Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
File: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft (raw, json)
Hash identifier: DdsAOydSt8MoWWCHKD6idRdtToUsN4CHp19LEX8NcXQ=
Subject key identifier: F5:90:9F:BE:97:3A:D8:27:1E:04:15:48:9A:A5:5B:72:3D:F2:B3:42
Authority key identifier: F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
Certificate issuer: /CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Certificate serial: 019A4D3D03C89754B4631DF934D44658128D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 05:00:35 +0000
Manifest this update: Tue 04 Nov 2025 05:00:35 +0000
Manifest next update: Wed 05 Nov 2025 05:00:35 +0000
Files and hashes: 1: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl (hash: Txr4DRvMzUlOvxeuRudwkLJQSx2yWXnHpmErjUfgQ14=)
2: bRo1FpRQdGW3rrEgf9LP2ZyYMbs.roa (hash: ZwgslFPNqU25lgzTk3XOIv2Nozx6fjcmPWKTGmYvfPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:03:c8:97:54:b4:63:1d:f9:34:d4:46:58:12:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Validity
Not Before: Nov 4 05:00:35 2025 GMT
Not After : Nov 5 05:00:35 2025 GMT
Subject: CN=f5909fbe973ad8271e0415489aa55b723df2b342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:3e:1b:80:70:8d:ce:a8:3b:17:0b:15:50:
ac:17:42:7f:f1:a6:70:20:f4:18:81:4d:f9:1d:d2:
e4:21:51:b9:d9:36:0f:85:ca:4d:c0:fa:8b:fc:9a:
d1:1e:65:39:54:c4:cd:2d:fb:d9:8f:bf:98:41:2c:
44:05:c7:35:96:0c:bf:39:ae:44:0c:3e:ae:5b:c7:
b8:69:50:c1:8c:10:13:ee:64:03:f9:fa:72:5c:f5:
87:5f:22:5c:6d:50:66:6b:cd:85:58:02:d7:5e:80:
08:04:e6:0a:c5:3c:de:61:06:cc:4e:80:b3:5c:24:
d0:fe:f8:9c:32:ae:b6:a0:ea:f9:fa:01:47:60:bd:
e9:89:fe:ed:ec:02:3c:ed:29:26:aa:ea:12:ff:f1:
e7:1a:34:3a:7a:7d:9a:15:8f:b1:c7:86:05:d6:fd:
46:37:b6:f4:63:de:92:58:eb:35:c0:70:b5:67:fa:
d9:08:e8:07:3c:cf:fc:fa:f2:eb:6b:67:28:4e:42:
61:a6:2f:63:0e:c8:15:e8:52:05:e0:8d:06:36:a3:
29:55:bd:7d:b2:d0:cf:5b:cd:c9:80:67:98:a6:40:
64:5b:24:75:ba:82:53:b4:ed:5c:19:54:2e:a6:ce:
14:0a:87:75:8a:60:7d:5c:d8:19:dc:69:a7:b0:23:
99:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:90:9F:BE:97:3A:D8:27:1E:04:15:48:9A:A5:5B:72:3D:F2:B3:42
X509v3 Authority Key Identifier:
keyid:F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:89:d4:7b:96:1e:5d:8f:30:a9:fd:97:d2:ca:f7:48:37:53:
53:8f:9e:a4:29:4b:40:1d:c1:d0:a9:a6:aa:0a:b6:b9:ca:51:
4a:f8:c3:05:4f:35:66:79:d0:36:8a:d9:b5:7d:6c:6d:94:8a:
1b:39:06:a6:46:ae:0f:2a:92:e7:b9:46:0b:16:9b:8f:31:f9:
34:de:f4:dd:b8:70:06:05:fe:65:a1:32:e1:b9:11:2a:59:b7:
1e:19:73:db:b7:9d:32:a1:06:30:20:26:72:b9:9a:b5:c2:f5:
30:0d:93:38:fd:8e:dd:4e:d6:0e:8d:35:d0:ab:28:bf:ae:ff:
b8:be:65:b1:3c:15:06:6c:52:7f:86:ce:57:e7:20:44:ca:4a:
9a:5b:a7:ae:18:fc:51:de:21:fc:90:da:ae:77:2e:43:52:e8:
aa:1c:b2:63:00:69:24:e2:a3:65:a5:1b:e7:49:ee:78:d5:81:
75:cd:21:3e:d1:58:21:97:96:19:c4:e4:43:52:69:90:d6:86:
36:57:a1:4f:d4:40:66:9a:30:6e:47:77:d5:b0:bd:86:8c:da:
4c:cd:71:d4:04:c2:58:d5:d3:5d:1a:76:30:aa:fe:4e:f5:d4:
61:bf:49:90:3a:33:3e:f6:73:fe:91:a9:ee:b3:c0:0d:8a:8e:
77:de:68:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:41 2025 by rpki-client