Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
File: 9bulXh8L-GE-qbu-KXooGzyDgYA.mft (raw, json)
Hash identifier: bOw4QOTW7VY33X42XociAd8MfBwtmekIAsVxIxB/cL4=
Subject key identifier: 96:E2:BF:E4:38:20:6B:37:BB:9B:A4:53:40:0B:E6:0F:6A:41:49:B2
Authority key identifier: F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
Certificate issuer: /CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Certificate serial: 019A4EF49A5AF7443A90662FFF0A84651B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:00:44 +0000
Manifest this update: Tue 04 Nov 2025 13:00:44 +0000
Manifest next update: Wed 05 Nov 2025 13:00:44 +0000
Files and hashes: 1: 9bulXh8L-GE-qbu-KXooGzyDgYA.crl (hash: LgTS0ZuO0Z+kppYzCTGyFcyEJ8men4A2WADPyOSpV8c=)
2: UKsojMJQKjwqEBjlQ0hvZzPL5fM.roa (hash: JwS6NOp3JTf4Gv4MdW3hpkLuh9j4F7ahSArR1W30tPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:9a:5a:f7:44:3a:90:66:2f:ff:0a:84:65:1b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Validity
Not Before: Nov 4 13:00:44 2025 GMT
Not After : Nov 5 13:00:44 2025 GMT
Subject: CN=96e2bfe438206b37bb9ba453400be60f6a4149b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:54:d7:1f:c8:af:a1:c9:2f:b6:21:54:28:
3c:a2:c3:94:f7:b2:d2:13:8a:67:3a:f6:83:3e:cb:
5e:eb:db:b5:07:35:5f:a8:6e:bf:8e:f3:37:3b:e5:
0c:55:0a:cf:c7:de:b6:e1:c9:3b:d0:78:66:69:b4:
e4:56:5c:76:6b:9f:39:ae:ef:dd:dc:82:4b:fd:98:
02:9b:1d:70:65:53:f0:7e:19:a8:35:e1:bb:4a:5d:
62:b8:58:9c:76:9f:e3:cd:b1:02:61:f5:7d:c6:9a:
48:e9:24:16:78:dc:04:74:c7:f3:fc:f1:a4:c7:d0:
38:71:9a:db:e0:db:e0:39:1f:fe:2e:9c:15:80:c4:
03:e2:08:b2:0e:0c:8a:e0:9a:68:45:76:3e:5c:cb:
e7:4f:65:48:73:4e:8a:09:d3:3a:0d:86:30:86:8b:
cc:c7:95:78:be:85:ae:5f:ce:7a:68:b9:9b:6a:c0:
d3:74:0a:33:59:32:49:ef:b8:02:61:ed:64:7c:9d:
d5:fa:3f:3d:fb:62:d6:4b:84:98:59:a6:d0:04:0b:
04:ef:17:c1:bd:a3:a1:d0:e8:0d:56:ee:55:74:c4:
a5:be:d2:5a:20:b6:e7:d6:ec:fa:a2:7a:96:b0:87:
fe:a8:8b:5d:16:98:b1:04:3f:33:4f:6d:90:a3:30:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E2:BF:E4:38:20:6B:37:BB:9B:A4:53:40:0B:E6:0F:6A:41:49:B2
X509v3 Authority Key Identifier:
keyid:F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ed:30:f5:56:6a:fd:15:fb:45:56:81:35:46:d5:46:30:cd:
da:42:dc:fc:ea:08:f7:de:3d:80:1a:df:c6:df:05:f1:a0:57:
90:11:a4:0a:ae:28:b2:3d:74:16:e3:77:66:2d:83:54:47:fa:
1f:f0:e0:d1:4b:17:8d:dd:25:b8:0d:00:f1:bb:2f:9c:68:37:
a5:77:a3:95:05:47:e2:60:d2:6c:d0:23:4a:b7:df:ff:a8:8a:
e9:6a:02:73:17:90:c2:0e:9a:d2:83:80:5c:2f:87:7a:45:5f:
ee:e5:40:d0:f5:57:d6:ed:7b:ca:9b:5f:78:01:f3:bb:72:cc:
43:a5:96:20:4d:b0:67:98:6f:20:e0:5c:b4:52:d4:91:0b:7e:
18:5c:c7:19:38:ac:70:7c:f3:b0:79:fb:40:d1:6b:89:e0:40:
16:7a:a3:76:a4:5e:81:5d:b1:09:5f:9d:91:1a:e1:52:2d:64:
83:41:29:a6:80:7d:69:5b:78:3e:27:22:21:df:e7:20:c4:fc:
80:3e:95:0f:ce:99:4c:0b:87:78:5b:dc:06:44:ef:84:13:98:
f4:a9:f3:10:1c:b5:fd:5a:27:40:2b:8a:b4:96:01:df:f5:5b:
ef:43:0e:43:34:22:6a:0e:df:f5:21:0f:b4:c5:9d:01:fc:20:
98:55:fa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:42 2025 by rpki-client