Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
File: pByW6THu5BuJnWLH24NjNEajxCs.mft (raw, json)
Hash identifier: p1MeLKRpKKUM5QbTvSVUlOz73GUI3MMTSxLm7c9r3zQ=
Subject key identifier: B9:B1:72:B7:5F:9E:84:D7:98:A9:2F:78:B0:D3:D0:F8:2F:8C:6A:7A
Authority key identifier: A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
Certificate issuer: /CN=a41c96e931eee41b899d62c7db83633446a3c42b
Certificate serial: 019A7225E7ACE529A61E603BFF16E3EE0DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:17 +0000
Manifest this update: Tue 11 Nov 2025 09:01:17 +0000
Manifest next update: Wed 12 Nov 2025 09:01:17 +0000
Files and hashes: 1: 9Y_dJTvHqJ6_O2HDQsdb4YPQOPM.roa (hash: C4dGnq5v0d5/X1v0Ow3x2iZJ1sOJLLWISEpoXWZpLas=)
2: pByW6THu5BuJnWLH24NjNEajxCs.crl (hash: 6wbhFL7VUqUv6+2zM9PJAlx8U/3EtkUFyIuIh4tKGr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e7:ac:e5:29:a6:1e:60:3b:ff:16:e3:ee:0d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41c96e931eee41b899d62c7db83633446a3c42b
Validity
Not Before: Nov 11 09:01:17 2025 GMT
Not After : Nov 12 09:01:17 2025 GMT
Subject: CN=b9b172b75f9e84d798a92f78b0d3d0f82f8c6a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a2:1a:64:8a:0e:17:90:d5:e7:8d:9c:b9:a8:
88:25:49:10:63:89:05:25:e5:33:ef:07:01:3e:9c:
f1:91:1e:77:ac:85:51:3c:10:53:a6:8b:24:e4:38:
db:51:25:2a:3d:1f:cf:23:cb:6b:53:3f:59:e7:e1:
f8:c3:62:1f:bf:1f:63:e5:e6:d4:9e:c1:c1:be:a6:
98:9e:fe:20:04:ef:d8:d0:77:87:19:13:42:62:46:
8a:43:05:6f:db:e0:d4:d2:0a:fd:b9:e6:2b:b9:6b:
2a:35:48:17:02:9c:99:30:43:bc:d8:04:62:d3:93:
1c:1a:12:93:4d:88:55:de:f5:a0:56:19:58:58:5a:
4f:4f:ac:98:17:78:15:f2:f2:2b:56:54:f5:b2:69:
43:ac:32:45:ab:71:c9:8c:e2:5a:a3:74:6d:86:27:
c3:c9:48:37:93:69:cb:80:30:9d:47:d1:8f:25:4f:
a9:d4:6e:95:a9:3a:69:eb:d1:29:90:5b:ca:8d:ca:
2d:89:14:d5:34:c9:b6:8a:68:f4:6f:ee:0d:d6:0a:
09:61:6c:f7:89:bd:65:f6:7a:ae:58:60:cc:12:68:
c9:26:2b:a8:39:14:c4:bc:a9:88:1f:f5:ba:9e:34:
69:9a:e9:ab:67:07:9c:a3:08:a6:8e:af:1d:16:26:
64:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B1:72:B7:5F:9E:84:D7:98:A9:2F:78:B0:D3:D0:F8:2F:8C:6A:7A
X509v3 Authority Key Identifier:
keyid:A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fe:51:5f:b2:f5:06:ab:f7:f1:8c:81:71:de:64:a6:4b:40:
bf:69:97:33:61:42:d9:36:82:97:b7:63:79:61:e1:ee:15:8c:
1c:b1:ee:7a:0f:08:cc:44:a1:02:59:31:e1:ce:0e:b0:2a:1e:
d8:3e:74:2b:27:56:b1:40:2a:14:9b:33:e1:91:f6:04:b7:52:
4a:f6:d9:d7:f2:fa:f1:1a:f2:90:79:e9:73:39:46:4b:88:3a:
63:e2:31:84:44:ad:92:17:c8:87:e3:78:18:f2:5c:d3:fe:cb:
f0:d8:8b:75:22:ae:52:52:d3:c1:ad:a0:53:47:db:95:a2:4e:
e4:f9:9e:d7:d8:3b:27:47:b7:98:be:96:e4:e4:e3:e5:4f:22:
cb:d1:a0:b5:ff:61:8b:73:ec:ae:09:79:f1:46:b9:b6:88:fc:
8f:23:5a:c1:0f:f6:21:25:4d:1d:e5:30:cc:f1:31:ff:78:68:
f3:5e:c1:31:0d:4e:24:1c:68:c5:14:8b:95:e7:b0:61:ba:3e:
90:3f:87:70:b5:c9:20:c3:02:a3:a2:f5:69:50:ca:54:ee:8d:
e1:d0:b8:bc:e9:5d:31:d3:50:ba:dd:43:d1:f9:dc:be:45:a6:
f9:e3:27:05:72:54:a0:2c:8d:2b:e9:f5:36:21:df:99:e4:e3:
a4:07:e6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:11 2025 by rpki-client