Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
File: m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft (raw, json)
Hash identifier: ejB/Dt6lF0zn8QsM8ugzOhWfCDlUff1KmOnqXfCJm7g=
Subject key identifier: 80:32:6A:B3:22:8B:BA:E0:D3:42:23:A9:A6:B1:19:F3:A6:82:E5:15
Authority key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
Certificate issuer: /CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Certificate serial: 019A4EF443F179D827C9AA7B06ECCD607BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:00:22 +0000
Manifest this update: Tue 04 Nov 2025 13:00:22 +0000
Manifest next update: Wed 05 Nov 2025 13:00:22 +0000
Files and hashes: 1: OiM9JuUPwUTx93F-WTm9SJAc1-E.roa (hash: U1Ux7NpyE3Jd/TFpdNZuyjTyOl5BfpF5UVtjtoD5dLc=)
2: S8dvvAfNFMFvLZJQtmEgT4xz-WM.roa (hash: jr3hzHwhC0clqyZ9qyCXuid3+6HUV82zq4hGikAgUEw=)
3: m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl (hash: ou0+AMRgOTz9d6RdRuTvCZWLcRNfbda4/43bJCs3TF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:43:f1:79:d8:27:c9:aa:7b:06:ec:cd:60:7b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Validity
Not Before: Nov 4 13:00:22 2025 GMT
Not After : Nov 5 13:00:22 2025 GMT
Subject: CN=80326ab3228bbae0d34223a9a6b119f3a682e515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:a8:86:44:a5:2b:4e:60:40:41:30:c9:f3:
36:e2:d6:14:9d:f1:50:d1:d3:24:e3:06:b9:c8:30:
b3:91:a2:d7:31:84:c5:be:e8:a7:e7:d9:0a:db:06:
f2:1b:8e:8b:25:ac:90:dc:3b:52:48:dc:70:ab:d2:
9b:75:2b:f0:c6:10:42:52:b1:9f:c5:64:38:9b:3f:
82:84:cc:32:c5:ee:c4:83:0f:15:02:e6:f1:f1:30:
41:46:81:06:e2:23:60:13:ba:02:9c:57:ed:98:77:
b1:b8:09:56:88:f9:c8:bd:91:c5:71:d0:15:89:3e:
76:b7:24:29:d4:3b:31:31:3f:af:60:3e:c1:67:de:
56:34:9a:79:29:88:62:ba:45:df:89:76:d8:da:59:
92:d4:08:8d:fa:76:90:7c:4f:51:fa:b1:11:b5:6d:
ea:b1:ff:ec:cc:f7:96:50:97:31:df:6d:a2:ce:dd:
29:b7:2f:13:46:00:fc:fa:af:6c:96:10:0a:0b:e5:
23:a9:f7:45:2b:d7:fe:b3:24:52:65:2e:b6:84:0f:
c4:95:79:e5:78:bc:53:75:1c:8c:59:22:35:f0:10:
2d:76:23:8b:a7:08:a3:be:6c:7c:1e:5f:6d:50:b7:
d3:3d:c3:5e:01:80:dc:ad:8c:ca:95:71:77:a5:4c:
81:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:32:6A:B3:22:8B:BA:E0:D3:42:23:A9:A6:B1:19:F3:A6:82:E5:15
X509v3 Authority Key Identifier:
keyid:9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ee:df:a3:98:87:c7:99:5b:62:f8:63:9f:28:c7:00:b2:8c:
da:77:33:d3:4d:d1:e0:bc:14:8e:fe:a4:96:76:81:74:bd:3e:
ce:43:61:bb:40:2e:46:1e:a4:4e:f7:46:0d:79:c5:8b:ea:d9:
f5:97:43:92:df:79:0f:aa:e3:90:c8:24:51:55:03:66:fe:44:
f9:7c:6e:42:e7:33:ae:36:c3:bd:fc:df:fa:4b:b9:56:45:0a:
af:df:e3:f9:14:87:ad:e9:19:2a:32:27:7e:15:f0:52:90:ca:
34:83:72:66:a7:ae:5b:e8:9e:73:20:83:4a:33:5f:88:4a:55:
ac:2d:9b:ad:ae:70:2f:54:24:7e:02:d9:4e:8e:bf:eb:42:a1:
13:96:33:e6:94:aa:b1:43:52:b6:d9:94:0d:b5:4b:27:3b:e3:
1a:c5:5e:53:7c:97:9d:59:aa:99:77:be:ff:88:90:d8:a0:62:
e2:e2:73:22:7a:fe:3a:8c:d7:64:61:b5:7d:d4:29:94:1d:35:
be:d5:ce:bf:51:10:76:6c:fa:a3:cf:a2:73:8a:a4:98:d9:44:
af:b2:1d:c0:64:91:76:e6:9b:41:0e:e2:eb:42:91:96:67:7d:
96:9f:e2:ec:0e:00:2a:5b:04:53:41:7c:b2:6a:ef:63:52:a7:
17:04:b5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:24:58 2025 by rpki-client