Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
File: 9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json)
Hash identifier: 9MkEZ+DVfNhYi5yw1TqN+8pKdQrbWLt3VXyaO2/2hNM=
Subject key identifier: 4E:A3:94:AC:B1:E8:71:F8:8C:C8:E8:B7:F0:09:06:AD:3A:C1:9D:55
Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
Certificate issuer: /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Certificate serial: 019A4FD00B992A8C22DC11B4A7FADD4C2029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 17:00:25 +0000
Manifest this update: Tue 04 Nov 2025 17:00:25 +0000
Manifest next update: Wed 05 Nov 2025 17:00:25 +0000
Files and hashes: 1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: lpDVn3yceX3y44WouoJMLdj69EUCK+XkE3DiUeHN/Wg=)
2: fGeYBTeIqUGlzWkeYCJZuXTV3NA.roa (hash: NVWcI0sfwe5T87MmDN6gYp0EndXzVclJkGdW6buL8Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:0b:99:2a:8c:22:dc:11:b4:a7:fa:dd:4c:20:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Validity
Not Before: Nov 4 17:00:25 2025 GMT
Not After : Nov 5 17:00:25 2025 GMT
Subject: CN=4ea394acb1e871f88cc8e8b7f00906ad3ac19d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:0f:39:37:4f:75:5f:8e:8a:7e:dc:41:62:
8e:14:02:90:a3:b1:9c:07:15:02:76:14:a6:13:57:
91:c8:82:44:3f:32:eb:34:ec:cf:91:b0:ff:3b:73:
be:87:7c:cf:12:d9:28:a5:d9:8d:7c:53:d6:5a:4e:
11:be:03:eb:28:31:4d:4e:01:45:38:1b:a1:3e:38:
21:2a:57:fe:f9:30:ae:b3:04:0b:40:04:de:3e:2a:
ab:4c:40:30:be:80:42:9f:ae:45:9c:66:16:dc:a3:
0b:0d:bc:fe:4f:b3:d3:3c:f1:8f:73:48:aa:86:fe:
e6:35:d0:bd:7f:c3:e2:34:f3:9c:9a:62:e4:6c:5c:
19:ac:a4:7c:81:54:fa:ee:27:61:ef:48:46:78:5e:
35:7e:76:e2:02:e3:15:ce:fc:4f:05:ea:80:e8:e0:
4b:a6:43:8e:89:81:28:47:8c:68:2b:76:67:ce:00:
9e:2e:1b:21:ed:43:70:ec:3c:99:80:e0:e8:6d:49:
d5:fe:be:b7:9d:2e:e5:a5:4d:4d:4c:12:73:e2:1e:
e5:57:c2:3a:35:af:e2:76:d5:42:e1:0e:93:67:5a:
e9:22:d3:c0:59:0a:37:cd:59:21:49:27:78:ba:95:
8f:7a:73:c8:66:1c:5b:91:05:49:2b:a2:42:0b:d1:
2d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A3:94:AC:B1:E8:71:F8:8C:C8:E8:B7:F0:09:06:AD:3A:C1:9D:55
X509v3 Authority Key Identifier:
keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d4:f6:e7:c2:05:7b:98:51:a5:db:d9:b4:ef:8a:cd:18:02:
6d:2b:d0:1d:97:5a:8b:61:43:dd:41:e7:2f:48:ef:16:fb:f7:
b2:3f:47:6f:5b:4c:c5:ed:bc:40:ac:bc:63:aa:90:da:8f:8f:
94:8c:33:f7:21:d6:b0:12:9c:a2:bc:4d:6b:a6:5e:7e:c9:c0:
94:02:93:aa:a6:7c:27:5a:88:53:33:3c:2c:da:29:1a:81:cb:
2d:f6:bb:cd:95:f9:f4:b4:11:87:a2:2c:34:e3:05:5d:8b:f7:
c3:c8:08:78:8d:70:42:30:31:e0:12:24:ad:0e:76:83:22:4d:
c1:71:8e:57:00:ff:b5:9e:42:8e:f3:18:ab:bd:a1:64:fb:4a:
2f:20:77:0c:6f:1b:04:66:24:68:5a:b6:a0:56:2b:33:d2:b8:
d1:1f:08:da:83:de:37:03:cb:35:9e:4e:a3:a0:49:ac:a6:18:
53:6d:1c:6c:3f:16:52:e2:8c:90:26:23:46:7b:cd:ef:b0:54:
8b:6d:72:b1:64:02:68:dc:4a:ab:11:45:1a:9b:3d:27:47:95:
31:b0:c4:de:d5:d4:ac:e1:b3:8e:6c:52:ba:4c:2d:a2:76:4e:
ff:94:0f:4f:80:fe:44:fb:c8:e6:b1:fa:aa:62:07:50:f7:5a:
e3:af:a8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:17:04 2025 by rpki-client