Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
File: 9JdnPHjvrl9r2AolrOPTw3GT54k.mft (raw, json)
Hash identifier: VXJ8t6e++zxDWjgjR/8R2L+0vkNW7xDvdNP+cH0vcSE=
Subject key identifier: B1:B4:85:91:19:51:70:FF:DC:CA:50:1B:AC:7B:0E:70:0E:F0:0C:53
Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
Certificate issuer: /CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Certificate serial: 019A51199FA72447E41D6D192E18219308FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 23:00:25 +0000
Manifest this update: Tue 04 Nov 2025 23:00:25 +0000
Manifest next update: Wed 05 Nov 2025 23:00:25 +0000
Files and hashes: 1: 9JdnPHjvrl9r2AolrOPTw3GT54k.crl (hash: kZ3cXFlgaf+VzgCRVAyb65wIvPlPtRNz4PyzUyUl0HI=)
2: EtJkvePPPWppk5nFnry3B6dGLBk.roa (hash: 7c42tElOeuBdoKmi4aSTV9LcX+EZc0MFBsv/1Jeuh8k=)
3: KYw5Kj_weN6Qm3KwiIVIrurQ0bc.roa (hash: EGFVxLdkIPiRC9X72BBMFwRMiHt1kYN13kO+xHp1ecQ=)
4: LttXh5eMv2jde6QYSngEubF_oow.roa (hash: Yan1EozpbgDCzFrwbK/bTYuqkgAj1nMSodRgwp+TLbk=)
5: d-0FuXxrgivXV_LPUKq93b_p0rk.roa (hash: IyU9YdBTUk2hBlGdTATB3ZTrCwmx/c6jIoibeyre6pQ=)
6: jlPcCTRsHvziUq2lkqlj4JDAVB4.roa (hash: WbQ2Xq5XOzyGj/4mNA7e9pYuBIwnNuiU8FsqrdgzPqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:9f:a7:24:47:e4:1d:6d:19:2e:18:21:93:08:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Validity
Not Before: Nov 4 23:00:25 2025 GMT
Not After : Nov 5 23:00:25 2025 GMT
Subject: CN=b1b48591195170ffdcca501bac7b0e700ef00c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:84:07:ac:4e:7b:f3:aa:54:c8:12:b5:0a:
a9:44:03:3d:83:00:48:93:33:68:60:ce:41:17:a7:
4f:a6:9e:a6:cf:6d:c4:88:eb:71:8f:52:48:28:40:
30:48:7b:8b:b7:fa:f3:4c:52:c0:ed:d5:1a:90:69:
a6:11:c0:94:07:20:95:71:09:27:cc:b5:91:87:52:
dd:11:d3:05:75:1d:11:d5:a5:d7:e0:1e:6f:ef:48:
0a:47:53:8f:4a:ac:21:83:3a:9e:fc:14:12:e2:8c:
05:da:65:c0:0a:8d:cc:50:50:f4:f8:1a:85:95:4f:
f6:78:a0:3a:2a:c3:3f:e9:ad:4f:81:e5:22:25:d9:
a0:fb:1c:24:a9:95:97:5d:d8:d2:15:5b:c9:32:61:
bd:14:04:5f:a3:41:c9:f7:51:ed:e5:56:65:c1:66:
0a:28:02:40:c3:dd:f0:0a:d5:20:48:7f:68:cf:c6:
24:a1:36:14:c8:3f:eb:29:c1:57:14:e1:b6:33:b6:
f8:4d:8e:c6:b8:39:6f:49:89:77:7e:f8:37:e4:28:
fc:7c:7f:4f:7d:65:e1:8a:2d:02:15:b4:61:04:10:
eb:6a:64:f8:ad:72:11:7a:35:f3:3f:64:5f:d7:21:
a6:b8:18:5a:39:1a:a4:ab:7c:30:40:44:58:2b:58:
a1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B4:85:91:19:51:70:FF:DC:CA:50:1B:AC:7B:0E:70:0E:F0:0C:53
X509v3 Authority Key Identifier:
keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:47:e4:37:e6:83:31:90:94:eb:e2:6b:db:76:e0:d1:9f:66:
20:3e:ef:42:bd:32:c8:1e:52:90:1e:30:89:f8:ea:a0:5b:72:
ff:92:ed:0d:53:78:0c:83:b5:09:b0:43:c8:05:fa:d1:b0:e0:
56:1a:ff:bb:1c:00:94:4d:53:2e:1f:2e:84:83:44:e5:77:51:
0e:e7:08:24:fb:b1:29:25:13:94:0e:3e:a5:5b:81:87:f4:23:
e8:2d:13:0f:b1:d8:89:7f:de:c0:cd:68:a7:08:d9:11:bd:06:
2f:89:48:13:97:d9:40:dd:52:b9:72:1f:fc:5a:40:f2:f1:13:
f1:c0:be:0f:49:84:22:0f:e8:25:bb:38:b3:d7:4a:70:9a:f4:
00:d9:68:30:02:23:34:7b:9f:bc:bf:66:e2:45:17:b6:84:88:
19:cf:e9:da:c6:28:6f:d5:43:76:b2:e0:0e:9f:a7:9d:ae:f7:
45:02:48:6e:13:91:a2:2b:5e:5f:eb:e4:d0:87:36:b0:83:12:
05:12:91:cd:20:88:99:78:35:42:58:44:e5:9f:66:d1:12:3c:
09:ef:2a:4d:6c:24:ff:0b:79:45:53:55:fc:aa:c0:5f:9a:0c:
c2:16:7d:7d:4c:3f:4c:a9:8d:40:13:33:1d:6e:ea:cd:41:ca:
6b:ac:ab:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:39:15 2025 by rpki-client