Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
File: 9NavTeibuoEYlTzO6_s59FqO0bw.mft (raw, json)
Hash identifier: MsvT3dylfyjxhWNBqH/gC9UKnYS3gy32iahqjntiuQU=
Subject key identifier: C1:83:E6:EF:CA:11:23:FB:66:C0:50:6A:C4:49:1B:7C:2F:16:85:E6
Authority key identifier: F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC
Certificate issuer: /CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
Certificate serial: 019A4EF473E50151E1D6C728F31B3AE634A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:00:34 +0000
Manifest this update: Tue 04 Nov 2025 13:00:34 +0000
Manifest next update: Wed 05 Nov 2025 13:00:34 +0000
Files and hashes: 1: 9NavTeibuoEYlTzO6_s59FqO0bw.crl (hash: KgphdaPdJ9XNl78sGBBjelpCL0AM+lbvQwG1AsikUS0=)
2: RSBqMA8SK5hkaH899w74rpWOWzA.roa (hash: ZarbLd1gWH81UzY1+uoaATMpd5XCQStSn4LP/xfm248=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:73:e5:01:51:e1:d6:c7:28:f3:1b:3a:e6:34:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
Validity
Not Before: Nov 4 13:00:34 2025 GMT
Not After : Nov 5 13:00:34 2025 GMT
Subject: CN=c183e6efca1123fb66c0506ac4491b7c2f1685e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6a:77:e1:e6:68:d5:87:b3:82:de:fe:af:59:
3f:c0:b3:07:6c:34:d9:ff:d3:f9:bb:cd:42:fd:be:
43:4b:20:ff:1c:de:96:a4:88:41:3e:1b:b5:d4:03:
bc:4c:94:10:e8:68:86:1b:6d:01:3c:9c:fc:4a:8a:
81:de:50:be:2a:43:78:4a:8e:8a:0c:49:cd:34:cc:
0b:2d:08:30:f8:9f:e2:96:12:cc:f7:0f:4b:ad:f5:
50:84:fc:c2:5e:48:76:69:fe:54:82:37:54:ea:f1:
13:18:72:d9:bb:49:b4:d1:66:90:16:c8:86:2c:b8:
a3:8d:16:ac:ac:01:be:8d:a3:21:44:cf:dd:13:71:
33:21:19:7b:52:b1:a6:75:f6:02:77:e2:75:11:14:
87:e1:c8:21:af:7c:ba:c9:37:02:c2:6a:da:c9:00:
97:70:61:2a:79:69:4e:41:2c:4b:05:a1:5a:d4:2f:
5c:9b:41:55:ab:5d:3d:07:d7:2d:87:ec:71:cb:12:
bc:71:70:f4:f3:da:4c:cd:9f:bc:05:aa:56:52:bf:
72:bd:50:90:29:b4:db:88:da:47:da:6a:c9:e5:43:
c8:31:9d:10:45:60:bd:72:af:80:98:a8:4f:07:ff:
de:9f:b0:ea:9e:5b:1d:b4:6e:45:46:f6:1b:61:a0:
61:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:83:E6:EF:CA:11:23:FB:66:C0:50:6A:C4:49:1B:7C:2F:16:85:E6
X509v3 Authority Key Identifier:
keyid:F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:20:83:7c:25:ff:2c:0a:25:e9:4e:88:a8:65:57:38:97:5b:
73:e9:98:36:86:53:d4:6e:3b:a8:3e:4d:35:5d:d3:94:5b:f8:
c0:c9:64:40:df:3a:02:38:60:fb:93:f5:5a:59:96:9f:4f:56:
8e:70:77:ca:89:c4:92:1d:ad:f1:dd:19:7d:a8:ae:6f:5c:08:
76:0c:37:6d:03:75:dd:d3:e7:9f:ca:01:46:96:b9:b5:c4:f3:
77:2b:01:a8:c4:cf:4e:95:2e:5c:ce:db:10:2e:9f:3a:6b:fc:
d4:07:58:86:91:23:09:1c:8d:7c:c6:95:8b:ec:a3:4d:e2:c4:
d1:be:d6:8f:7e:66:9c:a6:32:7b:b3:c3:49:b5:96:33:b9:db:
26:7a:6b:19:bf:35:4f:2b:6e:50:dd:2e:ac:bb:4a:76:e5:8a:
59:47:46:36:b8:76:82:3f:d3:ad:f8:c8:6a:4c:64:97:d1:c1:
37:57:2a:52:30:3e:ca:4d:2a:54:62:3c:23:b7:f4:8e:e6:8f:
bc:56:36:16:b4:ea:b1:a0:1d:c8:8c:07:d4:f8:b1:31:40:fe:
10:6f:8b:8f:d9:63:5c:ee:38:60:1d:d6:b3:36:f6:07:ad:50:
45:7a:42:21:a6:76:95:4a:f5:4d:89:71:0c:8d:e6:80:29:ae:
72:55:1b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:05:25 2025 by rpki-client