Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier: 6a4aPk5f6K1sXOWm+mMcj8tYUj+ZfFLHsKIYUzev8MM=
Subject key identifier: 30:F0:D4:95:53:2F:38:6F:45:DD:F4:FC:68:19:2D:88:95:F1:AD:00
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial: 019A5151054C223CC9197E86B7BE88109F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number: 0A77
Signing time: Wed 05 Nov 2025 00:00:55 +0000
Manifest this update: Wed 05 Nov 2025 00:00:55 +0000
Manifest next update: Thu 06 Nov 2025 00:00:55 +0000
Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: UkcTojV6IITr7Y+yCnIt3JRxidivbXYqXu6NqLjzXmA=)
2: vnQYA6POl1a8tK2ZzQU1CNh2rSU.roa (hash: cwo0eDB9nxSSyKe/qdMpdoKv9t3e96TKN+bq+LM4mpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:05:4c:22:3c:c9:19:7e:86:b7:be:88:10:9f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
Validity
Not Before: Nov 5 00:00:55 2025 GMT
Not After : Nov 6 00:00:55 2025 GMT
Subject: CN=30f0d495532f386f45ddf4fc68192d8895f1ad00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:f9:51:54:86:e7:9f:2a:b5:98:4f:c4:a2:
cb:d5:95:45:c4:7a:2c:34:0d:8c:5c:41:94:e3:0b:
92:55:59:70:5f:f2:5b:8e:19:d1:19:0d:24:32:51:
6e:c2:7c:ce:65:3a:25:0e:88:8c:c8:ef:d3:89:87:
97:f6:03:7a:73:db:89:f1:f5:08:35:b7:5e:79:fa:
2b:70:be:9d:df:c2:44:4d:15:c2:8e:7b:68:b9:26:
06:1e:43:3c:20:6c:96:59:18:12:95:24:b0:bd:68:
9c:31:7a:91:de:3c:a8:43:5c:1d:01:e8:a2:df:72:
f2:31:2e:e2:b5:bf:02:97:60:c2:d5:41:40:c4:21:
0d:ff:71:ff:c3:51:09:9d:6a:f6:1c:86:31:b9:e9:
10:19:6a:4b:ab:02:1f:30:e9:b0:2e:e0:f3:21:dd:
f2:be:71:a7:76:3b:ff:0c:2c:94:f6:d6:a2:9f:43:
75:d2:08:27:75:90:1b:41:80:a1:f5:fb:7d:2a:ac:
f4:48:f4:d9:8f:32:c5:b7:d3:a7:70:12:3d:d0:b3:
5b:1d:f1:8f:c4:98:0c:32:52:05:14:9d:f0:1e:17:
65:8a:86:ec:67:fd:9f:c9:9b:89:fd:bc:19:9e:fc:
f7:dd:87:e9:ca:be:d7:d3:72:5b:1f:4d:44:fe:6b:
39:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F0:D4:95:53:2F:38:6F:45:DD:F4:FC:68:19:2D:88:95:F1:AD:00
X509v3 Authority Key Identifier:
keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:95:a1:18:a4:2e:56:00:b9:42:ae:30:36:b6:1b:44:4b:39:
d9:9d:e9:d9:bb:7b:ee:d4:f5:18:03:d6:f4:31:b3:ef:89:23:
b5:28:2f:e0:cb:8d:f4:8b:9a:02:16:a9:3c:51:17:20:93:bf:
de:7f:59:f7:27:87:6e:80:98:e0:0b:4f:45:e4:6c:0a:49:1e:
75:89:fa:9e:82:f3:a0:4a:0f:be:cd:00:ac:4d:2e:3c:94:93:
ec:6e:b7:d2:57:86:3d:3f:40:fc:1b:2e:f1:4b:71:e6:34:59:
62:3c:54:fa:53:bc:23:61:69:8e:8b:5b:f3:d2:a3:1b:36:2d:
36:12:47:eb:77:9d:b4:0f:c3:ec:a4:ad:e9:e8:dd:69:bc:a1:
38:6e:07:0e:b3:fd:80:6b:8e:91:96:7d:59:b7:4f:be:81:94:
5e:c3:f6:db:fa:c4:47:eb:04:31:c6:d7:c7:88:b3:46:cb:97:
a8:49:33:c7:90:24:32:ef:23:f1:4f:97:9d:1f:f6:1f:3a:b3:
90:26:d0:56:bd:cf:c3:9c:5d:4b:13:8e:fc:5d:f9:3a:b3:85:
fd:da:7e:c2:1f:a4:ba:bf:b5:20:12:a0:39:7b:ed:29:73:a2:
4e:65:43:5e:4a:e2:30:d9:65:db:a8:65:0c:df:ae:37:64:8c:
dd:42:1b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:20:56 2025 by rpki-client