Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
File: r9I8xVrurzN-23Pq4ltZCXoneEw.mft (raw, json)
Hash identifier: SvMxdIBPrVlufnoHUw2IgmYCrnqqUSx5WLGbDFJZkI4=
Subject key identifier: 25:FD:75:66:0D:57:B1:9E:9F:0C:88:E4:41:6C:92:C9:92:81:F7:36
Authority key identifier: AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C
Certificate issuer: /CN=afd23cc55aeeaf337edb73eae25b59097a27784c
Certificate serial: 019A50E3CA820C06EC3446D1208D2FFF0E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 22:01:37 +0000
Manifest this update: Tue 04 Nov 2025 22:01:37 +0000
Manifest next update: Wed 05 Nov 2025 22:01:37 +0000
Files and hashes: 1: lHwTYMLdPppQjIGCxxbbE7ChdPI.roa (hash: AdFGp8oSyfut37qs3XRrjrGdC0sy7qxul+fWrYsyUd8=)
2: r9I8xVrurzN-23Pq4ltZCXoneEw.crl (hash: YOZxH6NdychKrmitm9ABs+Yf1F/Sj9ffwncLdbl9fDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:ca:82:0c:06:ec:34:46:d1:20:8d:2f:ff:0e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afd23cc55aeeaf337edb73eae25b59097a27784c
Validity
Not Before: Nov 4 22:01:37 2025 GMT
Not After : Nov 5 22:01:37 2025 GMT
Subject: CN=25fd75660d57b19e9f0c88e4416c92c99281f736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f4:12:51:9c:96:fa:56:ad:4e:1d:7f:b4:09:
4c:26:03:0a:13:9a:71:9d:31:6b:b5:cc:7f:52:e1:
ee:39:89:16:ff:4c:93:8a:23:2c:22:67:94:73:22:
6b:38:33:2e:da:81:70:9d:8c:3c:94:de:4a:39:5e:
1a:4a:f0:7b:21:da:20:28:41:2c:89:cf:1c:c8:05:
1e:03:3d:fa:40:55:0f:b2:dd:ae:4a:81:0b:d1:37:
69:e0:ce:c9:03:55:0a:f8:a8:ec:e6:0a:66:07:39:
eb:87:7c:ac:cb:2d:25:21:a8:6f:0f:d1:c9:bb:23:
f9:5e:80:06:19:49:97:6d:4e:50:d9:79:94:30:86:
fc:48:22:e2:66:84:bd:74:3b:c2:05:38:ee:6c:82:
fb:15:13:79:48:33:42:55:29:4a:b8:86:9f:68:3a:
23:0c:88:59:93:9a:7e:fc:37:91:9c:1b:f2:1a:0e:
41:cc:13:c1:9f:1b:29:26:f7:65:98:b6:b2:68:8c:
6d:d6:03:c6:03:81:8d:ae:11:67:8a:1e:6b:dd:16:
0c:71:4f:d0:7a:a2:55:4c:00:75:91:57:07:bd:61:
89:37:5c:45:38:4d:f1:e5:3c:2c:a8:c2:7c:8d:be:
5c:13:2c:4e:8f:da:48:b0:66:0d:98:3c:e0:7e:58:
74:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FD:75:66:0D:57:B1:9E:9F:0C:88:E4:41:6C:92:C9:92:81:F7:36
X509v3 Authority Key Identifier:
keyid:AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:70:2e:ff:6d:68:e7:25:96:2d:a3:a2:43:fe:9a:81:6f:55:
b2:bd:aa:22:a4:29:04:9f:41:e6:5f:45:c3:92:a8:dc:34:f6:
4d:d8:85:12:ca:80:2e:34:fb:84:77:03:dc:f0:44:5f:c7:8f:
9c:34:55:29:d6:2e:2a:2b:97:bd:71:6b:ea:9d:ba:a9:6d:ee:
89:e3:ed:1a:76:73:30:e5:18:1b:71:b8:7c:4a:2a:01:16:a1:
04:d2:81:f1:60:ed:da:9c:d4:b2:be:e1:46:28:bf:13:7b:3c:
25:a1:97:5e:42:20:72:59:a6:e6:72:2f:e1:4b:82:64:8a:cf:
de:73:9e:8a:80:ae:d7:8b:2e:db:04:c9:ee:6a:d8:21:b3:9a:
51:87:7a:0a:6a:c9:84:36:5f:6e:ef:9f:42:0e:47:ea:3c:53:
88:5e:ae:a3:65:cf:0b:f0:f1:3b:fa:7b:ab:c9:f9:e1:2e:2d:
8c:a3:bf:56:49:16:0f:54:1a:f2:19:cc:14:49:b3:42:cf:07:
71:46:ee:7a:1d:2c:39:11:91:cc:7c:e6:e6:8c:b3:65:6b:49:
99:9d:c0:7b:24:cc:38:0b:dc:cd:03:e2:7b:cb:89:ba:14:dc:
cf:f4:5b:35:0e:d2:2b:29:e6:7a:aa:f9:20:8a:3c:79:b1:4a:
c3:13:3a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:27 2025 by rpki-client