Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: zT/O/3wL0FG5qHb3oODZrBXEgaMLoCigC2E2aVOBbLw=
Subject key identifier: 6B:00:5B:36:20:79:8A:26:D4:91:B3:55:1E:38:78:4D:44:F7:DA:E8
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 019A4F62AA2E7387519AD3C861B04D915C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:00:57 +0000
Manifest this update: Tue 04 Nov 2025 15:00:57 +0000
Manifest next update: Wed 05 Nov 2025 15:00:57 +0000
Files and hashes: 1: 1-Rgkx9BsEfikK5eKOgyodd6h4gY.roa (hash: CT7Rp9+Jw7zWR3AQw89KWuUkHEx7Im+IKlsSdQ20Nq8=)
2: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: 0Wu5zhlwGchDzezn7sZW5LOT29ehtxt3kbNFg/sQ+zc=)
3: JOUMaPpHTLs0B4CR5_freWlNIso.roa (hash: lQdFlW5I+9SlK8gtAYGtz3jqfCmzmwfXYR3qnMqPbFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:aa:2e:73:87:51:9a:d3:c8:61:b0:4d:91:5c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Nov 4 15:00:57 2025 GMT
Not After : Nov 5 15:00:57 2025 GMT
Subject: CN=6b005b3620798a26d491b3551e38784d44f7dae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:4c:0f:f1:09:1b:99:d8:9f:ac:20:ac:27:
bd:a8:ff:16:76:10:73:2d:9e:6f:25:49:fa:c6:8e:
40:cd:dd:03:84:8a:c7:51:c1:77:48:c3:09:3d:05:
f8:d9:a2:ed:4e:d6:ac:81:a9:ea:73:bc:b0:bc:3e:
7c:67:15:00:69:d6:5b:24:6a:22:92:e5:ec:3d:03:
f2:b7:3b:fd:6b:ae:24:c6:47:8b:df:af:0d:04:85:
0f:40:e0:0b:b4:f9:fd:87:cb:b0:2e:b8:54:8e:34:
67:9e:1c:02:35:44:0e:a2:45:39:95:1c:db:1d:05:
16:f2:0d:c9:84:3d:58:5d:9c:ee:ca:96:d2:45:47:
42:64:67:ad:40:c0:0f:cd:88:1c:7f:0f:fe:ce:7d:
8f:b5:02:7e:7c:9e:c7:27:ab:01:68:70:52:40:a1:
ea:46:bd:9e:29:41:d7:4e:c3:d7:08:ba:dd:46:87:
48:c9:bc:1f:69:bd:7d:fc:33:92:19:d4:c5:5b:7e:
42:eb:7f:e9:ae:24:74:b0:0b:1c:b1:b9:4e:8a:35:
f5:18:75:db:3d:37:1f:b4:75:31:b1:dd:f1:37:46:
63:75:94:87:62:b5:ce:18:43:7e:d8:d6:ff:06:da:
0f:6d:11:ae:7b:7d:a2:2c:a8:56:55:f2:3d:e4:4f:
67:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:00:5B:36:20:79:8A:26:D4:91:B3:55:1E:38:78:4D:44:F7:DA:E8
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:3e:6f:70:0c:68:b3:93:61:3d:cf:4e:00:59:4b:fd:69:fe:
db:06:69:f5:4a:ce:5c:b8:50:33:6f:0a:8c:47:26:58:4d:5c:
dd:67:0d:95:a1:82:1e:c1:f3:f5:58:9f:60:df:33:d4:8a:c7:
25:bb:74:f8:b9:9f:f3:0c:79:e9:b2:56:ab:54:33:9f:df:c7:
0c:cf:c4:8c:d8:ca:37:9b:f1:d3:2f:bd:88:a7:2f:ac:9f:70:
57:8a:3f:69:6e:84:49:26:92:3c:40:c7:c4:fd:80:21:d8:3b:
e1:f4:6d:15:4f:46:06:db:28:8a:fa:52:0f:31:a9:ae:6a:11:
d6:87:da:10:8f:e0:a2:b5:40:a2:d0:ef:b5:40:87:ff:6a:9f:
f8:44:34:5a:c5:e4:ad:db:23:5c:30:da:5e:56:94:a6:ef:62:
c0:8c:a8:ce:7c:c1:e9:3f:ed:a8:15:1e:4a:98:ba:ad:ce:97:
0c:c2:b4:46:50:05:0d:f3:0d:50:5a:6f:bf:38:ef:b8:48:b0:
6f:df:08:8e:88:4b:fe:31:29:61:e8:eb:2b:1c:be:f9:1c:c1:
66:0b:ff:b8:3e:a1:0e:fd:ad:ce:44:46:ae:e3:6f:b0:85:e1:
af:70:14:f3:94:b5:99:72:32:21:32:c4:c6:43:8c:f4:5f:d7:
01:ce:24:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:49 2025 by rpki-client