Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
File: 9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft (raw, json)
Hash identifier: TbB0hjwvpvXEEsug/Jm4LS23RlXh3SX7GSyEx8sPgD8=
Subject key identifier: 94:BC:14:14:F7:C7:D3:FD:2E:9E:68:0E:80:8F:7C:9E:2B:CA:FC:7F
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Certificate issuer: /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial: 019A4E11D734C3F67BB1AEE676D2ECC47CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 08:53:03 +0000
Manifest this update: Tue 04 Nov 2025 08:53:03 +0000
Manifest next update: Wed 05 Nov 2025 08:53:03 +0000
Files and hashes: 1: 9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl (hash: aRPKDOIP3+7RGimaB2cI2ha5LhSSUqg+d9t3v/UqUho=)
2: DrQmBo0FJlrJoVNz6cvjHGXIPbw.roa (hash: jPCQqOInn6qb0ZqW36PJZt+zluVilNLrZjQ6O21hgVE=)
3: R8QraD-m7wXpWIuIV3haEHveook.roa (hash: zFQ1Z3tf6Jdw4FicGSs9DpORVv0nHjS3PMNcpQi+avg=)
4: g2JKZAWrQ9PgQcHwyGvJzsNe0xU.roa (hash: llEQjqrBPaKPzDBBAEYIMH6n/Pi/c4BrlP8wYuBkdKU=)
5: gWTmtVhx7E0cSGJMWbh0KdkVJLk.roa (hash: Ti/CZSFOtoIaq484ozrtbBvj7jlxko/Yt5KtEt0muLk=)
6: wnjBzzTh1nOLtHn-MycT-V9xs1U.roa (hash: vhvfmbXLzxRQ2h0uOUjGMbl4v8ffZL2j3QGUBdIR1YM=)
7: xFdoszmO-lXmpUO23UStYAmjO1o.roa (hash: Eg3ssA00t5E6u1ZRWRpZdswo8W1K9XAdmFIVhN3Dt0M=)
8: yNgJ74PHW6j6ShCLYVR80g-qs28.roa (hash: NFcociFY8RbRnIP6feXbGFrUtff0WpEOuuopuN1v+Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:11:d7:34:c3:f6:7b:b1:ae:e6:76:d2:ec:c4:7c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Validity
Not Before: Nov 4 08:53:03 2025 GMT
Not After : Nov 5 08:53:03 2025 GMT
Subject: CN=94bc1414f7c7d3fd2e9e680e808f7c9e2bcafc7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:27:a6:a5:c4:d1:a3:dc:9f:c6:02:1a:68:
97:47:33:74:88:04:1d:8b:5c:5a:ee:27:b7:ff:31:
e6:b4:1f:ce:7f:6b:2b:44:0f:de:a6:c3:f4:3d:90:
cc:ef:63:d0:53:50:46:e0:e2:1c:db:58:9d:a4:87:
b6:42:52:60:8f:f7:dc:2a:49:f0:ff:c1:d1:38:c5:
ca:3c:af:af:7b:eb:a1:f8:dd:e5:27:94:16:e7:b6:
a8:9d:7e:55:e7:7c:4d:6d:14:30:f9:63:7e:97:99:
56:42:2f:c6:a7:d4:8a:e8:db:4c:95:0c:3f:74:ce:
4d:67:1a:c4:85:a4:26:3b:46:60:99:ab:41:d1:84:
14:a4:46:2d:56:4d:15:2b:16:ea:64:e4:c3:71:5f:
84:6d:ac:74:ae:ce:d9:1a:28:3f:6f:dc:20:b9:59:
1b:d5:ae:59:20:f9:af:3a:77:fc:2f:df:76:8f:8d:
25:7d:d5:fa:d3:28:61:62:6e:ce:e0:d2:7f:e2:ff:
b2:04:91:09:47:85:78:26:af:75:01:a8:d1:28:ba:
16:62:d2:fb:df:0d:8a:a1:fd:5e:c9:ed:2e:27:af:
ac:49:0f:46:c9:80:cb:5c:70:44:62:1e:74:b0:d8:
41:74:1a:48:65:32:22:4e:7c:b8:7a:f0:3c:f5:fc:
e9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BC:14:14:F7:C7:D3:FD:2E:9E:68:0E:80:8F:7C:9E:2B:CA:FC:7F
X509v3 Authority Key Identifier:
keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:02:c1:22:92:20:c9:f9:fa:d5:9c:23:c8:d2:51:a5:f8:87:
bd:11:b5:04:84:29:37:a1:75:af:7b:27:bb:0a:e0:3e:e2:49:
f0:07:4f:31:4d:5e:83:9c:88:38:42:bf:a5:50:e2:58:89:64:
bb:3e:00:7b:00:31:44:7b:f1:fd:70:bf:db:9e:0e:d9:05:d3:
63:7d:7c:25:db:67:fc:2f:89:5a:0b:5f:f3:dc:c0:97:60:53:
75:a5:04:c5:a7:b2:c2:d2:8a:44:60:ce:ae:47:42:22:32:6b:
26:2e:65:0d:80:32:ff:e0:90:41:5c:c9:b7:70:af:28:b7:2d:
40:5a:72:ed:78:eb:9c:5f:bd:b0:d5:db:c8:05:2d:98:07:ae:
ec:0d:45:ef:b5:52:39:28:11:ea:93:c1:23:ab:d4:5c:1b:7b:
ce:0a:ff:79:c0:53:0f:b8:73:75:f3:ad:a3:a7:72:b3:51:64:
73:01:9d:62:7e:f3:82:1c:04:e1:bb:a8:e4:5a:b2:e3:3b:f8:
8a:8a:9d:00:33:67:12:59:23:bb:41:d5:95:00:18:5f:33:ff:
95:29:4f:b4:0d:cf:b3:c7:23:2a:51:cf:d4:1a:f9:f1:9f:4e:
a9:ca:03:29:79:3f:ae:9d:3d:c0:fd:7f:2c:2e:59:88:7c:31:
9e:ee:85:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:52 2025 by rpki-client