Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
File: 9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft (raw, json)
Hash identifier: Ema81KcZwBg9rc+Qv01lD81xk/nqqKjBgDWwCnj9D1Y=
Subject key identifier: 2D:6E:5D:19:2B:D9:39:10:B8:74:CB:B2:30:50:EB:AA:53:98:66:CE
Authority key identifier: F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
Certificate issuer: /CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Certificate serial: 019A541A7277F86DD5440BEB6AA7BF8EF864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 13:00:10 +0000
Manifest this update: Wed 05 Nov 2025 13:00:10 +0000
Manifest next update: Thu 06 Nov 2025 13:00:10 +0000
Files and hashes: 1: 9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl (hash: O6SfV61c49M0HB3Hpz6xuXB9SvA/Zy76SQ/cKBSGoZ0=)
2: LlgzLPbqvndzjINwUyqBSYNVUGU.roa (hash: XoxwnbkJ+YTYL7TqUKVjhOHoVLZf5ofK0CZEjvcyK/8=)
3: PGS1oZw9diLKm80xvba4ttY7lOY.roa (hash: cvoGOrBt83PsBex3WYE3oC8O/LqiWSgJX37kVGMXEQ8=)
4: a9e6waB73R-2gGYR6nbP9rwuh8I.roa (hash: 1oI2gE9eJeYPxxdSHWs9WVzpaBQMrNDfnP1js7RW/p4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:72:77:f8:6d:d5:44:0b:eb:6a:a7:bf:8e:f8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Validity
Not Before: Nov 5 13:00:10 2025 GMT
Not After : Nov 6 13:00:10 2025 GMT
Subject: CN=2d6e5d192bd93910b874cbb23050ebaa539866ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:76:5b:80:f2:0b:13:2b:0c:6e:1e:84:24:41:
ff:56:a3:19:8f:8d:73:82:92:71:0a:5f:7f:f1:3f:
7b:d8:24:0c:2e:25:cb:56:17:85:fb:bb:bd:25:49:
43:51:37:95:78:66:f5:57:27:17:db:09:6b:1b:67:
a5:a3:68:91:48:fd:78:77:82:76:ea:53:70:7e:a9:
c0:19:bd:a6:bc:59:46:f2:11:01:2c:0a:04:65:49:
f1:e4:af:ae:3b:2a:9c:b0:07:ef:b6:28:98:eb:56:
3f:b8:63:6f:2c:bf:06:79:0d:a2:46:36:53:db:f8:
71:b9:f0:0c:63:ec:c5:04:92:dd:75:55:b5:e6:36:
43:7c:36:25:68:1d:e2:ac:b2:ea:2b:4f:52:8a:04:
11:0b:38:49:ab:53:b2:bf:b6:e8:f9:86:8e:0c:d7:
e3:48:ba:a4:c7:84:13:a5:31:b2:fc:dc:7b:be:28:
df:3d:3d:4b:0c:d4:a8:ae:2c:e0:0b:40:5a:4c:48:
10:28:78:1b:46:7c:d6:e7:ab:20:6f:7a:07:60:be:
0f:c8:cc:23:76:c0:45:8d:e5:a2:cc:41:eb:95:aa:
55:20:85:1a:53:9e:1c:61:31:57:a5:8c:49:b5:c8:
d8:d6:0f:0e:19:5a:b9:b7:3e:3d:f5:be:15:7b:45:
46:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6E:5D:19:2B:D9:39:10:B8:74:CB:B2:30:50:EB:AA:53:98:66:CE
X509v3 Authority Key Identifier:
keyid:F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:02:30:fb:11:36:2f:39:d5:7d:9d:87:9c:24:51:8b:e8:0d:
34:1b:c9:4c:f2:fb:14:4c:8b:e0:1f:64:4c:7c:9b:ea:74:1d:
9b:5c:40:0d:5e:f7:c5:83:eb:e2:79:03:78:2b:fe:36:fa:5b:
74:1e:e7:9c:be:24:cc:96:2d:49:5a:db:8a:02:48:75:22:3a:
dc:20:fe:0a:8a:65:cd:f0:a3:37:dd:90:5c:32:3f:8b:b5:ac:
26:17:10:33:84:51:88:fe:1d:86:db:11:50:54:60:ed:95:a8:
c1:9f:48:fc:a7:53:14:ef:05:8f:5a:85:4d:22:5d:8e:8b:8a:
36:85:a6:fb:d2:4e:b2:a7:37:5f:8f:d1:53:c1:0e:44:7b:68:
29:e6:a9:26:25:ed:f3:f3:5f:37:9e:f1:4e:6b:34:d2:c7:2e:
d4:d7:1c:da:a5:83:fa:59:ef:64:00:1c:07:6f:82:f0:2f:f7:
9e:4c:e3:2d:4c:a4:23:fb:21:a2:fa:0a:2c:38:bd:79:7d:41:
f6:4d:c5:51:64:32:c7:fa:00:4a:53:48:f9:ab:70:1e:1e:a6:
15:c5:34:21:c5:76:a5:a6:7d:fe:37:4e:de:77:f6:dc:52:fa:
2e:88:f8:f8:01:f1:a8:7d:a9:fa:63:92:cc:10:d5:df:b8:51:
45:f5:db:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:50:16 2025 by rpki-client