Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: ZunFN5V3VfXh4d6JLHO8nyljr9oitRKhxEyWIah2sFI=
Subject key identifier: 38:39:92:19:6B:4B:D4:EA:F8:0B:EB:AD:B5:31:26:86:39:EF:B1:CD
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 019A4EF5806275ADA30E4E996173216C82E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:43 +0000
Manifest this update: Tue 04 Nov 2025 13:01:43 +0000
Manifest next update: Wed 05 Nov 2025 13:01:43 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: iEK3E7MxHwkFRJGvt5Ypr1xByTLDrp2iQi2VUS4lg7k=)
2: HmMkZMs_L5qVhevMb58XTv8ACos.roa (hash: p6Cspm4w36V6nse6CJ6sMJJCGrV41tHwZhdpXbj7GQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:80:62:75:ad:a3:0e:4e:99:61:73:21:6c:82:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: Nov 4 13:01:43 2025 GMT
Not After : Nov 5 13:01:43 2025 GMT
Subject: CN=383992196b4bd4eaf80bebadb531268639efb1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:58:91:d0:6e:8d:e8:8b:ea:2e:94:8d:31:88:
a2:5e:08:ad:d5:38:c1:e1:cf:c4:0c:7b:07:5a:49:
ce:6f:4c:ae:25:25:4f:33:41:88:e8:aa:bd:64:de:
24:05:dd:f8:4f:6f:8d:a5:37:63:d8:e6:1c:87:3a:
c3:c0:69:fe:07:ef:d4:77:51:cd:49:36:f4:81:0b:
aa:65:92:09:f8:28:ae:0d:4e:6c:1c:1f:10:0b:e2:
9d:d4:6b:c6:7f:f3:07:71:65:0c:8d:a0:1f:e0:c8:
e0:80:3e:8d:0a:c4:a2:f2:96:20:31:12:98:9a:62:
43:d2:fa:4d:11:f6:8f:4f:57:94:d6:78:76:9d:6c:
14:17:6b:93:27:1b:0a:43:1b:d0:17:f7:91:24:ca:
24:d2:58:6e:d7:86:33:4d:c6:27:4a:82:0e:bf:23:
72:0a:af:35:a7:13:2f:ab:0f:cb:9e:b1:75:b0:1c:
f3:c6:94:bd:34:09:5b:80:7b:71:a1:01:1c:bc:26:
11:de:e0:57:1b:4a:0b:30:e9:9f:6e:35:b5:80:07:
17:86:d2:f0:5f:83:1c:b0:52:39:10:f0:be:71:cd:
e5:9c:ad:12:2b:9b:25:24:f5:b0:4b:81:5c:59:04:
03:a8:a3:d0:4a:69:05:c1:0e:7d:4f:21:9c:e9:20:
0c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:39:92:19:6B:4B:D4:EA:F8:0B:EB:AD:B5:31:26:86:39:EF:B1:CD
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b6:a4:eb:ba:b4:01:01:b2:4f:2e:aa:88:63:10:5e:58:3f:
62:ee:6f:ee:7f:c3:46:df:3d:74:2d:26:1a:aa:cc:37:03:2a:
fa:51:df:b8:94:37:c4:c1:9b:0e:ed:a2:a3:21:a2:b6:37:cd:
0c:e8:75:79:43:d8:51:65:be:44:30:aa:b8:35:60:d6:b3:08:
c2:6e:94:a5:61:b5:f0:23:56:f8:63:97:ba:11:96:58:ed:c5:
29:39:13:57:6e:b1:5c:7d:18:66:7a:2d:25:28:eb:b4:28:30:
dd:73:bf:b8:a8:80:ec:17:3b:36:1b:29:8c:05:a9:bf:56:b8:
fa:d3:f3:5c:71:1b:58:cb:e6:39:e0:c2:6e:ff:02:f6:b9:1d:
0c:0c:c5:f5:26:4b:f4:a8:a9:7b:eb:ae:2d:38:25:09:31:b4:
20:c4:fc:07:af:0d:0a:c9:f0:6f:8d:85:bf:3e:35:63:8f:f6:
80:9b:61:25:c5:c7:08:ff:e5:04:2d:b2:75:c0:86:1f:79:27:
cc:b2:a3:7b:e4:ce:85:cc:9c:71:14:9c:5c:24:86:77:2f:75:
53:3c:59:c0:67:4f:7b:b2:59:e1:6b:ff:cf:88:a2:ef:a2:ef:
31:ba:f3:f1:00:2a:4f:c8:fc:74:45:4f:9e:37:67:75:49:0c:
97:84:dc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:14 2025 by rpki-client