Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
File: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft (raw, json)
Hash identifier: /LaTQCH/VHGr8yZmeC02bEDZ5zSWVfJSDOu1++7BCmM=
Subject key identifier: 1B:85:F4:A2:2A:BC:E2:71:CA:83:4A:A1:93:EC:E4:3B:AB:81:EE:19
Authority key identifier: F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
Certificate issuer: /CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Certificate serial: 019A4E4FD4548EF7FF8F07191BC3F8E88ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
Manifest number: 1726
Signing time: Tue 04 Nov 2025 10:00:45 +0000
Manifest this update: Tue 04 Nov 2025 10:00:45 +0000
Manifest next update: Wed 05 Nov 2025 10:00:45 +0000
Files and hashes: 1: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl (hash: ecAA7Dncq7LinvAtjQNGeiJn8R+lPBAqfePQZkHTwtk=)
2: ROD80653_T-MkjTmqYTdP5M1LUg.roa (hash: lOnwVxDIfeJwEQvoT4QPCm3NmWmOEk6KMpexVgqv54Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:d4:54:8e:f7:ff:8f:07:19:1b:c3:f8:e8:8e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Validity
Not Before: Nov 4 10:00:45 2025 GMT
Not After : Nov 5 10:00:45 2025 GMT
Subject: CN=1b85f4a22abce271ca834aa193ece43bab81ee19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:4c:56:87:bc:00:93:65:2e:b8:72:52:d0:
0f:2f:05:27:13:1b:12:16:64:a7:ff:29:86:00:85:
36:e2:26:8c:e5:c1:d0:b0:df:f6:06:69:4b:6f:d7:
a8:96:74:34:2a:0a:0d:69:57:a7:ba:6f:62:41:f1:
ee:2b:b3:ef:5e:97:df:ea:c0:95:c5:13:22:e8:3d:
31:06:87:13:4e:31:8d:2b:da:52:e1:7b:66:1a:33:
0f:6c:50:71:80:f1:ee:99:13:fd:80:78:cf:fd:b3:
eb:e3:18:4a:bb:91:40:27:ee:82:a2:a6:f8:d1:52:
e6:ae:a6:5e:37:14:43:d2:39:f1:b0:f0:c7:2e:bb:
e7:11:94:27:1e:51:ff:46:92:f8:80:bf:58:6a:7f:
b3:48:fc:46:ac:b5:39:5f:cb:f8:f1:70:cb:2d:0e:
d5:6a:70:ca:06:00:8e:1c:f3:ba:62:74:18:99:d2:
b3:5d:f3:75:20:be:4d:94:48:16:c2:c4:36:06:3c:
aa:8c:f2:ff:d6:80:d5:af:9b:74:e8:89:a7:79:66:
c2:f8:db:9c:2d:0a:59:17:52:ae:57:d1:62:f1:6c:
1b:bd:d2:37:8b:42:0b:3c:23:f4:78:b7:87:47:c2:
9e:45:cd:d9:07:be:ef:35:f5:4e:c4:86:dc:c2:ec:
98:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:85:F4:A2:2A:BC:E2:71:CA:83:4A:A1:93:EC:E4:3B:AB:81:EE:19
X509v3 Authority Key Identifier:
keyid:F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:08:06:4a:af:9b:17:b3:ef:21:11:87:ad:5e:4f:c0:fe:36:
1e:fe:09:db:7b:32:b5:38:a8:ed:38:75:a7:22:9e:20:d7:e6:
a5:0c:09:4e:b3:42:77:b5:e8:9f:f8:0b:02:1a:a7:52:18:19:
30:3a:95:59:c6:30:8b:fc:b9:1b:d1:97:3d:87:c9:f3:35:c5:
7c:31:d3:14:a6:21:15:ad:17:c3:48:50:16:1c:a8:32:b0:51:
5f:ae:90:ce:03:bb:52:25:d9:6f:be:6f:cc:a9:48:a7:a4:06:
85:c4:05:f3:9c:80:5e:95:0d:79:d3:39:f6:3a:3c:5c:c6:04:
7a:30:73:a1:ea:ac:05:0f:1e:a8:c4:8f:79:b4:dd:f3:b5:a4:
41:53:58:44:92:b0:91:a4:eb:85:45:d0:9b:8c:d0:42:06:71:
a4:f8:e7:93:2f:47:3a:fd:82:2c:ff:9c:2c:ff:c7:95:a5:ca:
c9:43:28:6c:26:80:10:11:6d:7a:a9:fc:55:36:ef:61:43:ce:
3f:66:26:17:df:fb:5d:7c:2a:f2:24:de:e2:4b:7f:05:bd:6f:
b3:42:0c:25:44:a3:e8:7d:91:9a:08:17:74:fc:33:db:fa:3a:
bd:aa:6d:88:2c:b6:75:4b:f6:9a:31:2b:ba:a4:54:e9:bb:c3:
7c:b1:e1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:48 2025 by rpki-client