Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
File: saC9QgWKA5D0Y8_rexfiHeC3VQA.mft (raw, json)
Hash identifier: kbo23zw0FJ2Ei6NfOIv2gkrXbnPjaujJ7l1PdhM93aU=
Subject key identifier: BF:48:DA:4E:0F:0F:35:5E:9A:41:14:A1:B9:D2:89:C4:B5:D8:EA:D6
Authority key identifier: B1:A0:BD:42:05:8A:03:90:F4:63:CF:EB:7B:17:E2:1D:E0:B7:55:00
Certificate issuer: /CN=b1a0bd42058a0390f463cfeb7b17e21de0b75500
Certificate serial: 019A4E86A0308653CCD3B8CED2E3EAB830C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:36 +0000
Manifest this update: Tue 04 Nov 2025 11:00:36 +0000
Manifest next update: Wed 05 Nov 2025 11:00:36 +0000
Files and hashes: 1: M5ygsUf6TUqUYI8FV2cjTiESBdE.roa (hash: inJMcRO+0HtRn269DlSaUq0NeeQUCkuMxbxILPu+WG8=)
2: saC9QgWKA5D0Y8_rexfiHeC3VQA.crl (hash: HnYU+cJVd6xvGnSopQx4k4b5BMhJCwMLdbmqZgwaAZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a0:30:86:53:cc:d3:b8:ce:d2:e3:ea:b8:30:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a0bd42058a0390f463cfeb7b17e21de0b75500
Validity
Not Before: Nov 4 11:00:36 2025 GMT
Not After : Nov 5 11:00:36 2025 GMT
Subject: CN=bf48da4e0f0f355e9a4114a1b9d289c4b5d8ead6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:38:90:c0:5c:0a:1a:ab:56:8e:63:39:14:3f:
76:53:a2:47:18:60:0e:d5:b8:e4:6e:6c:06:c4:55:
93:65:07:8e:ba:0e:a1:82:f5:91:0b:a6:8e:b5:60:
b0:27:53:01:1e:a1:aa:12:2a:c1:d2:d4:0e:68:de:
2e:aa:02:dc:40:97:c2:dc:76:3a:95:a5:26:5e:7e:
bc:cb:c7:6d:8f:98:f6:33:e7:b1:6b:d8:52:4a:50:
7a:7f:0c:38:a7:26:55:ea:c2:6f:09:05:b4:7c:5f:
cb:8f:31:0c:57:ed:3f:d9:36:a6:3b:64:cd:99:e2:
0f:6d:83:04:49:b5:6a:c4:b9:e1:96:ae:3b:3e:e6:
a1:6e:29:1d:dd:e1:8c:c8:6d:41:a3:47:c0:9b:c7:
48:c7:9f:05:4a:97:64:12:d0:72:d6:3b:34:78:6b:
49:46:43:9f:7d:b9:58:9a:ba:4f:55:b8:c6:9a:dc:
32:0f:d5:cb:ea:9f:57:8f:ff:9a:5b:3b:89:9d:e0:
d3:7e:a1:62:e7:11:61:f1:ce:62:c1:29:61:bf:90:
cd:a4:e0:a9:85:45:c0:43:91:35:e3:18:b7:fc:2a:
33:88:51:62:8c:be:90:cd:78:ba:ba:5f:0d:ff:1b:
38:5b:20:2c:c6:4f:98:68:57:64:52:0d:98:4e:35:
61:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:48:DA:4E:0F:0F:35:5E:9A:41:14:A1:B9:D2:89:C4:B5:D8:EA:D6
X509v3 Authority Key Identifier:
keyid:B1:A0:BD:42:05:8A:03:90:F4:63:CF:EB:7B:17:E2:1D:E0:B7:55:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3c:6a:a8:a5:2b:ec:af:bb:c9:d4:92:81:d4:58:32:41:45:
af:f3:4a:87:0e:61:fc:56:d6:d8:5b:ac:49:ed:94:8f:ed:64:
b0:a3:9c:b1:6a:8a:c2:87:22:e2:c7:81:7f:84:86:3d:75:11:
14:d1:2e:5c:69:3a:2d:ea:da:ee:d7:10:4a:97:d4:db:2e:5f:
3d:9a:3b:6c:ab:9e:b3:bc:68:e3:26:5b:71:39:b1:60:3d:6a:
3d:40:b8:95:58:ab:3c:67:09:53:42:00:cf:7a:7e:e9:be:b0:
b5:8e:3e:4c:ce:ba:83:9b:7d:08:d3:f4:aa:65:aa:6c:04:e5:
45:26:cf:d7:81:1f:8b:18:a3:59:a4:85:c5:ad:f3:45:1f:11:
f2:0b:e2:d0:db:d4:d5:14:37:4d:25:10:50:e0:ab:be:2a:63:
2e:58:1a:77:3e:d9:f4:f1:0c:43:86:bd:0e:6a:bb:23:01:fa:
f8:14:3b:68:d8:87:a8:a2:dd:00:dd:f9:08:0e:05:7d:41:15:
14:a5:a4:f0:cf:8e:d2:40:09:6d:48:77:6d:1c:ee:b4:5a:a3:
cd:ec:6b:a0:61:29:40:d4:9b:96:dc:52:a1:79:2d:01:b9:ce:
5a:19:42:f1:34:94:9b:61:6e:d5:7e:ba:02:ac:3d:25:09:4d:
9e:36:e6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:34:20 2025 by rpki-client