Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
File: 9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json)
Hash identifier: ekTR+0Errp1TqcjbqZY3pkjcLf5Y6pgvM6fHcNjgSCg=
Subject key identifier: 10:64:29:87:EE:D0:6C:56:95:AB:8F:51:77:65:C3:CF:0B:E0:36:03
Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
Certificate issuer: /CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Certificate serial: 019A70DC32093FFE465E354957F5911C78B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 03:01:10 +0000
Manifest this update: Tue 11 Nov 2025 03:01:10 +0000
Manifest next update: Wed 12 Nov 2025 03:01:10 +0000
Files and hashes: 1: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: ajKfXhUghwSzMO/qlUh0oGWD8wWNnJd1nB+3UkAlzMY=)
2: LF_3HwZmRrCki2d-FP5TfnY-Yfo.roa (hash: OqUUHUSkyKdGpgaBU1hHW7IYtyTJfajGz9ID3t644ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:32:09:3f:fe:46:5e:35:49:57:f5:91:1c:78:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Validity
Not Before: Nov 11 03:01:10 2025 GMT
Not After : Nov 12 03:01:10 2025 GMT
Subject: CN=10642987eed06c5695ab8f517765c3cf0be03603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ea:8e:4c:7f:d4:2b:6d:ce:4e:ca:59:b2:04:
09:8c:5d:7e:65:7d:9b:aa:e7:6a:0e:64:68:c7:cd:
d3:40:e9:71:aa:e8:52:76:7b:d9:ed:bf:b3:32:9f:
54:cd:18:3c:e2:84:2b:6b:bd:57:0f:69:8e:5c:d6:
1c:33:dc:59:06:e8:6f:bc:8a:5d:31:34:c7:c0:dc:
00:9d:97:e4:35:a5:3c:22:dc:21:0c:7f:dd:76:df:
a5:c9:f4:89:98:94:76:4b:6f:b0:5f:58:f0:0c:92:
89:54:81:b3:67:2e:d1:67:27:e4:7f:c5:28:89:27:
bc:d2:c1:79:d5:a8:06:ea:90:95:f1:6a:f5:78:50:
78:a3:86:7e:01:f2:e6:ed:9e:cc:41:8a:59:db:fb:
0a:ca:c3:03:55:be:2f:4a:9f:22:a7:26:dd:3d:25:
d4:a0:84:c7:da:00:9f:f4:84:c4:df:4f:59:38:f4:
aa:4b:af:9c:cf:48:3f:8d:aa:ae:b9:8d:69:2f:e4:
b7:ed:2b:2a:f1:0a:49:44:61:5c:0c:ab:ad:76:ea:
88:aa:a0:e8:58:97:6d:87:b0:59:be:a8:dc:5b:4a:
a2:1b:ef:f6:ae:d9:85:5d:6a:72:e3:d1:12:0c:b9:
05:9b:1e:bc:e0:89:f3:ac:c5:96:37:d2:7c:5d:05:
e0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:64:29:87:EE:D0:6C:56:95:AB:8F:51:77:65:C3:CF:0B:E0:36:03
X509v3 Authority Key Identifier:
keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1f:df:b6:fa:cd:7d:64:dc:3e:b3:65:bf:1e:ca:66:e0:d2:
3c:ca:ea:0d:12:15:64:36:c3:c3:66:54:b5:f7:ca:0b:b1:2a:
40:63:af:72:76:8a:44:53:be:76:e9:5b:f3:a8:17:d7:49:78:
b5:c7:ec:ba:48:3b:e8:a2:38:d9:98:9c:32:11:d0:18:f7:cc:
70:55:86:ff:a1:9d:94:ae:75:10:9d:7c:eb:fe:dc:92:af:0e:
b0:15:0e:1f:df:bc:8d:6c:32:e6:77:e5:c4:12:71:10:b5:83:
ed:75:ee:ec:b2:65:f4:b7:6b:e5:c7:e8:57:e1:a3:1a:d9:85:
70:4b:b1:8e:2e:d3:82:32:56:a4:b6:f2:e3:d3:72:b8:ce:6e:
63:bf:57:1b:e2:1f:44:e6:1e:63:5d:b5:8d:9e:65:8b:78:ba:
f6:dc:ae:21:10:e3:35:09:bf:dc:ba:90:06:b1:48:03:98:2d:
02:70:d5:28:1a:f1:23:33:a8:cd:2e:65:c0:cf:66:e6:d8:cc:
ee:c9:7b:d0:56:f9:f0:37:fd:d0:53:8e:2b:c7:69:c0:81:a9:
2f:41:03:3c:e9:9d:75:23:1e:07:58:24:c8:e7:c7:49:57:75:
83:59:8b:26:e3:4a:6c:f9:5e:aa:ee:5b:5e:1a:3e:48:81:d1:
5b:db:07:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:40 2025 by rpki-client