Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
File: 9QVtq7mkcBDNG07ydLw9L0pZ6To.mft (raw, json)
Hash identifier: Nela6cIToeJxeWZqCpGXgsLXhuZrvboyI0qGkVzCdO4=
Subject key identifier: 2D:76:3C:C1:66:E0:C7:CD:97:CD:0C:48:F0:3D:44:77:B3:F6:31:F9
Authority key identifier: F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
Certificate issuer: /CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Certificate serial: 019A54C08CA6047A433B983AFB8FAD1097FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 16:01:36 +0000
Manifest this update: Wed 05 Nov 2025 16:01:36 +0000
Manifest next update: Thu 06 Nov 2025 16:01:36 +0000
Files and hashes: 1: 9QVtq7mkcBDNG07ydLw9L0pZ6To.crl (hash: XP/kvaVqdrtTBF3gGQM+RHQUCTtWa4DMhnV5OzvNwDM=)
2: A8TukvgDm2_mAvbO8Qh2ldXZd9Y.roa (hash: /JIMryvixQaluB5n97mezkD1EyPJinxMba0OGSdEKhE=)
3: vP5uRCtVJRUJyzhFaWsuhTzkTw8.roa (hash: y1OFWyB3EPXzoJcEAkwbjykFdh6ALTnHBPCo+2KwzSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:8c:a6:04:7a:43:3b:98:3a:fb:8f:ad:10:97:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Validity
Not Before: Nov 5 16:01:36 2025 GMT
Not After : Nov 6 16:01:36 2025 GMT
Subject: CN=2d763cc166e0c7cd97cd0c48f03d4477b3f631f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:68:73:d2:5c:61:69:c3:7b:16:60:f6:c3:
6a:d3:68:3a:e0:9c:5a:ed:79:d0:31:09:8b:0c:0a:
0b:0f:3b:1f:26:48:8e:1f:59:3e:77:e3:29:7e:48:
b4:cc:e3:29:a3:13:58:d2:d3:a0:ec:2b:bf:a2:18:
ce:99:70:9d:ee:f8:a6:8c:36:71:a0:7f:20:62:c4:
21:f9:35:a7:ee:84:28:9d:bf:cb:ab:9b:5c:74:43:
11:23:78:b9:43:40:c9:f1:c5:17:b4:1c:fb:0c:41:
79:b4:a6:46:2f:72:c8:c2:c9:cd:6e:eb:d2:35:e6:
d2:ec:59:53:8b:f1:c5:c9:46:6e:b7:e7:ee:98:a1:
65:76:d8:ee:18:d1:90:ea:29:ef:1c:59:60:43:67:
b1:44:5a:33:f0:bc:5a:d5:a4:1e:d5:3b:b7:a5:77:
4d:a1:a4:cb:ad:3f:6e:1e:e6:5b:75:fd:dc:a0:b4:
78:37:8e:70:43:e5:c4:51:3a:84:2f:e1:c8:02:5a:
cd:20:43:e6:d8:20:03:fc:3f:be:0b:48:50:17:bc:
f8:d6:9f:f9:0a:fb:89:47:8a:12:53:da:1e:28:b4:
5e:6c:4c:e6:46:0f:82:ad:93:d4:24:99:dd:f8:aa:
a5:09:c6:fd:2b:65:16:af:1a:96:46:a0:ac:27:0f:
75:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:76:3C:C1:66:E0:C7:CD:97:CD:0C:48:F0:3D:44:77:B3:F6:31:F9
X509v3 Authority Key Identifier:
keyid:F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e6:3c:64:cf:91:f6:8c:ec:35:ff:8f:63:88:dc:d1:e9:a5:
e6:43:2b:c6:62:1e:c5:5e:5b:61:aa:29:33:b4:cc:86:bf:66:
70:32:af:83:51:86:f2:ac:88:c7:30:44:72:2b:06:6f:4b:97:
34:27:d9:2b:b7:c0:0f:6a:d6:1c:73:79:b1:c4:ab:45:ba:37:
f0:a4:30:16:ad:c7:97:0c:f4:23:87:a5:76:54:fd:78:37:e3:
1b:01:4b:41:cc:f3:b2:e8:0a:58:81:4a:c6:2a:04:4e:ab:a3:
2c:99:07:eb:78:94:c2:6f:50:c3:52:07:00:bd:a4:0d:97:a2:
a9:8e:4f:e0:6a:fd:59:da:34:c7:d3:78:e2:fc:17:2e:ff:18:
e2:83:73:54:d0:18:63:f6:f3:44:ef:67:89:58:cc:a4:62:56:
8a:59:05:d4:6c:91:a4:77:bc:fc:9a:3b:70:f7:a8:a7:db:5e:
a0:63:61:6a:ee:ef:c9:61:8f:69:7d:ca:2c:08:f2:19:b2:85:
e1:5f:21:a4:6c:4c:1c:de:46:d2:b3:a2:80:e3:4d:7b:99:32:
46:a8:c3:d5:7b:4a:f3:19:01:67:2a:79:58:6d:f9:47:52:09:
01:13:5d:97:b1:e7:48:c5:c2:2e:4a:6a:b4:6c:77:5d:f2:d5:
c7:94:90:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:53:41 2025 by rpki-client