cg3prULc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:48:4d:5e:88:a9:66:b2:6b:4d:e2:75:61:c0:a5:e6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Validity
Not Before: Nov 3 06:00:21 2025 GMT
Not After : Nov 4 06:00:21 2025 GMT
Subject: CN=ad5542d425d87e7ebb5018c02c8e3dff3191f646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:2f:c8:be:b6:f9:3c:1f:7f:df:3e:a3:39:
f0:c6:62:f2:53:04:97:e8:4b:b7:d8:75:26:70:bb:
53:d4:4d:ce:d5:56:63:33:ce:79:a4:f1:b3:9d:00:
7f:87:03:01:5a:59:0e:0b:8d:9d:1a:7d:6c:54:e2:
f4:ac:b0:40:b3:cd:34:5d:36:9e:33:21:83:8d:9d:
64:42:fb:3a:c1:9e:8a:a9:c4:e2:d1:aa:70:f1:3a:
be:db:41:e3:03:bb:f0:71:67:76:ec:b0:69:a7:64:
cc:da:c4:82:b1:9c:71:a8:f5:86:3d:59:2a:37:a7:
c4:ff:04:bc:87:68:3f:88:99:1d:05:5d:48:42:19:
6d:73:d0:a9:e1:a0:76:d1:e6:c4:88:19:43:7c:fc:
a7:96:9e:b6:a6:18:35:91:78:81:89:6c:26:12:7f:
91:a6:b7:7c:b0:41:69:63:6b:06:b8:4d:83:23:ef:
27:4c:4a:fa:fc:31:b1:5f:d1:57:29:9c:a6:4f:7a:
a9:c2:8f:a7:9f:27:ff:fc:8d:85:75:5d:dc:7c:52:
6f:d8:e7:c3:0e:b6:fe:6a:74:67:f2:9d:a5:9e:cf:
61:bf:2d:d7:13:0b:1b:ff:2a:2d:a1:35:34:55:2c:
1e:71:b2:f7:80:35:46:0a:28:a1:67:b8:24:b9:bb:
1c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:55:42:D4:25:D8:7E:7E:BB:50:18:C0:2C:8E:3D:FF:31:91:F6:46
X509v3 Authority Key Identifier:
keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d4:91:97:1a:d5:31:75:1c:86:1a:11:0a:8e:86:4b:96:fd:
a5:63:16:aa:03:3b:4e:f4:62:5a:96:8c:e1:dd:e5:f9:ee:a0:
11:c9:51:2f:2e:60:9c:d6:91:8f:04:0a:78:7e:8c:db:30:36:
a4:20:3d:07:b5:62:87:62:3e:21:d0:c3:6d:ff:0a:58:79:89:
c6:9d:d0:62:cd:cb:e6:b7:6d:65:32:da:09:4d:d6:44:e1:99:
7c:d4:e8:da:01:41:d8:0f:8e:8e:8e:67:23:6b:dd:02:e7:dd:
7b:f1:2f:0d:6b:cf:59:a1:41:93:71:97:03:7c:12:c2:c3:0f:
df:cb:66:a1:c4:e0:8f:bf:ee:bf:5e:a6:cc:2f:62:58:7d:6c:
e1:60:f9:87:28:d3:64:37:58:f5:3d:34:fb:66:68:b2:b2:39:
72:f3:0e:78:41:98:9d:9f:81:7e:42:bb:87:d9:26:7f:3d:b9:
17:ae:d8:c2:8a:bb:d5:ed:16:c0:5c:7a:54:92:7b:e5:d3:f3:
cd:9a:f5:4c:32:fe:60:e5:a8:9c:70:ec:f6:6f:0c:4a:be:bd:
01:bd:1c:e8:87:eb:a6:04:e4:2d:3d:6e:39:20:21:06:fe:79:
30:50:d1:df:ca:6e:14:87:00:63:4e:9a:4e:f4:32:35:64:16:
66:a5:3f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 14:57:38 2025 by rpki-client