Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
File: 1-9JdpktGOvOLRE_zcxGxVm31_LI.mft (raw, json)
Hash identifier: 418Sle63AejFv0AwNvgsmsEbizRdl35hdTEJYx6bhkI=
Subject key identifier: AD:F0:3F:DB:CA:8B:FA:03:94:39:0C:9C:08:4B:51:67:F5:4D:11:6A
Authority key identifier: FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
Certificate issuer: /CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Certificate serial: 019A4D3D3DB20289786DCFC0DACC977B5B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 05:00:50 +0000
Manifest this update: Tue 04 Nov 2025 05:00:50 +0000
Manifest next update: Wed 05 Nov 2025 05:00:50 +0000
Files and hashes: 1: 1-9JdpktGOvOLRE_zcxGxVm31_LI.crl (hash: 6QG9vKWfvaTQ/fD9npnopGQOqp12GilmJd4qXThYWcs=)
2: 3GvpHIxxSBOh_JH9oQawEJfN78g.roa (hash: m/cK1kN4KKcnsjbPKB2PXLCdGbbG3lcfoo431XMf3kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:3d:b2:02:89:78:6d:cf:c0:da:cc:97:7b:5b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Validity
Not Before: Nov 4 05:00:50 2025 GMT
Not After : Nov 5 05:00:50 2025 GMT
Subject: CN=adf03fdbca8bfa0394390c9c084b5167f54d116a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:f8:94:73:ea:19:63:27:9a:9f:c9:a1:56:
4d:1c:c0:93:1d:2e:7e:1c:dd:59:30:6d:2c:81:e4:
29:d2:a6:df:a7:c6:3f:21:8a:b8:bb:e6:a1:67:dc:
41:ec:0f:6d:2e:b0:60:f6:a5:1c:ea:70:f2:1e:b0:
f5:72:d0:50:47:9c:58:43:df:83:f7:98:1e:4c:d3:
fe:63:62:5f:06:bf:19:76:65:58:94:ed:48:0e:3a:
b6:8a:1d:47:1e:dd:a7:b0:1b:73:3e:7e:48:1f:98:
46:0f:6f:e7:30:71:fc:38:a8:c7:f4:94:01:05:aa:
02:e0:9b:ce:05:ec:13:fe:a5:58:c5:b7:a3:88:54:
5e:c7:91:25:ad:76:49:54:73:81:d6:7c:35:ea:ae:
e5:29:33:95:14:2a:19:9d:cc:70:a4:41:fd:52:c6:
8d:d7:9f:7d:01:f5:ee:b5:9f:8b:12:72:e2:5a:e6:
78:5f:20:1d:eb:65:9c:99:17:e0:23:41:00:28:bc:
ad:5b:7a:08:d9:c1:82:5e:43:b9:37:36:37:e5:4f:
d4:3e:d2:86:73:5c:8e:9f:12:57:23:c4:84:ff:1b:
44:66:b2:dc:c2:d4:2d:b9:ca:59:6d:11:f2:5d:00:
ca:30:c7:36:64:25:53:bb:2f:ff:ef:cf:c2:4b:ec:
e5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F0:3F:DB:CA:8B:FA:03:94:39:0C:9C:08:4B:51:67:F5:4D:11:6A
X509v3 Authority Key Identifier:
keyid:FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ec:d5:ae:d7:84:3e:19:c2:57:d2:21:26:56:72:d6:19:de:
52:51:1d:7c:0e:97:50:e2:23:e7:2f:26:b3:d4:8e:fb:17:9d:
d8:cb:e3:31:97:2f:4f:8b:bc:fc:19:46:5a:b7:8f:99:ee:e4:
9e:59:b6:0a:7d:30:9a:e7:a3:58:81:fe:7f:40:85:5c:63:77:
13:b4:80:e3:13:5c:47:85:53:a4:8f:bc:25:a6:7a:07:66:b1:
17:8d:8e:35:55:4c:13:97:4f:0d:ac:a3:44:56:7a:a2:c1:1f:
cb:92:96:b3:77:9e:b5:3d:00:99:53:81:22:12:f0:f5:3f:f7:
ba:1a:78:cf:5e:40:aa:67:5b:85:13:c2:2c:2d:7f:90:d9:ba:
26:32:69:8b:19:63:76:76:46:c9:1e:b2:d9:f6:86:40:62:85:
d7:50:41:3f:16:89:cc:7e:b7:01:d8:33:3e:96:6a:94:a2:02:
4d:be:de:5f:23:e6:84:8c:76:eb:8e:e5:38:36:1c:f1:e3:84:
99:58:f8:9e:25:fc:74:76:d3:65:0e:59:1c:c9:5f:2d:ec:7d:
5f:f3:7c:03:6d:6f:bf:2f:0e:08:07:0c:e5:6e:49:62:45:37:
89:64:21:a9:1d:87:ee:cb:20:87:c1:c9:27:64:ee:de:f6:f1:
2e:c9:e7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:40 2025 by rpki-client