Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File: j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier: CFw3pmVi/6Vll5HYBOnIb6/P2YBxLmpJSOcFIGiG8xY=
Subject key identifier: 6D:D3:55:0D:8B:2D:C4:FA:92:F9:38:67:8C:89:44:43:DF:4B:ED:E9
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial: 019A4EF42079E11F6EC54D4C1C4058FBCEF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:00:13 +0000
Manifest this update: Tue 04 Nov 2025 13:00:13 +0000
Manifest next update: Wed 05 Nov 2025 13:00:13 +0000
Files and hashes: 1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: nsDrX8H5uZOxczR79W2xykJ9NrykzKiG3W283smgAgo=)
2: vckMl2OKOufIYLA6xJgut9gT3f0.roa (hash: onDVG2ZFT5wXt5G5Co8mfB4Yy/QhekuAbPP/p4mZSXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:20:79:e1:1f:6e:c5:4d:4c:1c:40:58:fb:ce:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Validity
Not Before: Nov 4 13:00:13 2025 GMT
Not After : Nov 5 13:00:13 2025 GMT
Subject: CN=6dd3550d8b2dc4fa92f938678c894443df4bede9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:00:cc:02:00:cb:f0:a6:fa:ce:d5:f9:fd:
e5:d5:54:08:1f:5d:8d:88:2c:c6:53:f9:43:5e:c4:
14:09:94:39:66:45:3f:b8:8d:98:f1:5d:a7:80:02:
44:0b:ea:26:da:65:f9:9d:c9:90:4f:41:48:45:e2:
6f:51:98:a8:ad:4d:75:62:9d:46:f4:89:3e:7c:bb:
68:cf:4b:63:68:15:65:12:41:bc:78:ee:08:76:ea:
75:bc:cc:4b:e4:d3:cf:e7:c1:ce:44:1c:bb:c0:94:
11:7b:b4:b8:7d:55:65:22:dc:fb:58:df:6e:67:44:
7f:31:c6:3f:b0:bd:34:6b:da:b0:0a:0a:fe:01:77:
7f:78:d2:03:ad:5c:ad:c4:df:13:ea:ea:cd:4c:49:
d6:f0:20:38:ac:ec:60:86:bb:bc:ab:42:83:f9:2c:
18:4c:66:f8:e2:13:34:fd:6b:96:3a:a5:b7:3b:9d:
30:9f:1e:db:75:1e:65:41:52:2f:cc:b2:98:26:5a:
27:72:2b:5a:f3:d5:2f:dd:9b:30:b0:a4:61:d0:fe:
a3:e0:37:44:b3:e0:7d:95:93:51:db:95:90:a0:61:
8f:cd:8b:c1:e9:f1:94:24:e4:fe:0c:ef:d6:e1:ac:
4b:3e:0d:73:7d:cd:2f:43:5b:e8:ca:e9:9c:b0:4c:
4d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D3:55:0D:8B:2D:C4:FA:92:F9:38:67:8C:89:44:43:DF:4B:ED:E9
X509v3 Authority Key Identifier:
keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:42:99:c8:60:b0:c9:07:1b:57:f9:a5:ce:dc:5b:10:6c:85:
75:c9:fa:7a:c2:3e:c1:64:87:7c:20:ec:5d:1e:9c:19:99:2e:
db:8e:8e:f8:3e:bd:a3:20:ca:48:c6:91:06:3f:a8:37:71:34:
ab:b9:04:0e:bc:48:7d:3a:1e:e7:f6:f5:43:9a:09:a4:54:29:
8f:fa:e9:89:8c:5b:ae:88:ad:af:d1:ab:a9:c8:f6:14:13:87:
a3:a2:6d:ad:39:59:28:3e:18:6f:cf:3b:91:e4:cc:06:72:da:
f7:dc:e1:90:02:50:57:42:2f:4e:4c:24:c0:8b:a4:95:0c:bf:
38:ec:9f:24:54:d7:04:a2:f1:13:7e:32:63:d4:18:b8:d9:5c:
0d:3b:5d:07:47:ea:0b:75:50:d6:56:ba:e6:f7:38:bb:f0:90:
46:e5:ea:18:00:bc:0a:68:dd:19:44:70:02:a4:4f:db:b2:29:
52:82:25:a4:20:8f:ca:f7:3f:5f:ce:5e:76:b6:8e:dc:5e:d3:
35:d0:6a:d9:0a:19:00:a1:b4:98:d4:cc:01:dd:26:ae:48:7d:
e7:4e:b2:08:e1:ca:15:95:21:c7:75:50:7f:fc:14:dd:71:a9:
fc:24:c5:ec:55:33:4e:1e:a5:14:15:39:be:da:4c:6e:3d:5e:
4d:03:fd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:32 2025 by rpki-client