Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
File: k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft (raw, json)
Hash identifier: rxNPnA+apT4MZDZNBmgrmNJ7Yr0SHddLAqsD33U89QQ=
Subject key identifier: 01:D5:E7:36:AE:8C:EF:4F:6C:31:B6:6E:F0:A3:7A:21:D5:2A:CE:06
Authority key identifier: 93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
Certificate issuer: /CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Certificate serial: 019A50075228B3FE854097D7C308DA823350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 18:00:48 +0000
Manifest this update: Tue 04 Nov 2025 18:00:48 +0000
Manifest next update: Wed 05 Nov 2025 18:00:48 +0000
Files and hashes: 1: I9i3fnf4Nk0WsFMmWEWJhe5vh40.roa (hash: llYywC4U70yW6sSChiJ+ZHwIZzZjQAej/EchqIalMeA=)
2: IGJfVzvhS1XNfQJqw7b44W8rh5Q.roa (hash: ps4BuWOubuNVlVOQpqaTImNMOhN/B2m1xTG8lC4cqCo=)
3: k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl (hash: 7avOxVoTjRcR+ouOnwz4yQyZphjxu5Qw9gVnexN4STo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:52:28:b3:fe:85:40:97:d7:c3:08:da:82:33:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Validity
Not Before: Nov 4 18:00:48 2025 GMT
Not After : Nov 5 18:00:48 2025 GMT
Subject: CN=01d5e736ae8cef4f6c31b66ef0a37a21d52ace06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:77:c9:46:38:62:2a:31:30:d4:74:7d:93:
14:79:03:56:48:89:5a:a9:ab:7a:f2:bb:03:82:fc:
83:8b:15:2c:65:7c:98:4e:ee:3b:8d:5b:ce:b7:34:
51:90:91:23:00:5c:a4:bc:8f:2d:29:5d:75:fd:fe:
29:63:60:88:18:a5:3d:dc:34:4f:79:98:1d:64:60:
f7:7d:5e:2a:5b:2a:9f:b9:ad:60:e3:38:5c:0f:f4:
31:a3:23:02:58:be:f6:d1:60:ca:9a:d8:c4:f9:6b:
52:96:a3:0d:ad:39:e8:fc:ea:37:25:e6:6d:6c:0b:
1d:d2:ca:1f:1a:d3:1b:77:55:dd:4a:a6:0b:87:f6:
4b:35:16:cc:cd:2e:da:f0:36:6c:8a:62:42:70:39:
60:a5:78:9d:aa:de:0c:41:8d:a1:c4:20:15:48:b0:
bb:d4:8d:45:71:45:66:21:d9:c3:f4:93:f3:a0:e8:
da:e5:27:bb:76:bd:aa:42:76:0d:fc:c9:88:56:07:
0f:e0:8b:df:fa:73:94:a6:b1:84:d5:24:78:8f:73:
7f:e3:d4:03:68:c7:42:ac:cd:90:89:3d:9f:36:47:
2a:80:e6:73:91:46:3c:9b:3f:dc:80:99:73:39:58:
1d:77:04:ec:bc:94:7d:48:81:91:64:62:48:78:43:
e0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D5:E7:36:AE:8C:EF:4F:6C:31:B6:6E:F0:A3:7A:21:D5:2A:CE:06
X509v3 Authority Key Identifier:
keyid:93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7f:6a:bb:b4:d9:41:81:1a:5a:f5:59:c4:0d:be:c4:ea:5d:
55:6a:49:1f:2a:ce:70:47:c3:0c:be:5d:fb:05:a3:39:76:86:
b7:92:9d:54:df:15:a3:3f:34:90:6f:3d:f6:1b:1d:61:c9:26:
88:d2:f8:b6:8f:2d:eb:38:6a:a4:83:3a:57:9d:d0:e2:84:f2:
a4:76:88:d7:cf:8b:4d:d7:2f:9a:df:87:75:cc:ed:93:6b:93:
b6:fc:3f:5f:bb:2f:9c:9e:1e:a3:47:d3:a2:f1:96:3e:a9:ba:
03:65:9b:78:0b:27:8c:1b:2c:24:3a:1c:cb:fc:fe:ec:91:59:
ae:ae:cb:bd:f2:b4:80:04:a3:5b:5a:87:1b:31:03:26:1d:ed:
1f:da:77:c3:34:0a:70:58:88:11:0e:9f:aa:fa:f7:a2:30:5c:
d0:39:9d:11:ff:08:b6:40:4f:3c:68:50:bc:e8:6b:11:7e:ae:
3e:28:8b:5f:ae:8f:26:97:89:ae:50:2c:02:fa:91:51:ef:53:
45:c8:1f:45:2c:cf:6c:14:d1:00:e7:1d:03:d5:b9:dc:db:70:
af:02:7a:f1:60:d8:fa:82:17:05:99:33:a0:30:9a:36:3d:ef:
24:98:16:0b:33:80:9c:16:c6:2d:3e:58:5e:28:4c:be:6a:d5:
db:31:d5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:42:39 2025 by rpki-client