Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
File: 9ghG8hxWqFE9McFV3RmRl6P_x8A.mft (raw, json)
Hash identifier: WadMfXVprKr6dK5QIzu0WGtYWnrc+69LwtDfuERAZg0=
Subject key identifier: 3F:DB:70:8A:F8:E6:56:F9:C2:36:9F:AE:8D:0E:4E:59:C6:C8:84:93
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial: 019A515080C9AE113921C5CC232812FE46AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
Manifest number: 171B
Signing time: Wed 05 Nov 2025 00:00:21 +0000
Manifest this update: Wed 05 Nov 2025 00:00:21 +0000
Manifest next update: Thu 06 Nov 2025 00:00:21 +0000
Files and hashes: 1: 094z1xKhD-fPImqcpq7FnS51L8I.roa (hash: QqZNaYuOPYVYXA7nnxP+E5LxcHL1hX5seeAAPJtn8rE=)
2: 5yZgLWjoqGWoHcvTB_31BRphqMg.roa (hash: mnmZiTADtsjplvnjg1DlrvtKGrz4jtZ2ePTtEqRNIiA=)
3: 98--VYzYQvmDhok_sN0s894_jjs.roa (hash: JLE5UUw9XB1alxl+jXRMMgX9sI3zDXH5yt96C0J6SNk=)
4: 9ghG8hxWqFE9McFV3RmRl6P_x8A.crl (hash: sKXls34UxIM9b15gYIzO1wR/nwzIUfR9/u3llvw6qLM=)
5: S1r5hqr0H_eG0pYFEYET1oPJyrU.roa (hash: AL2mRYe3QSk0eHBtZxwwGn0QyvUm0r2qBAzoPe+jc5Y=)
6: tDQppW28D00yJpPN76o5br9V4uc.roa (hash: QeZm1TlTQEFmZaDRdvYJJMWOrlvPWUXQvrMdVOrCdWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:80:c9:ae:11:39:21:c5:cc:23:28:12:fe:46:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Validity
Not Before: Nov 5 00:00:21 2025 GMT
Not After : Nov 6 00:00:21 2025 GMT
Subject: CN=3fdb708af8e656f9c2369fae8d0e4e59c6c88493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0d:8b:08:49:89:2f:cb:29:5b:79:72:29:3f:
7f:4a:3c:b3:68:30:cd:42:0b:67:3b:26:5c:91:5f:
2f:52:82:58:6e:2e:ef:a0:d8:d4:a8:87:83:70:ed:
e7:1d:67:60:0e:9f:08:c4:a7:7e:30:8c:8c:c8:32:
4a:f7:56:70:06:06:71:fb:fd:bf:5f:88:6c:1c:52:
b8:03:5b:6a:cf:53:15:23:c3:e2:82:c6:71:9e:c4:
3b:0e:9b:32:7c:4b:3a:42:a8:30:bf:1b:42:6d:fc:
65:3e:a9:32:4f:af:8e:d9:a4:bf:5c:4b:3f:c3:04:
a3:ca:0f:76:09:50:05:70:88:76:80:f0:98:46:b1:
65:b5:a4:64:5e:7a:62:39:ef:22:a0:16:84:ec:f5:
49:67:e9:e2:f1:2d:a8:5e:09:60:da:b1:f2:71:97:
2b:ce:55:9b:b3:3f:4a:c8:2f:ba:47:53:f0:cb:66:
c8:d1:31:98:52:46:da:43:80:b2:5c:fd:2b:29:6f:
a6:c6:0a:87:b6:1f:56:9e:97:3c:50:15:a5:e0:9b:
47:ce:5e:a5:5c:59:cd:bf:bb:33:d8:39:5c:d4:d4:
0a:86:66:e0:ee:fb:1d:0c:82:e7:5e:1d:40:d9:e7:
17:75:c2:b0:df:6f:19:e8:04:e7:9c:7e:bf:0b:15:
65:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DB:70:8A:F8:E6:56:F9:C2:36:9F:AE:8D:0E:4E:59:C6:C8:84:93
X509v3 Authority Key Identifier:
keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cd:f0:5d:cf:8e:73:46:eb:d3:7a:be:3a:10:86:44:b7:21:
5e:3c:28:9a:a1:c2:1c:e2:86:e6:4c:4f:73:9d:4e:3c:af:f5:
c0:e2:30:8f:1c:a9:b3:cf:77:18:a1:dd:29:12:00:2b:40:9a:
83:2c:b5:e9:90:8a:6e:3d:74:3d:f1:ae:c6:8e:bd:a4:36:62:
34:4c:f4:d3:44:8a:ab:bd:00:8f:bc:de:0f:b8:49:e5:f0:8a:
cd:82:7a:9c:9b:6e:fd:f9:61:2a:e9:50:79:39:4e:ee:f4:77:
e5:1b:c8:86:0d:0e:68:4a:e4:da:47:cc:bc:a7:80:b0:91:c4:
73:3e:0d:3f:d8:a8:0f:00:85:c3:a7:66:1c:81:c1:d0:56:c6:
ac:af:50:57:1d:7b:f5:22:a9:1a:ca:43:4f:4b:aa:cc:9c:ca:
12:59:bf:57:73:e5:c8:3c:28:e9:7d:29:0c:b7:8a:ef:f9:62:
07:1b:df:4a:db:32:fe:4a:99:0d:5e:4f:cc:15:75:1b:cc:23:
3e:56:58:6e:e5:e5:fc:16:38:32:d0:a5:0f:6a:e5:49:cd:3f:
e1:cd:b6:7e:5b:dc:42:5a:af:54:fe:af:78:ca:d8:11:f8:49:
9b:57:f2:bf:8a:a4:31:91:4c:95:ca:d5:f1:bc:5e:9a:f9:11:
36:68:73:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:42:07 2025 by rpki-client