Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: pCpfsxt+MOWoE+LO4Rpo2X602S0MNZgJtdcpTlZYEiI=
Subject key identifier: 09:57:9B:30:9F:61:8B:D3:01:CF:D8:AB:9F:FC:43:53:E9:F3:A8:08
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019A4EF47F3DC2A6F58795FC9C90536CBB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 1722
Signing time: Tue 04 Nov 2025 13:00:37 +0000
Manifest this update: Tue 04 Nov 2025 13:00:37 +0000
Manifest next update: Wed 05 Nov 2025 13:00:37 +0000
Files and hashes: 1: 8YTLS_1mFrh55A62a2mBS518iAg.roa (hash: b+QiLic550TpA6gu3XGSKkJ7N3n9C2SCnWL5+/s9Vr0=)
2: W7Jge6ghVHbAsdaSdITf8b_3aVQ.roa (hash: eGgmHuw9ea32mMeNaCzUMNBUiaRSSoMmW6d0dFZkj5k=)
3: cOy-CAvP6otn2DzWCwsJGJTydS0.roa (hash: 0R2NVVpBG6pXvGjfU3eH+cXTry9Vt5bvO9CjIpEY18Q=)
4: oz-gpVKEUvOG9fOS01I-1A1aI-Y.roa (hash: 0NG9CVuIlSmbnaNtm7cZXsbOMNvpcIJrtm880P+NpNc=)
5: q9IaYjcr5RObBrW7hey_hpAIvpg.roa (hash: 2MfulwyVlfgKmQicfk78T3sq4tPTxMleY1Rp41M0dbI=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: LprxnfOpxA3U0cyTRa2yuFNF+538qskWkK5Lo+CGWAk=)
7: vcy7WC8JEz9GH2wrI2xSRGFOQ8M.roa (hash: ppq+e7eDeIpGmxTNUn9DHommsEQqQfIeqXbSiT0TQpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:7f:3d:c2:a6:f5:87:95:fc:9c:90:53:6c:bb:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Nov 4 13:00:37 2025 GMT
Not After : Nov 5 13:00:37 2025 GMT
Subject: CN=09579b309f618bd301cfd8ab9ffc4353e9f3a808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:49:3a:8d:f0:f9:e2:c7:3e:86:a3:be:a0:
ca:f9:6d:30:ba:89:42:13:e8:41:22:ab:ef:90:fa:
58:ba:a0:93:3f:c8:06:56:0a:2a:c7:1a:78:5a:29:
3f:51:1f:36:db:67:17:cc:23:57:4d:ab:0f:e4:b9:
6e:9e:23:15:b5:10:e7:09:3a:7d:67:09:82:7e:28:
54:d5:33:54:15:e7:e6:f3:c7:73:f5:56:43:a1:ba:
a8:ca:b6:33:cf:b9:68:45:d0:ce:58:30:3a:bf:59:
5b:cb:39:30:16:6d:9d:b0:43:47:1b:82:de:dc:d8:
1d:03:09:b0:79:cd:f9:7b:b1:3e:f2:6d:ea:2d:c2:
41:d6:19:01:f7:24:78:c1:a2:14:90:e0:cb:15:c4:
27:38:ee:ab:58:81:12:d5:d9:ad:eb:e1:06:5a:93:
3f:2a:65:c7:a1:3b:57:33:61:5d:51:cc:c8:d6:3b:
8e:7f:ce:64:25:42:1f:40:0a:1e:94:ca:95:04:bb:
7d:78:72:f9:7a:22:85:75:cf:bc:7c:77:43:d3:65:
f7:cd:9c:d2:f9:07:c3:8c:ec:22:18:03:a6:14:82:
56:e2:45:61:3b:37:08:08:48:30:e3:9a:11:d3:27:
db:78:a5:a3:5c:39:5f:55:07:2c:4a:c9:9d:e5:72:
b7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:57:9B:30:9F:61:8B:D3:01:CF:D8:AB:9F:FC:43:53:E9:F3:A8:08
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:db:6e:fc:f3:1b:44:cb:c0:0e:22:41:e1:2c:33:a0:54:27:
31:a7:f9:2d:26:fd:c8:fe:b4:2d:6e:70:a6:37:59:73:cd:d7:
4d:ae:c0:03:0a:d4:22:de:d0:4a:08:a3:0c:b2:06:81:d6:ab:
da:c3:fb:1b:14:54:3f:64:2d:c3:a2:6c:e2:2c:4a:cf:4d:2e:
d3:bc:f1:66:8c:73:80:2a:6d:73:bb:22:d1:3e:dc:94:00:a9:
12:24:44:09:14:97:02:22:00:de:f0:ed:bb:ea:65:e8:d9:d4:
29:44:53:4a:8e:bd:16:5f:b8:cf:0a:ec:2a:97:22:b5:20:09:
85:4d:c5:e0:77:d0:89:ca:27:96:e5:29:84:c1:3b:92:1b:8d:
f9:f7:6a:40:1b:bf:b9:06:3d:86:b7:fe:0a:7c:5e:ad:49:39:
21:2a:b4:02:b9:b6:07:90:5b:f2:9e:8f:7f:63:ad:a2:2d:49:
f0:06:14:46:36:75:e0:4d:79:19:b7:23:0e:93:4f:62:1e:27:
32:2b:68:38:24:0f:03:27:23:39:96:fc:b4:92:72:a0:dd:ed:
f3:4a:89:82:d1:c0:1a:86:4d:33:a9:74:71:38:c2:fc:68:9c:
aa:28:32:b5:66:87:bf:ec:69:ba:4f:3f:85:9b:2a:f4:6d:20:
8b:69:5c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:15 2025 by rpki-client