Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
File: m-du9KpJjCFSTdftrRbeHT2wAuM.mft (raw, json)
Hash identifier: gnOe8gqt1qZKibdXOQ4s/NkV3iDLSiRvK0mdyF/7O8M=
Subject key identifier: E6:17:AF:B6:E2:E7:F2:A4:6F:F7:A4:DD:91:47:20:38:59:4A:C0:8C
Authority key identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
Certificate issuer: /CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Certificate serial: 019A4EF5036A2BEABE47403AC837F6CA0F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:11 +0000
Manifest this update: Tue 04 Nov 2025 13:01:11 +0000
Manifest next update: Wed 05 Nov 2025 13:01:11 +0000
Files and hashes: 1: HoDvxsQA4iXxpxVk1_co_JtvvPE.roa (hash: cWutlJOtBJ4KMx+ET4BMORGB6H9YK5+9Bn/1o272ZUM=)
2: m-du9KpJjCFSTdftrRbeHT2wAuM.crl (hash: J4EdFgWQYslOv8SnEjrUOuj7AnT8JoPIzu0NCUOp6XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:03:6a:2b:ea:be:47:40:3a:c8:37:f6:ca:0f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Validity
Not Before: Nov 4 13:01:11 2025 GMT
Not After : Nov 5 13:01:11 2025 GMT
Subject: CN=e617afb6e2e7f2a46ff7a4dd91472038594ac08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:94:22:3b:18:0d:fc:ae:8d:85:b6:92:30:1d:
1b:36:58:f4:9a:eb:3b:61:94:82:cc:01:0c:61:23:
3f:15:af:8a:6d:cd:58:74:06:d8:e6:72:5b:91:aa:
ed:43:b4:c8:56:e2:c9:35:58:19:00:32:b0:ed:e3:
8d:62:f8:6e:41:e7:46:d5:69:27:ee:de:78:ef:3c:
5c:9f:24:4f:d9:55:6d:60:53:08:64:f5:e4:e1:78:
5a:d4:1b:fd:00:8f:95:64:49:9a:c7:8e:ac:86:91:
8d:3f:ec:bd:91:09:fb:cc:c4:be:fc:64:cb:85:25:
48:47:7c:3e:4e:c1:f9:fa:21:e1:d5:ea:c2:c2:8a:
6d:be:28:d5:53:50:6d:4b:e6:37:1e:dd:d6:23:60:
d2:1a:9d:fd:d3:e2:af:ea:75:b7:a6:f3:8f:d5:88:
95:80:59:07:b4:9f:29:8d:27:3f:37:07:0b:7a:18:
ed:18:87:b9:ac:b5:a7:2d:e9:81:fb:52:df:e8:24:
8b:49:4f:a2:b4:f6:59:a8:a8:ad:35:b0:91:d2:90:
87:52:91:3b:69:db:6b:d1:be:ab:bd:34:fe:fc:95:
de:91:4f:4f:c7:6f:3e:bf:1e:6d:ee:37:99:41:2e:
2d:89:99:a9:48:fa:bf:5e:5d:0a:49:07:46:51:05:
c1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:17:AF:B6:E2:E7:F2:A4:6F:F7:A4:DD:91:47:20:38:59:4A:C0:8C
X509v3 Authority Key Identifier:
keyid:9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:53:be:a8:74:01:20:da:de:ff:91:89:bb:7b:25:6e:e4:47:
7c:be:34:cf:ea:39:b4:23:58:85:59:90:40:e5:64:84:11:d6:
23:53:99:f0:f9:33:b9:97:3f:79:bd:28:3f:65:42:cf:67:01:
4a:fe:12:7d:44:b2:22:56:7e:47:29:b9:7e:c6:fe:01:b6:be:
26:79:22:85:93:5e:20:df:35:b1:c9:5b:8a:c3:0e:0b:0a:99:
98:55:53:9b:77:b0:b5:30:fd:6a:2c:e6:48:bd:f7:20:32:70:
c7:70:f1:fb:87:3f:64:44:64:b6:90:70:dc:ff:3c:80:39:45:
01:fb:2e:9f:63:50:8c:b1:a7:73:54:41:97:70:63:94:ac:4a:
e5:0b:3c:e2:04:d4:eb:41:58:22:03:31:06:5e:ee:3c:f9:de:
7a:82:f7:9f:04:2b:2e:8a:99:d3:01:7e:4f:b7:fe:1e:1d:8f:
96:e5:26:37:ea:e7:7b:a0:a2:c1:6e:ff:dd:df:bc:43:3c:6b:
da:a4:44:f8:62:64:b3:f6:55:af:7b:fc:f4:15:ec:02:48:7b:
f5:10:d1:8b:9a:18:a0:31:b7:eb:e0:f5:0b:90:3f:9d:9f:bf:
f4:52:20:e2:c3:3b:38:c2:6c:cd:f2:6a:80:e6:6d:c7:f8:14:
71:4a:e9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:19 2025 by rpki-client