Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
File: 309yD7vOaxVdc1fb5xJspWwevnU.mft (raw, json)
Hash identifier: JyDFeo06HNK9oyuoKVas2g7CrYSSZfm+Op1rMRyNBo8=
Subject key identifier: A9:2B:EF:51:F9:FC:81:A3:87:0C:CA:24:80:AC:1F:6E:80:79:D3:DD
Authority key identifier: DF:4F:72:0F:BB:CE:6B:15:5D:73:57:DB:E7:12:6C:A5:6C:1E:BE:75
Certificate issuer: /CN=df4f720fbbce6b155d7357dbe7126ca56c1ebe75
Certificate serial: 019A51F5519A47A20C55F27FC84C1E25BE2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
Manifest number: 02B7
Signing time: Wed 05 Nov 2025 03:00:22 +0000
Manifest this update: Wed 05 Nov 2025 03:00:22 +0000
Manifest next update: Thu 06 Nov 2025 03:00:22 +0000
Files and hashes: 1: 309yD7vOaxVdc1fb5xJspWwevnU.crl (hash: IHoHRv2B4NqmU8MIk9sMos9B4YfkPSvuPrjFbeDD+U8=)
2: qjdo-2hELWfZ5X3xR6fmxm2tvRM.roa (hash: KdwciiToM5teWCqBbT0OWprvk5ot6XdBmfBuE2JH8Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:51:9a:47:a2:0c:55:f2:7f:c8:4c:1e:25:be:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4f720fbbce6b155d7357dbe7126ca56c1ebe75
Validity
Not Before: Nov 5 03:00:22 2025 GMT
Not After : Nov 6 03:00:22 2025 GMT
Subject: CN=a92bef51f9fc81a3870cca2480ac1f6e8079d3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:16:2d:c2:7a:f8:3e:82:b9:d9:83:2f:fb:b5:
96:b4:cf:7c:d2:96:74:0c:96:1e:4e:f7:f6:b4:2c:
39:b9:cb:e3:75:e7:8b:0b:4a:f8:f4:69:ef:2f:39:
68:d3:81:43:33:07:a3:2d:2e:6d:53:71:39:1b:60:
ce:d0:1a:c8:05:af:bb:ef:f7:f1:37:5e:af:37:cb:
85:dc:0a:3b:de:ac:80:15:b1:1e:e9:8e:62:10:2f:
30:36:30:53:4c:a9:0b:dc:3d:4d:18:36:f2:55:ce:
70:cd:96:59:1d:e2:a0:b5:f1:93:6b:f2:50:c8:99:
3a:80:29:aa:22:60:9f:81:2d:2c:1e:cc:a7:30:c4:
70:52:33:a5:72:10:81:d5:4f:54:b6:1a:48:21:eb:
10:83:47:49:0d:2e:9e:ce:bb:ec:0c:ae:92:b0:f0:
64:ef:f6:8c:ff:26:2d:47:b4:f7:d6:31:dc:06:db:
8b:ac:69:28:56:c9:26:d1:38:0f:aa:c1:7a:1f:83:
a1:2a:e2:38:87:f8:96:2e:87:d3:c7:9f:c5:8d:82:
41:be:a7:88:c7:03:2c:32:70:7f:5d:ea:43:0d:07:
9d:25:24:b7:1d:60:d6:2c:08:ea:5b:9c:45:bf:b8:
5f:cd:8d:83:db:43:bb:31:41:bd:81:d5:ee:e4:b3:
4a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2B:EF:51:F9:FC:81:A3:87:0C:CA:24:80:AC:1F:6E:80:79:D3:DD
X509v3 Authority Key Identifier:
keyid:DF:4F:72:0F:BB:CE:6B:15:5D:73:57:DB:E7:12:6C:A5:6C:1E:BE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:af:5f:8e:14:d8:c0:29:c2:e1:00:4b:42:a9:96:57:67:5e:
40:56:95:46:f3:79:25:99:78:08:fc:0d:a7:9c:7a:3f:75:c7:
96:24:be:b7:6a:f7:e7:2c:6b:99:50:95:b2:b5:a8:46:0a:2d:
10:ca:45:85:ae:f5:b7:fb:fb:ca:72:86:44:c1:ce:4b:8e:62:
f6:31:fb:80:48:1e:6c:72:59:df:5c:50:64:cc:c6:be:42:39:
5d:d7:46:c7:41:92:3c:25:dd:f8:bb:a6:3b:14:fb:3b:63:03:
c2:9a:db:aa:b0:3d:44:8c:a3:3b:a7:11:b9:2e:36:e6:19:35:
37:d9:e5:65:5c:be:f8:a7:17:9e:3f:7d:27:ec:16:53:94:80:
cf:47:9f:ae:17:8e:9f:e1:f4:48:04:65:fc:22:e6:c2:8a:8d:
fe:51:9c:34:b4:81:22:30:3d:a4:ac:5f:af:45:cd:bf:0b:1f:
dc:25:3d:6c:a0:fb:04:7c:31:04:30:3b:03:e9:c8:6e:b3:e0:
f8:e5:94:3d:fc:1b:a2:5c:2d:42:ba:7b:1c:2e:30:a4:81:ee:
fb:96:8b:52:d6:7f:77:fd:87:41:e7:7d:de:ed:15:1c:a9:00:
f7:e8:70:58:a1:56:35:f7:f9:4f:b4:91:00:2e:3c:0c:31:65:
af:91:1c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:32:40 2025 by rpki-client