Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
File: 1-cSsxnpLABNVenTs5mQfT5R1_y0.mft (raw, json)
Hash identifier: t44oYegn83TpX2ldCU5LNyGt3GRFTIAB2jEwY8EwovE=
Subject key identifier: 85:72:73:1E:F2:26:BE:B5:21:3D:5A:15:16:45:49:FB:16:E5:93:25
Authority key identifier: F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
Certificate issuer: /CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
Certificate serial: 019A72257B190A91AFB2851A4DEA3191EE0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:00:50 +0000
Manifest this update: Tue 11 Nov 2025 09:00:50 +0000
Manifest next update: Wed 12 Nov 2025 09:00:50 +0000
Files and hashes: 1: 1-cSsxnpLABNVenTs5mQfT5R1_y0.crl (hash: c0Dk83YnSGDinbd477dVQq4Dbu1u9rcvK0d+niErKOE=)
2: 9KxQR6j2axabNDMZ1-8dgcNiaM8.roa (hash: 2rUs2SoRDiW7TeHLXoH00fOWIiSClvCYzvEbW1LWNms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:7b:19:0a:91:af:b2:85:1a:4d:ea:31:91:ee:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
Validity
Not Before: Nov 11 09:00:50 2025 GMT
Not After : Nov 12 09:00:50 2025 GMT
Subject: CN=8572731ef226beb5213d5a15164549fb16e59325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:65:d7:de:8e:ac:37:68:5a:4c:e8:ca:f0:
af:e6:72:70:40:fd:9c:0b:97:bc:44:4a:d0:1f:d4:
49:48:e0:a7:a9:30:80:98:82:ff:ef:2e:5f:f4:ac:
40:00:91:0e:cc:58:1c:b4:7c:47:99:bd:ad:92:a8:
35:22:93:04:15:d2:ce:4a:eb:43:fc:23:69:06:6e:
5c:05:38:54:e1:92:5e:b2:37:06:91:b3:11:cb:58:
5d:52:52:8f:22:46:c0:33:1d:9e:18:ea:f4:6c:21:
09:6f:16:8a:87:e7:61:f7:f3:65:71:c7:a5:01:c9:
1f:c8:f2:19:48:9e:2c:c0:13:5a:1f:82:48:3a:5c:
fe:d7:ae:0c:ea:d9:41:37:dd:97:25:45:ef:d4:93:
e6:30:a4:67:39:75:49:e3:ee:f8:dc:35:17:5e:3b:
ae:dd:fa:b8:c5:4d:90:47:7a:32:61:d2:ba:8b:64:
3e:50:87:c8:59:7d:37:14:22:35:ab:4e:7f:9e:22:
20:26:f6:ba:80:48:95:da:b4:bb:f4:d9:9d:a6:b4:
88:72:57:b3:de:2e:31:9e:64:68:21:20:f0:2f:a4:
5e:46:28:7a:ff:7d:b5:b9:86:21:29:0a:03:fa:df:
b8:9e:8c:ea:e5:2b:39:f2:c9:5d:6e:14:c9:99:28:
24:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:72:73:1E:F2:26:BE:B5:21:3D:5A:15:16:45:49:FB:16:E5:93:25
X509v3 Authority Key Identifier:
keyid:F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d6:a3:ba:94:0e:d4:9a:2a:15:30:be:ba:0a:ad:43:6f:89:
c6:85:19:56:92:04:da:db:c6:4f:44:a0:62:2c:27:bc:f6:78:
ff:33:07:c1:f3:c0:fe:4e:c6:52:bc:4d:41:d6:1d:8c:6e:19:
98:a8:00:55:31:70:34:f8:7e:82:a2:c7:50:20:7e:ef:92:c9:
c7:8a:15:66:4b:fd:b9:a1:a3:eb:87:f2:81:76:53:9d:1f:35:
c6:3d:31:7b:62:aa:0b:91:e2:f8:75:87:15:ce:d1:61:4a:63:
20:ea:6a:90:d7:56:f5:17:12:5b:20:00:f7:a1:3c:2c:0e:01:
fb:f3:75:c8:fb:fa:8e:8f:c4:f9:1d:e7:06:f3:b5:76:a2:67:
b6:37:e5:21:52:e9:35:d2:e4:3a:45:01:fa:18:8d:0c:c3:1a:
13:55:42:4b:21:de:d2:d0:1f:1f:f1:8b:00:83:76:91:91:0c:
c1:90:ac:a2:39:b8:c1:6d:ef:7f:60:b2:ee:c6:d6:02:bb:80:
00:9d:93:d4:c8:6b:75:8a:85:26:78:37:88:5a:b2:5e:92:f7:
fd:13:14:fe:bd:02:34:1b:c8:c1:37:70:2f:bf:9a:33:63:04:
12:c6:e4:af:6d:cd:64:45:26:37:23:d2:c0:9d:73:a0:ee:41:
39:7a:ce:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:30 2025 by rpki-client