Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
File: b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft (raw, json)
Hash identifier: p7bnGWSUtwjD1fBgCh1W/O8LPrO7lIXmGqaUNTj3IsA=
Subject key identifier: 2E:B9:88:9B:12:C7:07:A2:EF:7D:C9:D9:DF:4F:07:22:40:91:27:55
Authority key identifier: 6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7
Certificate issuer: /CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7
Certificate serial: 019A4D3CD3B3855452E43F60A11B9E588B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 05:00:23 +0000
Manifest this update: Tue 04 Nov 2025 05:00:23 +0000
Manifest next update: Wed 05 Nov 2025 05:00:23 +0000
Files and hashes: 1: EtKR-kQx-fQIYWuQ-lYzi3aG73M.roa (hash: Tv2U/xkIvhOtN5S9AYeK8bEvblqxzhCnqAMAXe7i/DA=)
2: b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl (hash: 2Fo252+B+E+aGgKkLFv7XJ08NdMgzRrtcY9eeKBfBKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:d3:b3:85:54:52:e4:3f:60:a1:1b:9e:58:8b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7
Validity
Not Before: Nov 4 05:00:23 2025 GMT
Not After : Nov 5 05:00:23 2025 GMT
Subject: CN=2eb9889b12c707a2ef7dc9d9df4f072240912755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:8d:42:c9:29:92:14:0f:70:5c:d0:a3:22:
6a:c9:e1:97:9e:b9:38:4f:0a:ff:8d:6f:ac:1d:6f:
e9:73:e2:39:56:a1:0d:40:c7:da:7d:b0:7a:b4:ed:
07:eb:5c:b5:a1:b8:51:f0:17:a8:46:69:8d:35:e2:
19:0e:f3:c4:ff:b1:44:73:ee:78:56:24:d6:b7:2f:
d3:66:b4:ab:4b:e6:8b:42:e9:a4:03:a6:d6:5e:01:
72:77:38:80:d4:c3:37:96:97:dd:f2:da:7e:bd:52:
89:d0:74:cd:49:18:b9:06:37:13:16:38:17:a8:9e:
0b:6a:8d:33:5e:72:e4:8f:bb:65:44:f4:8d:81:06:
c6:76:85:85:99:78:4a:88:74:ac:f2:4c:d7:0c:b4:
40:49:56:10:46:b2:20:d7:ff:95:f5:5b:89:f4:90:
80:6b:df:4f:01:24:dc:02:ff:92:e2:1b:40:7b:75:
8a:20:6c:ef:4a:0d:e8:d1:3b:18:49:6d:37:c8:a3:
8f:20:c2:e8:43:9d:0c:56:5b:42:d8:2f:8e:19:ae:
f4:34:66:fa:df:dd:1c:f0:5c:b0:d8:0b:a0:10:7c:
5b:30:1d:aa:46:6b:1c:82:2d:87:c4:bc:e4:33:20:
3f:9e:c6:c6:db:69:55:49:f3:f8:24:f5:4f:af:76:
fd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B9:88:9B:12:C7:07:A2:EF:7D:C9:D9:DF:4F:07:22:40:91:27:55
X509v3 Authority Key Identifier:
keyid:6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:26:7f:51:cb:bc:e4:8f:0d:32:f3:bd:2d:8b:20:cc:15:c6:
9e:80:62:41:ac:47:84:ee:d0:db:ee:a2:6e:ae:2d:39:4c:af:
3b:95:ae:a2:b0:30:97:9f:5c:af:7b:70:2e:99:41:57:0d:8b:
72:ce:d8:cf:c7:9b:b9:57:21:02:29:2b:9d:bb:33:53:4d:ed:
54:22:af:2e:8c:50:8c:31:20:b6:7d:a8:92:c5:f8:6d:1a:1a:
41:25:aa:85:60:6d:e5:df:f9:85:46:15:03:a8:78:18:a0:2d:
07:dc:a7:fc:78:fc:8a:bf:1f:a4:9d:49:11:c5:ec:fc:1a:57:
40:03:97:c5:38:c2:b6:f0:4b:b7:9d:e4:a7:a9:75:81:c4:2b:
94:e7:39:da:71:d1:34:fa:dc:1d:b7:47:71:a9:eb:a4:e8:80:
31:f7:7a:3b:a4:48:08:78:0b:fb:a4:d0:29:63:58:a8:d9:e6:
e0:9f:16:45:cd:fa:ed:b6:a9:ba:f7:65:5d:26:e2:14:35:cc:
78:2c:e5:32:7a:aa:26:13:28:b7:47:95:e1:21:f0:6d:20:93:
e1:52:83:f7:15:39:d4:a9:0c:9e:9c:81:dd:a1:a2:f1:32:9b:
a1:fb:eb:a0:5f:78:6c:ee:e0:a6:39:da:bd:ae:96:33:86:60:
a5:0d:bb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:54 2025 by rpki-client