Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
File: _9YayMVuOP32EjgDbHNUcnADRjE.mft (raw, json)
Hash identifier: s6cNPe1tEPq3m7XQbsUWmG1outINieIF6vesvCToGQQ=
Subject key identifier: FC:43:CC:58:30:E2:DA:AE:41:E0:85:DF:88:5A:D8:FF:2D:C8:FD:3D
Authority key identifier: FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31
Certificate issuer: /CN=ffd61ac8c56e38fdf61238036c73547270034631
Certificate serial: 019A4E18EBC6BAA23D43FDF5AD1B735BBCBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 09:00:47 +0000
Manifest this update: Tue 04 Nov 2025 09:00:47 +0000
Manifest next update: Wed 05 Nov 2025 09:00:47 +0000
Files and hashes: 1: _9YayMVuOP32EjgDbHNUcnADRjE.crl (hash: 2w+PqItxWGgYPRjbV2eHiO1AXUKrBx79zmrFo7LdoBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:eb:c6:ba:a2:3d:43:fd:f5:ad:1b:73:5b:bc:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffd61ac8c56e38fdf61238036c73547270034631
Validity
Not Before: Nov 4 09:00:47 2025 GMT
Not After : Nov 5 09:00:47 2025 GMT
Subject: CN=fc43cc5830e2daae41e085df885ad8ff2dc8fd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a4:ed:55:0b:45:ba:5e:c9:09:17:3e:6f:6b:
7e:32:16:37:b6:62:6b:b9:54:4e:13:0e:4e:4d:83:
32:72:be:eb:9c:5c:51:e3:d3:a9:97:2d:40:be:e6:
3f:7a:25:fc:1f:96:c7:33:e0:93:af:34:eb:1e:4b:
b3:1c:43:0b:58:e3:f3:d0:34:39:65:25:81:8a:b7:
01:5a:8a:89:91:3e:51:e8:40:b2:fb:e0:8b:22:75:
76:dc:5c:8d:b2:9f:7d:09:5f:2a:6f:0a:24:58:9f:
3c:0e:6c:43:f3:aa:da:ed:a3:43:e3:95:34:de:fa:
3f:06:21:b6:e1:3e:33:78:5a:64:d0:e9:b9:24:39:
5c:a0:93:a7:6a:2d:27:a9:a0:04:c9:96:ab:22:9a:
69:9a:0b:66:fc:6b:b7:5a:a4:e5:7c:db:dc:20:7a:
85:46:c5:00:e9:8d:63:81:a6:c3:3d:33:54:19:0b:
4c:55:f1:34:a1:39:e8:c9:76:83:85:6a:65:e5:cb:
a0:3f:e3:29:2c:67:f9:62:4f:25:fc:bc:d5:91:69:
87:bb:63:ed:5d:d5:90:37:5d:b1:ba:97:61:da:39:
04:ef:0d:6f:21:a3:55:ed:22:f5:96:1e:4e:51:7c:
fc:00:b4:95:7b:fe:ce:8f:92:8c:83:d6:bc:db:f5:
9d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:43:CC:58:30:E2:DA:AE:41:E0:85:DF:88:5A:D8:FF:2D:C8:FD:3D
X509v3 Authority Key Identifier:
keyid:FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6d:65:63:94:76:4e:91:2d:bd:68:1c:f3:94:7c:41:d1:ce:
8f:d0:c4:12:4b:6f:be:85:3e:12:29:c0:6f:66:3d:72:0b:00:
6f:17:4f:bd:a6:a7:15:49:b0:9b:25:3f:5f:09:1a:38:69:c0:
65:d8:b1:9f:5e:38:9b:5a:23:25:b1:cf:6b:f9:b2:f6:25:c7:
f0:17:52:41:38:68:d3:2d:18:4c:2b:5e:b4:75:ee:56:3e:0f:
ae:83:f2:92:cc:55:82:9c:cb:53:e6:11:55:d6:22:a8:c8:dd:
81:1a:20:21:c4:66:b7:43:73:4f:cc:1d:1f:64:a7:9e:3f:d5:
ef:35:f3:e7:3e:cb:1b:88:f4:aa:38:3a:e0:46:56:a8:a6:06:
8b:2d:6c:32:28:6b:db:fa:16:ef:32:3d:50:fe:b8:36:2a:d9:
02:cc:84:1b:fd:0a:ba:7c:d3:54:20:19:ea:96:ef:ca:8c:7e:
fc:45:fa:35:7e:ba:7d:b1:c9:03:09:38:2e:61:ae:52:06:77:
8a:3f:33:e3:99:48:d2:f6:ca:d2:bc:88:d7:d3:50:b1:10:13:
49:ac:e0:95:fe:69:aa:f3:ab:09:82:ae:bd:de:8c:b5:f6:69:
e0:64:40:8b:38:d0:f5:f0:6a:c7:75:c8:cb:9d:85:98:5f:60:
0b:86:0f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:59 2025 by rpki-client