Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
File: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft (raw, json)
Hash identifier: G9FxSZYcc/lyxriHyk2Jr0LU8KemOfV6n8+FslHFy94=
Subject key identifier: CA:39:3F:4C:60:DC:59:38:00:93:2D:1F:4D:AD:84:4C:AA:30:AB:99
Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
Certificate issuer: /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Certificate serial: 019A4EF4864A01BB7B4629ED9311C39241FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:39 +0000
Manifest this update: Tue 04 Nov 2025 13:00:39 +0000
Manifest next update: Wed 05 Nov 2025 13:00:39 +0000
Files and hashes: 1: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl (hash: xx9PUgXL2kUQQvFMkN6bXNlHDnnEC+OsFQUlS3vpTFI=)
2: lsGbzxHmmLCraaV9m6GpjO-iIBA.roa (hash: Z6I8DbUnNuqgSWO6SRPbYw4EfdxPDhEpV2EFYvnSy8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:86:4a:01:bb:7b:46:29:ed:93:11:c3:92:41:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Validity
Not Before: Nov 4 13:00:39 2025 GMT
Not After : Nov 5 13:00:39 2025 GMT
Subject: CN=ca393f4c60dc593800932d1f4dad844caa30ab99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:8c:22:bb:aa:d4:b1:00:85:84:bb:e7:ad:
c6:b6:2a:c3:b3:f8:52:b7:e9:59:0f:38:35:74:25:
9e:3c:f6:83:ca:5a:a5:16:6c:7b:7e:df:e2:22:4e:
22:d5:0b:53:f1:43:fb:d6:13:10:07:a6:b8:c5:9f:
42:eb:59:47:f8:70:e1:ce:4f:08:df:f8:6e:20:a3:
fa:fd:bd:9e:fb:6e:21:00:6c:6b:a7:30:f3:a4:a0:
1d:23:c8:53:51:ed:a4:b3:da:9b:95:c6:3d:d4:48:
d3:39:96:01:02:d4:3a:2a:a2:1b:c9:d6:5b:2c:7a:
97:ef:39:53:19:38:f3:41:05:1a:ca:d8:f3:01:b3:
14:f4:5a:1b:e3:5d:4c:b8:d4:d8:3a:af:92:8e:56:
1c:9d:23:09:e1:ad:c0:7e:a2:25:ae:58:86:80:56:
0a:3a:0e:78:2a:03:16:31:7d:f3:fd:ad:0e:41:80:
73:eb:87:28:71:1d:d6:b0:8c:96:57:e4:a6:43:93:
6f:18:7b:1d:ee:dd:8c:4d:db:02:6f:c9:0d:ae:fc:
c0:a9:50:d9:7d:65:12:63:68:14:71:5a:5d:31:05:
2e:28:dd:5b:ca:87:96:27:71:47:8a:b4:6f:e1:f9:
f8:4b:ec:b1:8f:ac:6c:e9:c4:99:58:99:c7:0c:d3:
a5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:39:3F:4C:60:DC:59:38:00:93:2D:1F:4D:AD:84:4C:AA:30:AB:99
X509v3 Authority Key Identifier:
keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b1:75:52:f1:ce:c3:a8:10:49:75:69:05:ed:2b:91:f1:3c:
d7:a6:04:2a:59:49:b0:a9:b3:5a:46:ca:d2:69:34:02:f5:38:
de:f4:fe:ae:61:43:cf:90:08:32:78:ae:84:56:16:f6:5a:98:
9d:02:e1:5f:ac:a8:aa:fe:42:f4:f4:d4:b0:65:41:25:1a:98:
10:93:d1:72:7e:b2:6c:08:93:e0:9b:52:e0:69:6a:87:ab:f9:
1d:71:38:43:0c:bc:4a:48:45:8b:d0:57:37:20:0b:e9:dc:6f:
56:0d:8e:20:ba:fb:3b:0a:68:11:ba:c2:4c:d1:58:1b:88:17:
05:42:d8:07:70:3e:f2:12:37:49:ca:26:d8:09:b6:08:7b:63:
72:e0:35:bc:e3:de:ff:51:36:64:51:0c:d5:df:6b:77:e7:ea:
e4:19:78:cf:29:f5:d0:16:65:95:8e:84:7e:dd:8c:98:0f:b7:
eb:3c:77:41:3c:9d:54:5a:d2:32:3d:e8:1a:b9:80:88:34:5a:
0a:57:ce:7b:a4:74:68:11:af:75:f3:9a:49:72:cf:c1:92:18:
66:41:a8:fd:f5:ae:d3:fc:27:31:1f:0b:b7:09:ae:5c:44:49:
89:73:b7:f2:6c:6f:6a:bd:8e:93:da:8e:30:2b:4e:8a:42:1b:
bf:b0:83:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:46 2025 by rpki-client