Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
File: 9UPqUocUidhqqcpcoMKXyIq4KrY.mft (raw, json)
Hash identifier: pd6sNvOZJiXgGYud4Rstr+PnaGVcuClSariRFTCdils=
Subject key identifier: EB:3D:22:E8:80:3C:DB:D1:A1:BB:A4:AE:3E:1D:2B:E8:37:3E:AF:3E
Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
Certificate issuer: /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Certificate serial: 019A722651FE0AACDC6A7D2B9EB06E35A88B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:01:45 +0000
Manifest this update: Tue 11 Nov 2025 09:01:45 +0000
Manifest next update: Wed 12 Nov 2025 09:01:45 +0000
Files and hashes: 1: 9UPqUocUidhqqcpcoMKXyIq4KrY.crl (hash: zUEi5eK1zbB7EQhJbNzWeasagcqqppt0/BF0S4KIxJk=)
2: FNrF4gJ9GeSqn1QNR00c9Q4ygYg.roa (hash: 2ncm1gP0ao8l2RvVLkDskRllvyDwCE2AZXVvFGp+UKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:51:fe:0a:ac:dc:6a:7d:2b:9e:b0:6e:35:a8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Validity
Not Before: Nov 11 09:01:45 2025 GMT
Not After : Nov 12 09:01:45 2025 GMT
Subject: CN=eb3d22e8803cdbd1a1bba4ae3e1d2be8373eaf3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:91:41:f8:c6:8e:f0:c2:47:76:03:5b:f5:
0a:59:b4:b8:99:27:8a:fa:95:17:d1:a5:45:c4:ab:
9b:ea:41:14:95:45:ff:63:c4:af:13:79:78:7e:1b:
80:c3:e6:b8:5d:6b:bb:49:c8:c9:de:f3:36:54:26:
7d:fd:f9:a4:d8:5d:4c:5f:63:a8:bb:d0:2b:4f:45:
31:2d:a7:70:b5:ea:b3:ef:64:4c:c2:6f:a5:68:0d:
96:c8:23:01:96:fd:15:d1:73:d1:65:09:04:05:d8:
ae:b1:5d:1d:4f:3c:d6:2c:1b:69:73:d7:2a:77:7b:
4c:43:45:39:44:1a:da:d7:43:25:09:f9:94:dc:fa:
83:7a:09:04:e8:69:10:00:82:f8:ed:cb:77:05:3a:
3b:ab:93:5a:02:ba:ab:cd:69:2a:42:15:b5:71:bf:
e9:45:8b:6a:a9:44:11:0f:88:07:53:a2:e4:47:c2:
2c:2d:71:96:73:7a:24:06:73:30:96:07:e8:5a:10:
5d:7c:c4:6c:e3:db:42:a7:55:de:c9:4b:a9:b2:e7:
07:98:bf:8c:cc:34:bd:78:b8:30:6c:bd:34:b9:18:
bf:27:57:81:8c:c6:21:ec:8f:d2:6d:0a:42:75:37:
53:2f:13:fa:ee:5d:56:b7:95:e6:60:77:56:b8:2a:
7b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3D:22:E8:80:3C:DB:D1:A1:BB:A4:AE:3E:1D:2B:E8:37:3E:AF:3E
X509v3 Authority Key Identifier:
keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:bf:ee:73:e1:af:56:06:8e:b0:7f:2e:da:28:6e:21:95:b2:
45:5f:4f:41:7f:c9:9c:6a:e2:9d:89:53:d3:ce:70:76:f9:f4:
2a:fa:4e:bc:b6:70:16:7a:8d:ad:eb:5c:4b:1d:a4:4e:f1:47:
16:25:a1:57:ee:d4:c6:af:3f:b7:58:2d:df:19:7b:48:18:76:
60:b2:7f:a9:0d:7b:05:dd:97:a7:ad:7e:20:d9:bf:ef:a0:2c:
b5:7b:d5:f0:81:05:8d:9e:2f:75:48:97:f0:b6:52:1c:77:a2:
59:08:e9:62:6c:c5:8c:9f:1d:cd:fb:95:87:77:1b:85:fe:df:
00:bb:9d:df:74:f5:7f:e6:78:2e:74:f6:2a:0b:17:6f:1a:01:
60:16:58:13:02:18:06:78:a3:0c:7c:c2:7d:f2:29:5f:ee:9b:
8d:8a:3d:26:6c:2c:21:8c:df:73:46:85:00:02:f0:b8:88:e9:
b3:fd:68:6d:ee:b2:83:51:87:23:db:f1:05:2e:6f:68:09:41:
3c:8f:d5:b3:c9:3d:66:45:75:04:d9:e3:d1:5e:53:c3:7f:6e:
6b:c1:a6:9a:73:76:f3:fb:9b:3f:2d:1d:f8:96:d3:cb:22:fc:
f9:61:1d:a8:68:44:84:33:4f:24:29:4e:8c:10:5a:20:1d:98:
9f:4c:0a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:11 2025 by rpki-client