Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
File: 9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft (raw, json)
Hash identifier: GIidS05ZM919b7Trnvmv271OczqSm/KwRHufwEzaqgc=
Subject key identifier: 4A:3A:9A:6A:DC:3C:E0:CA:99:FA:F8:8F:96:A7:82:B6:97:E7:10:6B
Authority key identifier: F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8
Certificate issuer: /CN=f6f18c02405742c25377d696cd2a69dcc974bff8
Certificate serial: 019A4EF582617BA5639539EC0413CB085434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:01:43 +0000
Manifest this update: Tue 04 Nov 2025 13:01:43 +0000
Manifest next update: Wed 05 Nov 2025 13:01:43 +0000
Files and hashes: 1: 6Rwi5WxIjLb63K0eJqe1EvEuxDc.roa (hash: r7Wc6Mt/nHycECkDV3tNY4uy3f9xC1QAnYnLvp1ogpU=)
2: 9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl (hash: QHCWue5/cR5FG1fn9mujDV8IGwhuBxw7fo6xIzCyrm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:82:61:7b:a5:63:95:39:ec:04:13:cb:08:54:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f18c02405742c25377d696cd2a69dcc974bff8
Validity
Not Before: Nov 4 13:01:43 2025 GMT
Not After : Nov 5 13:01:43 2025 GMT
Subject: CN=4a3a9a6adc3ce0ca99faf88f96a782b697e7106b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e6:98:52:c5:97:e4:55:ef:8a:f9:cd:19:38:
22:37:0f:0e:42:d9:09:5a:ec:c2:50:dd:a6:d2:50:
3f:50:77:3b:cd:31:4c:eb:3a:23:6e:2c:7e:f0:13:
9c:5f:68:ca:42:98:cf:b6:df:63:f9:27:90:bd:02:
70:aa:c7:fe:c5:02:98:2e:c2:d1:19:d8:4e:17:32:
58:8d:6b:31:c8:8c:be:d5:e5:e6:44:46:05:f1:e5:
df:d2:42:e9:9a:e6:d9:5a:ef:14:36:52:ad:e3:29:
a8:d0:63:57:a5:ce:a4:ff:8d:80:92:2a:ec:aa:45:
dc:e6:50:d2:f2:1d:0a:43:5e:31:36:e4:b9:b8:2f:
e3:39:7e:51:24:27:5e:a0:9c:d4:09:76:46:14:d3:
f0:55:5c:da:02:a5:01:01:86:ad:20:0f:43:e9:12:
f3:17:82:2a:92:25:67:c4:30:32:fc:6e:84:da:c9:
07:4a:f3:12:1f:9b:57:55:44:06:10:82:cd:96:a8:
c4:f3:1f:4f:f7:ef:34:f8:19:9d:7f:a0:26:87:6e:
7d:09:22:58:87:af:83:0b:d2:84:77:f2:8d:56:91:
a1:5b:b4:e0:2d:ca:95:09:08:5b:06:5e:cf:2c:b5:
a2:e2:7f:8f:6d:a2:38:33:7a:ef:0e:e6:6f:55:a6:
a6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3A:9A:6A:DC:3C:E0:CA:99:FA:F8:8F:96:A7:82:B6:97:E7:10:6B
X509v3 Authority Key Identifier:
keyid:F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:23:c8:4a:06:aa:af:3a:62:69:39:76:7a:86:37:27:54:f8:
90:4a:ef:89:a5:32:e0:c4:c2:44:18:e2:08:18:47:df:2b:71:
88:a3:75:6f:0e:36:95:39:26:6a:2b:f6:0d:13:2e:f5:40:bb:
6c:03:72:44:01:b3:8b:0d:18:9b:2f:30:1d:74:d0:b5:90:d1:
a2:13:66:e5:fd:34:7d:9e:52:8a:d2:14:b7:16:8d:10:e6:19:
7d:24:7f:2e:13:03:eb:08:0d:16:cb:d6:13:6b:60:bb:52:ec:
32:8e:40:73:73:21:87:0e:b5:7d:2d:ed:09:bf:04:f3:46:d9:
d3:dd:b8:e4:73:14:43:38:fe:c7:03:0f:ba:5b:76:3b:87:4a:
64:0d:19:40:ef:24:1f:84:aa:32:54:20:0f:10:c9:c7:a3:62:
e3:6a:d2:9f:26:ff:f5:b1:62:1b:a3:52:77:d5:fe:6e:7c:80:
01:02:50:41:46:6f:26:d3:14:dd:44:fb:64:35:ce:28:44:a1:
96:1a:47:03:78:9f:ab:aa:77:cb:80:67:84:99:5c:36:1a:c8:
05:ce:47:1d:06:4e:85:da:13:62:93:35:0d:f5:81:31:2f:7a:
32:8f:cc:09:28:71:54:0d:38:53:03:d5:99:dd:7a:37:8c:e8:
52:f3:b9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:11 2025 by rpki-client