Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: nzNDesZL5c1I4oAd9HBO7jXZtwRXI5rt7vwxwtCzxCs=
Subject key identifier: 04:5D:F8:3B:75:BE:2A:BF:96:79:A7:0D:BD:6A:DE:1D:38:31:87:4F
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 019A4D3D1369C9B45F2009CC3A76C541B77E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 05:00:39 +0000
Manifest this update: Tue 04 Nov 2025 05:00:39 +0000
Manifest next update: Wed 05 Nov 2025 05:00:39 +0000
Files and hashes: 1: 1-q7Os-ag3LFo7MgF8ZfJghgVfgc.roa (hash: AkqR6A52qHHQpKh+paJEwg0UF7zLNR6BUjxPJEPXBuc=)
2: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: Vq7rDAM/inD5rgizW5a5Ttyj4++JVsbKeLj5Rxw5jJ8=)
3: X2IXuMlNGoAcrvL_ko43_QrEupI.roa (hash: tb+ePbzsjMAZQXem+oOzrudhMucziUuIqtpyErKmVRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:13:69:c9:b4:5f:20:09:cc:3a:76:c5:41:b7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Nov 4 05:00:39 2025 GMT
Not After : Nov 5 05:00:39 2025 GMT
Subject: CN=045df83b75be2abf9679a70dbd6ade1d3831874f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:f2:0e:55:95:25:c5:50:9b:cf:3a:57:32:
0c:8f:d8:cf:1a:05:f7:11:b7:18:39:1d:09:00:fb:
7d:13:73:de:3b:27:e3:b2:51:36:77:c4:67:19:ed:
b2:0f:7e:21:08:c4:a5:bc:9e:c4:69:07:6d:94:84:
7a:6b:fd:e5:e7:5d:46:76:22:20:dd:06:10:02:a7:
f7:65:fb:43:36:9f:9e:39:95:7d:fe:a5:e8:82:39:
0a:d8:9f:fc:c2:6b:86:97:0c:f1:89:16:09:cc:e3:
09:61:d0:47:52:be:1f:de:20:97:78:0e:1c:76:d1:
37:01:3c:00:63:e6:ff:b0:95:c4:13:ff:76:d1:bc:
1f:2a:5a:d4:2e:49:df:49:77:06:eb:dc:e5:d4:6d:
ff:b9:f7:62:1a:d1:85:b6:82:d1:e0:e2:dd:30:1c:
e9:41:25:60:b9:db:b6:f7:46:e7:44:ab:23:2e:01:
dd:89:99:9c:4f:48:12:53:2c:14:34:28:61:24:1c:
50:af:2c:0a:98:a6:9b:7a:9f:de:89:39:87:d0:7e:
e3:6f:0e:2c:d3:db:4e:92:63:1c:28:44:2d:17:ba:
40:a7:17:37:ad:9c:f7:84:98:22:60:4e:e8:00:bb:
9e:a1:08:f9:d1:a1:ca:7a:e9:42:16:4c:ac:9f:01:
9d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5D:F8:3B:75:BE:2A:BF:96:79:A7:0D:BD:6A:DE:1D:38:31:87:4F
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1f:6a:dd:0d:a6:1d:74:74:ab:c3:6e:73:a9:c2:f3:b0:de:
e8:32:19:25:c6:87:ee:68:3f:f4:eb:68:85:7b:a1:96:1f:a0:
dd:ae:c5:fb:49:7c:4e:44:fd:4a:d7:ad:00:11:5c:4a:e6:db:
59:40:c5:20:97:a1:c4:0a:55:10:20:1b:ed:79:4a:eb:25:94:
d2:4f:71:84:4c:e0:02:ec:a8:0f:72:86:ad:dd:03:fb:13:ed:
91:65:06:ee:c3:a0:5a:cf:b8:a4:52:f6:91:93:dd:90:f9:f8:
db:dd:14:63:65:b2:ec:54:c8:27:b4:4d:05:32:b1:d8:0d:0a:
df:35:35:9e:2d:ca:2c:c9:04:62:cc:f3:e8:e9:1c:96:99:40:
e4:1b:df:6e:33:2b:ec:51:52:08:ba:d5:50:2f:7b:84:c3:75:
bb:0e:db:ea:af:eb:36:d3:db:63:26:99:9b:f7:30:55:ec:e8:
0d:f7:31:48:ba:42:99:b5:b2:c9:b8:62:37:6e:19:21:7a:7a:
b8:d2:83:3e:e0:49:ad:8e:31:83:21:6d:cc:9c:96:59:c8:e9:
48:ea:2f:13:1a:6d:c3:00:3f:9b:ac:18:8a:cc:5a:54:20:c6:
54:36:8f:a1:e0:76:98:fe:e7:8c:22:62:e1:31:64:1b:6d:02:
52:db:83:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:16 2025 by rpki-client