Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
File: m9o0FBNxKfo4psYcSWq4thQJzgI.mft (raw, json)
Hash identifier: xAWJqvOdIu6JXwaW/Q5qjuslY33tnMiamQDEEmzpvMI=
Subject key identifier: 49:36:79:39:14:13:37:F4:DB:26:63:17:4A:E7:D0:47:4B:EE:0A:86
Authority key identifier: 9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
Certificate issuer: /CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Certificate serial: 019A4DE20685DE33B407EB8C3D53F4111059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 08:00:49 +0000
Manifest this update: Tue 04 Nov 2025 08:00:49 +0000
Manifest next update: Wed 05 Nov 2025 08:00:49 +0000
Files and hashes: 1: U6nb6DpUzJV_xi4UhiA5O3aKdZE.roa (hash: at4iy2FPtAChzVS5IZxWuVWW9v3c10T2DEm7KMEtSwY=)
2: m9o0FBNxKfo4psYcSWq4thQJzgI.crl (hash: 1po9ph3KiIRicGenZ9xfLT8IHRU8JQDhdkbV4LsEJb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:06:85:de:33:b4:07:eb:8c:3d:53:f4:11:10:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Validity
Not Before: Nov 4 08:00:49 2025 GMT
Not After : Nov 5 08:00:49 2025 GMT
Subject: CN=49367939141337f4db2663174ae7d0474bee0a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:45:f5:ba:c5:bd:6a:3d:e9:a5:ca:be:d9:
e5:db:b7:95:c1:cb:e3:fb:11:6a:9a:fa:ec:cb:e5:
82:d7:86:02:e9:a8:02:56:df:68:b1:2f:f3:c3:69:
3d:94:3d:ea:a6:3e:a6:6d:86:e7:ad:df:d8:81:7a:
bc:af:cf:6b:7d:c4:7c:8f:a1:f2:bb:b0:fe:b9:cc:
5d:3d:13:d9:5b:c1:bb:d0:d9:bc:d0:1f:86:46:6b:
52:69:7e:2d:92:1b:73:f2:d4:3e:ca:43:2e:85:dd:
f2:f1:65:bf:da:ab:b9:37:9d:f7:69:2a:0f:51:9c:
8b:94:ff:cc:79:3f:07:f3:05:ea:43:ed:37:48:1a:
9f:a4:31:69:73:42:6d:a9:80:27:06:c3:ae:a1:c8:
58:22:d5:8b:f2:d6:c3:54:b6:06:50:16:40:e4:32:
ec:6e:2b:71:9f:32:10:8c:5d:b5:ac:35:6f:6a:4b:
85:ef:92:a6:4f:fe:b0:38:86:88:ee:74:4b:f6:56:
c0:f5:71:bc:d6:b4:84:4a:0e:6b:76:0e:59:c1:9b:
bb:55:bb:b2:62:da:db:c3:44:70:c8:36:b6:47:19:
13:de:ea:78:a0:65:54:be:de:c9:fd:3f:26:f9:65:
4c:c3:d8:b4:0a:9a:43:2b:b0:fe:ef:46:de:f0:4d:
1f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:36:79:39:14:13:37:F4:DB:26:63:17:4A:E7:D0:47:4B:EE:0A:86
X509v3 Authority Key Identifier:
keyid:9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c2:36:dc:5a:3e:86:fc:a8:7b:ba:89:7b:37:5d:0f:58:76:
3f:e8:f4:e3:7e:41:f8:5d:0c:43:fa:96:52:1c:ef:9e:6e:23:
f8:fa:1f:2b:25:5b:37:b3:d9:da:26:c7:af:68:06:ea:b9:69:
92:bf:04:f9:7d:1d:ca:ad:69:24:01:76:f4:f7:8d:53:be:bd:
e5:56:60:a1:8d:2a:f9:1c:c8:08:aa:68:5d:f4:c8:6a:96:a8:
45:bc:2d:04:b0:9e:b8:42:2d:c5:85:a6:b6:7f:74:5c:cc:cc:
3d:9e:36:e5:a7:e3:22:c8:f9:e9:18:d9:bd:6f:34:d6:cd:f0:
a8:66:45:4d:85:c5:76:f4:19:e1:bd:f7:69:b1:08:cd:27:f8:
58:fa:89:a0:ab:d4:d1:83:77:65:ad:88:76:bb:64:be:5d:d6:
bc:66:67:1f:10:eb:51:5c:5e:f2:11:a0:71:5d:7f:7e:da:bc:
22:a2:8c:e0:fe:b4:b5:af:31:30:6c:cf:7e:f9:c7:34:b6:d6:
3d:8e:ef:3a:fc:c5:46:47:07:8a:a4:c6:87:15:63:27:1e:d6:
26:52:a7:1d:f0:70:84:33:4b:e7:d5:d4:78:04:91:5f:c5:2a:
59:9e:c8:a1:1d:d9:59:2e:41:ad:02:93:fa:29:54:41:83:49:
8d:84:4c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:19 2025 by rpki-client