Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
File: 9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json)
Hash identifier: Otduy3cTaATdZCIwmJ2/9oHBBSZtXWVW1gO/4BsHLWE=
Subject key identifier: 6D:4E:34:AE:A3:20:8B:21:FD:6C:07:35:FE:D8:B7:A5:2F:F4:37:F1
Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
Certificate issuer: /CN=f6a1722e8baddc358a15874265b466743e703656
Certificate serial: 019A7301CCD871F65B6D48945E2AF2E47579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 13:01:29 +0000
Manifest this update: Tue 11 Nov 2025 13:01:29 +0000
Manifest next update: Wed 12 Nov 2025 13:01:29 +0000
Files and hashes: 1: 3gQqwuDknMD1by1_10QyLFjqTSQ.roa (hash: 7rS6ATpFIQATm/1nB63KRTZ9v2IEBgVrsScfZWZHuYo=)
2: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: rorO87kQMDy9GUUuTz5sCoy50N8F5p+QVKgDy5r7jAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:cc:d8:71:f6:5b:6d:48:94:5e:2a:f2:e4:75:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a1722e8baddc358a15874265b466743e703656
Validity
Not Before: Nov 11 13:01:29 2025 GMT
Not After : Nov 12 13:01:29 2025 GMT
Subject: CN=6d4e34aea3208b21fd6c0735fed8b7a52ff437f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bc:13:de:74:fc:18:fd:68:a7:eb:0f:a1:ba:
1f:39:69:c2:3d:fc:f6:33:70:c4:26:81:00:2a:2c:
0c:6d:4f:b4:2f:00:69:ee:e6:58:df:94:27:9e:13:
a0:75:7e:cc:44:e5:c1:39:e9:93:75:e2:27:3d:5b:
05:2a:1e:54:09:b3:9f:17:49:9d:d7:6c:42:35:6e:
d1:93:55:a9:df:c5:b8:6b:7e:d4:aa:b0:e0:da:f6:
38:3a:e2:fa:19:78:bc:4d:ef:da:b2:ac:03:47:19:
90:55:dc:30:59:49:7e:39:91:69:43:df:d2:a9:af:
b7:93:3c:59:d7:d0:02:52:0f:95:7f:eb:e7:b3:07:
ab:9d:b1:15:c0:ec:57:fd:fc:53:09:7d:f2:78:36:
af:be:b1:46:b8:12:76:7c:01:02:f1:11:92:d2:b2:
69:71:72:66:c7:81:22:bb:1c:77:c2:f0:20:d9:43:
ad:a5:f6:d5:55:1e:47:05:74:2e:ea:bb:d6:1d:cc:
01:59:98:35:7d:74:d5:e5:1b:ba:c8:19:67:26:2f:
11:40:9f:25:fa:48:0b:ce:2b:70:4e:6d:cb:44:fe:
75:f2:5d:c2:47:1c:8a:30:27:b2:bf:0e:cc:2a:f0:
f6:1d:c7:cd:33:32:1f:5a:76:74:a4:f6:12:99:93:
37:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4E:34:AE:A3:20:8B:21:FD:6C:07:35:FE:D8:B7:A5:2F:F4:37:F1
X509v3 Authority Key Identifier:
keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:91:f5:e4:99:51:49:52:3b:8b:97:b8:37:47:9c:49:4e:ce:
94:fd:5d:03:90:64:2d:3e:c6:f5:c9:ba:f7:49:e7:92:43:be:
c7:f8:e6:b2:c7:64:97:8a:c5:60:88:a9:31:26:9e:75:12:c2:
e8:d7:0e:f5:a5:de:b5:dc:7d:fb:f9:2a:30:8b:d4:4e:3d:94:
30:ca:d5:f9:dd:c0:64:9a:69:88:31:ef:6e:93:64:08:6f:fc:
20:4c:3c:df:ca:81:94:c7:c0:63:94:a2:44:40:a7:30:d8:ee:
d2:7c:cb:e2:73:f4:09:1c:fa:7c:59:c9:7f:39:1e:5e:55:ed:
22:c8:6c:6d:7e:b8:b9:a3:a3:0f:6a:a1:d7:dc:2b:80:cb:88:
94:79:ed:ef:81:50:9d:82:f8:38:02:12:7a:24:06:25:d5:02:
18:ef:00:5c:cd:75:c4:32:2c:cc:dd:fe:e2:c9:28:01:be:03:
17:7c:eb:40:89:d6:1f:28:6d:34:dc:e7:81:7e:f5:78:c9:2d:
58:c8:3c:1a:70:ef:48:87:bc:52:63:80:15:c6:1b:91:66:ef:
c1:c8:8b:ff:d0:14:2d:ca:ec:1b:0d:46:27:20:90:50:81:66:
c0:71:82:d7:3f:f6:60:6c:68:8f:6f:ad:9f:37:73:b5:1d:f0:
77:f9:9d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:07 2025 by rpki-client