Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
File: p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json)
Hash identifier: 6P00hNXCq9mgWNch0/Y/JFBv8jUDGE+tB0ys/TjAWgc=
Subject key identifier: A5:0D:53:20:43:53:21:65:E2:BC:C7:49:A2:EF:56:CD:01:E6:C0:35
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 019A548855F3462FBCB0C94FE828C2B6DE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
Manifest number: 1717
Signing time: Wed 05 Nov 2025 15:00:12 +0000
Manifest this update: Wed 05 Nov 2025 15:00:12 +0000
Manifest next update: Thu 06 Nov 2025 15:00:12 +0000
Files and hashes: 1: 4kRsEvvYS9vLgzT9RvhH3Igjm9k.roa (hash: I03jyb6kvpeR9AlCu8KypQT8GWzh4/aSh4au4iyy8+I=)
2: DpBq14ju-sMiK3daEy8ixQQfVTk.roa (hash: i+DQu9MJOrZ5CdMAuj/sQPS/Zyr6reglqbrHWvbkyx4=)
3: DqUoj4sK_ahE1s2i6xM85mI1I6k.roa (hash: ghiG8Oanf8lruQ8GxgH5btsaEet/0QjBhkR1Sn2dFKg=)
4: Fnl-4WGHpZ5LXFARfr2ATzp8vLk.roa (hash: ux6nyEJd1cHyE1av/8nhZIQD47mVZkeQGG+DrMwKlok=)
5: QX-JX3Qu6B9dGH2bgHRHXCFQSGM.roa (hash: Libk/j+UTy/9cJUk+hwXMnFM9cOquglWjTlufdsoMkE=)
6: bDPZ2IR6ImcRHKaCKb1DFYZSPeU.roa (hash: C/oWZRw0Dl261ZToD4X2GP0Mb4nYzslAlII1IzygPX8=)
7: jG76lLUgQYaSZsB__7tXEnh7-_I.roa (hash: fSIH28hM1SyCenkx+Z6chI8MtQGu7VXq7U7d1upY0CQ=)
8: ma5oVolydUxkukW1x1dx0oRVMTk.roa (hash: vE8qPyFhzLzPBn/Dd5S1DZU12rMMyEbmBmsnKLuenBI=)
9: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: I4X8BPPzm0ig6x1+rSGkAcpOpnd2W1DyG61qaHm7nNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:88:55:f3:46:2f:bc:b0:c9:4f:e8:28:c2:b6:de:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Nov 5 15:00:12 2025 GMT
Not After : Nov 6 15:00:12 2025 GMT
Subject: CN=a50d532043532165e2bcc749a2ef56cd01e6c035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f2:65:bc:e1:55:cf:bb:8a:ea:f4:88:58:9b:
a0:14:f3:33:63:26:b1:6f:2e:39:02:3d:34:c2:ba:
15:f5:a8:1f:3a:77:c6:8d:b2:0a:c6:84:e1:dd:58:
0d:47:b6:05:8a:34:2d:99:f3:c0:fd:9b:3d:69:98:
5c:82:c1:1b:59:20:c6:22:49:86:4b:55:a3:fd:bc:
7b:17:81:e1:06:6c:57:6a:d0:36:c6:62:e9:75:e8:
f8:1c:5d:07:26:4b:ff:a2:72:d5:3a:a6:0d:4c:ee:
1d:ef:d4:12:5d:45:86:e0:7d:1f:e6:89:a6:61:bf:
b2:99:66:5f:26:a1:dd:f7:73:47:9f:4e:18:45:5a:
ac:de:6c:06:d8:7d:86:bf:1e:63:ae:84:c8:bd:f4:
18:cd:51:8c:9d:33:b0:60:45:4c:4d:27:32:30:f5:
ea:db:2c:9d:9f:9f:38:d7:46:14:b2:00:86:b4:a4:
b1:30:f7:f0:f3:b5:ab:14:62:8c:cd:5e:52:56:7e:
66:22:9d:3d:8c:76:d0:0b:60:09:96:71:10:6f:a4:
a0:d9:96:80:bc:2e:21:de:61:ac:94:53:12:f6:19:
d3:0a:4b:cd:47:99:9d:a7:9a:14:f7:97:1b:c4:f5:
fa:f9:18:f3:71:8a:42:1e:68:2c:76:61:eb:f5:aa:
54:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0D:53:20:43:53:21:65:E2:BC:C7:49:A2:EF:56:CD:01:E6:C0:35
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0d:52:25:81:a4:45:04:e2:6f:87:e1:e7:77:fa:cd:df:0b:
d3:e4:c1:10:cb:29:54:02:78:84:a9:c8:4a:a4:17:40:50:b9:
6d:5a:06:bd:b8:53:c5:0f:91:d9:4c:17:e1:18:ec:ce:b0:32:
20:87:b3:5f:17:0d:75:c8:a1:4f:b2:8f:8b:f6:0f:6d:86:ef:
09:d7:54:c1:45:5e:64:46:ba:eb:cb:7e:83:87:c4:5b:b0:20:
da:41:bb:52:48:61:6f:1c:d1:77:89:7d:d5:ec:2b:0d:7a:2f:
df:88:f3:ef:3d:5b:aa:43:f5:f2:a0:bf:91:c8:fb:74:bd:73:
80:27:3c:46:6d:57:1f:7b:13:24:04:9a:e4:d4:86:5f:8a:82:
05:ef:fa:af:f9:73:88:18:6b:49:66:61:e2:06:d0:19:78:24:
80:02:0c:43:8d:1e:1b:34:fa:8a:77:9c:fc:23:d7:65:b2:e3:
4b:70:9d:04:d0:d5:1c:e7:b4:34:a3:7c:77:0e:8c:e2:d7:aa:
62:88:b5:22:f5:a7:27:8c:76:df:ac:62:55:31:64:a7:b8:1d:
8a:f5:98:e1:73:92:c0:ce:57:7f:5f:4d:65:81:d5:f2:0a:71:
05:ff:77:70:db:54:0c:85:68:f7:f8:a9:bf:22:41:0e:f9:07:
db:b2:35:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:50:34 2025 by rpki-client