Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
File: mo9LAp4p7t8n1FzU05AQgya-JvA.mft (raw, json)
Hash identifier: kMfzhwuxNctJzrwlmG9w8SKCgaZ3WkJrazedNOBUAUE=
Subject key identifier: E1:16:FB:C5:87:5E:DE:4D:89:00:A3:1D:06:48:88:3B:DF:42:3D:83
Authority key identifier: 9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0
Certificate issuer: /CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
Certificate serial: 019A4DE1E3B46451E9470543A0CA1B8D4DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:40 +0000
Manifest this update: Tue 04 Nov 2025 08:00:40 +0000
Manifest next update: Wed 05 Nov 2025 08:00:40 +0000
Files and hashes: 1: Zw30iDu4jzobtmXOoRJnqyr607Y.roa (hash: 4CedzSiaWJKzH9a7MTqU1eCaCh1zeNHdX5Usa6vZk+8=)
2: mo9LAp4p7t8n1FzU05AQgya-JvA.crl (hash: E93WHG53gFp2raiAwa1xPnc4QFGU3W6ARJcZXad3AzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:e3:b4:64:51:e9:47:05:43:a0:ca:1b:8d:4d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
Validity
Not Before: Nov 4 08:00:40 2025 GMT
Not After : Nov 5 08:00:40 2025 GMT
Subject: CN=e116fbc5875ede4d8900a31d0648883bdf423d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a5:21:55:3f:65:05:0a:05:54:bb:c1:cc:65:
c3:df:ad:aa:85:30:3a:59:cd:da:5e:fe:92:79:14:
a6:95:63:da:ae:1e:5d:9d:56:4b:b5:79:a0:9e:1e:
65:c9:0d:25:32:38:2b:b0:2e:4c:0c:70:09:04:a0:
3b:0a:02:4b:53:62:11:02:61:9b:69:ee:6e:2f:88:
f7:f9:73:58:ab:b3:27:d3:c2:94:fe:0c:68:d3:3d:
96:8e:e1:88:69:0c:c5:01:0e:ad:37:a5:4f:1d:1c:
c2:ac:ad:16:51:48:28:45:c8:2b:d9:a9:32:66:f9:
a8:5a:41:dc:cd:2a:1b:97:e7:77:ee:32:7a:b2:c6:
e8:81:4d:b7:ae:6c:1b:dd:93:d7:91:8b:99:45:28:
e4:b5:d9:18:14:8c:dc:97:fb:69:29:b6:59:4a:48:
ef:9a:84:6a:fa:43:4e:94:01:e5:d6:00:36:5d:0f:
47:d8:f8:e2:cd:5b:0d:f0:81:4d:72:66:26:e1:84:
d3:c5:2f:84:d8:d0:f9:35:a7:c9:99:00:2b:b2:7a:
94:68:0f:ff:a8:b2:e3:c5:8c:69:0a:2f:19:60:6c:
e2:50:b6:1c:68:b9:d0:1d:65:7d:98:c0:3d:f3:ad:
9a:09:1d:61:34:d0:00:87:40:c5:0a:21:22:aa:24:
94:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:16:FB:C5:87:5E:DE:4D:89:00:A3:1D:06:48:88:3B:DF:42:3D:83
X509v3 Authority Key Identifier:
keyid:9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:70:ad:3e:ba:52:c2:80:da:c4:b6:bf:47:44:2f:7e:33:15:
08:27:0d:fc:02:6b:17:41:fe:21:cc:0b:67:e8:b0:0e:4d:1d:
70:60:4d:ae:f9:31:59:91:f4:38:bd:61:9f:69:a4:c1:d2:e5:
d8:cd:b6:aa:45:6c:78:87:6a:5b:2e:5c:f7:86:32:2c:1a:72:
b5:80:48:9d:cd:5c:78:9c:16:87:5a:9a:d4:96:b1:87:91:c0:
a0:32:b2:f5:43:cd:45:26:f5:4f:eb:4f:b4:fa:f2:50:ad:9b:
24:f0:2a:0a:45:e2:75:77:52:6e:ab:f9:59:ed:b2:25:8c:a3:
a8:b6:8b:85:cd:76:c5:b0:2d:c8:9c:79:8e:34:96:f1:a8:06:
6a:dc:35:24:f4:f5:52:63:b2:01:aa:f8:0e:6b:68:22:34:88:
8e:bd:1a:f4:b2:df:e7:ba:bf:a0:03:8e:7d:91:1f:9a:60:a8:
9b:a4:cc:e5:30:57:0a:3e:a4:80:cb:2c:b7:2b:18:c3:10:2f:
15:6f:3d:78:99:f9:7e:0e:71:02:b0:17:72:62:bc:d1:51:71:
dd:67:f8:14:04:14:e4:e1:fc:65:3b:a2:10:1c:50:ba:97:98:
b6:67:a4:1e:e6:9d:d2:09:13:2b:ca:b6:4c:27:f5:b1:7c:d8:
86:ec:6e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:53 2025 by rpki-client