Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
File: 9PerRYfmkCLl4rwkEHtQHQMcNyA.mft (raw, json)
Hash identifier: c/X8v+h0aTX0vsrO2/Dn6a2/KoD/YaQQBLe+Be0UyDA=
Subject key identifier: AD:23:EE:A4:C8:D7:8E:69:2E:E7:F5:0A:81:35:28:F8:17:64:BA:2F
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial: 019A4FD0A5D0E416759140234F9DB75A905F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 17:01:05 +0000
Manifest this update: Tue 04 Nov 2025 17:01:05 +0000
Manifest next update: Wed 05 Nov 2025 17:01:05 +0000
Files and hashes: 1: 9PerRYfmkCLl4rwkEHtQHQMcNyA.crl (hash: SA2b5UKhUE2QDzV86qyvMV47mKjge6HGr+HC9fS1GyM=)
2: HjzoahI6pyoFvP1ahRTakCdHZL4.roa (hash: gQHNv9As0iCn+ZAtcLVQ3zoAJ3Ne/2k5eR6SdkKMktQ=)
3: bH_KNyzPL_yx3OPEWTRFLsAi8nE.roa (hash: 72jCdlITtcwR18704/NTzfyeqmvwBsSw2iB9YQtGN+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:a5:d0:e4:16:75:91:40:23:4f:9d:b7:5a:90:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Validity
Not Before: Nov 4 17:01:05 2025 GMT
Not After : Nov 5 17:01:05 2025 GMT
Subject: CN=ad23eea4c8d78e692ee7f50a813528f81764ba2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c8:2c:9e:93:02:f4:cd:88:2f:35:26:b8:39:
c5:78:5f:fd:e1:01:68:ae:99:df:13:90:df:21:15:
5a:1c:c1:4b:15:e9:50:73:07:05:8a:88:fa:23:f1:
0b:a3:64:28:ee:e8:29:2c:79:e2:c4:2f:21:d6:53:
3c:ae:d1:35:5d:1a:0a:e3:93:5e:71:2a:db:06:57:
50:d9:e7:98:25:dc:f8:9c:6c:62:79:cc:08:58:ea:
a3:6a:c3:d0:f0:ef:70:47:43:72:21:ec:49:ec:24:
36:a2:22:c3:cf:cd:e8:23:56:10:64:fc:50:70:42:
e1:94:95:26:e8:38:1e:f9:c6:f1:1b:2a:52:93:c7:
8d:4c:9c:7d:28:3a:9a:81:58:d3:1b:ea:7f:64:a2:
1e:49:26:c6:11:3d:b6:e0:62:e1:ea:6c:73:cf:af:
4c:26:d0:da:a0:fd:70:98:d3:76:2b:af:24:9d:09:
d4:63:d5:4c:d2:dd:ed:e1:79:39:9c:a1:e9:4b:1c:
c3:67:36:31:70:ec:99:fb:41:58:c0:73:af:95:5c:
98:25:33:7e:b4:21:3c:6e:3c:85:af:05:3c:68:26:
fe:2d:40:8b:62:08:30:fa:20:2b:89:e4:8e:2e:16:
1a:dc:da:c2:77:c8:e5:81:81:b6:c1:44:b0:ab:52:
24:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:23:EE:A4:C8:D7:8E:69:2E:E7:F5:0A:81:35:28:F8:17:64:BA:2F
X509v3 Authority Key Identifier:
keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:45:b9:b3:e0:3d:44:02:3b:7d:91:a1:4c:d4:81:91:aa:ca:
ea:18:b8:4c:c1:a4:e6:55:6f:a0:12:e6:44:b3:14:f8:a8:18:
b7:ab:81:81:0b:8a:88:f8:84:e8:dd:b1:d8:73:69:aa:38:a3:
45:ec:4f:1f:1d:70:1b:eb:4e:9b:4f:4b:72:2f:4c:73:18:f9:
ae:df:16:17:ab:32:7c:3d:d6:e6:37:f6:b2:38:86:60:4d:55:
31:e2:32:36:d2:9f:04:7e:d4:b2:00:59:c3:78:91:6b:9f:b7:
6e:39:e3:76:7e:52:a2:36:6f:b9:54:2b:6c:44:10:d5:9d:68:
20:86:77:8d:63:72:26:72:e2:29:17:50:dc:e0:99:12:cd:b6:
66:c7:26:ba:64:22:1a:52:45:63:38:d9:80:57:dd:db:bd:8b:
fc:1e:54:93:bb:c3:22:42:cb:8c:48:db:52:f6:77:cf:50:06:
87:79:8c:51:35:d4:2b:98:57:a8:44:a2:32:fa:0b:a7:4b:e3:
31:f1:7d:1d:ce:9e:a4:a4:88:20:8f:19:82:89:54:9b:9f:c2:
8c:e4:3e:5a:20:22:41:ce:a6:67:70:70:ea:74:e3:bd:83:b4:
48:8f:c3:4b:18:89:a3:2b:ce:25:7e:fe:53:80:65:5a:1b:d8:
e0:8e:66:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:46:09 2025 by rpki-client