Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
File: fQtE5JJUnht9pTLIDDSIUMWkToA.mft (raw, json)
Hash identifier: ekNwH/NPzaBe2Y/82L+1SefFWvAeTl8SPlDi1wTUkh4=
Subject key identifier: 9D:1E:62:E3:18:02:82:ED:B9:85:CF:5E:3C:D6:2C:E4:CE:9F:E8:82
Authority key identifier: 7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
Certificate issuer: /CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Certificate serial: 019A503E1E595C3A608CCA86E91338BA1ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 19:00:39 +0000
Manifest this update: Tue 04 Nov 2025 19:00:39 +0000
Manifest next update: Wed 05 Nov 2025 19:00:39 +0000
Files and hashes: 1: Vh9zdU6UPXBw1wsGMQVn_pjjotw.roa (hash: RHQ7Mk9Ul2niP+vY1weS4xjGH8dOqLq3Efjab5Bc1HU=)
2: fQtE5JJUnht9pTLIDDSIUMWkToA.crl (hash: BT8/SWTndyV5i4i5XD5WSA903lU/UyIXRGWYrVMadiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:1e:59:5c:3a:60:8c:ca:86:e9:13:38:ba:1a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Validity
Not Before: Nov 4 19:00:39 2025 GMT
Not After : Nov 5 19:00:39 2025 GMT
Subject: CN=9d1e62e3180282edb985cf5e3cd62ce4ce9fe882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:c9:8a:f8:7b:4b:81:67:55:61:de:5b:47:
04:70:1d:84:99:36:39:95:9c:2f:ab:7b:75:88:46:
fa:9b:2f:aa:91:f5:54:10:6d:9d:64:82:c0:ca:f3:
6c:45:21:c5:a1:9f:f0:81:d7:e4:bc:28:b6:34:20:
6e:b5:f6:b0:c3:49:3d:cc:61:32:39:77:32:05:42:
20:db:8a:60:cd:f2:66:2f:63:3f:d8:dd:81:b0:62:
bf:c9:72:80:73:6b:25:3d:b7:13:ef:54:67:e0:43:
f6:0e:9b:8f:41:3c:cd:44:5c:f5:0e:15:9e:3e:ba:
1a:e8:70:02:64:d4:5c:df:d8:93:1e:88:e2:ae:85:
7e:74:c9:d5:2d:6b:06:b5:a9:c1:51:14:a7:07:84:
39:6d:5a:76:31:f8:c2:9f:d8:ba:b4:c3:ff:02:2c:
8e:01:68:90:3e:7d:fe:9f:35:a3:a8:c6:6a:93:c2:
50:1b:78:e2:23:45:71:b2:55:cb:4f:b0:55:9c:5e:
3a:73:61:c0:90:2d:d7:5f:bd:3a:05:9e:1d:c8:1a:
2e:71:3c:a4:a6:94:f9:c6:c5:92:57:de:44:95:1e:
02:64:20:5d:37:be:2f:48:7a:7b:3e:7e:a6:07:dd:
97:b9:d4:1b:86:72:54:c3:dc:b4:3e:4a:2d:0d:15:
c5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1E:62:E3:18:02:82:ED:B9:85:CF:5E:3C:D6:2C:E4:CE:9F:E8:82
X509v3 Authority Key Identifier:
keyid:7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:49:50:78:b2:7f:d5:cd:ae:46:53:14:55:46:c9:99:40:de:
2b:3c:c2:5d:8b:c4:af:c4:fb:7d:2b:2e:1f:41:05:27:b9:00:
27:e9:de:48:2b:c1:03:ed:bf:20:99:53:00:7c:b3:b2:b1:ea:
b1:01:f6:6f:ba:74:6c:62:ef:56:90:f7:c3:08:bc:b4:53:39:
0b:40:62:22:8f:66:15:0b:42:82:9f:94:8b:2b:2b:5f:12:e5:
d2:fa:95:f3:b1:52:95:81:72:82:d4:6f:d0:55:55:a2:19:a6:
e6:79:c8:76:b7:91:81:ab:22:6d:35:e2:4b:08:71:32:28:ca:
99:87:4b:a0:06:7b:f0:ed:28:ee:7b:e0:7e:73:f6:c4:81:9f:
f9:b8:e0:b9:2a:34:25:66:b4:23:f0:14:8f:d9:53:71:59:d3:
b4:0f:ed:91:ed:f7:ad:d6:0f:e6:73:ce:7e:ed:9e:fb:66:8c:
f5:ae:dd:8b:1d:7a:74:98:f8:af:20:9a:5e:8b:c4:df:d5:62:
88:36:29:b0:27:cb:5f:86:8d:d9:5f:36:09:65:b7:7f:76:c8:
f6:fa:78:77:92:ba:ed:44:77:17:4e:27:03:0a:f0:bf:5d:32:
02:3a:df:4e:c1:fa:30:b8:ce:27:d7:23:58:b0:85:94:2d:97:
65:ca:a8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:14 2025 by rpki-client