Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: GdsrKklvEW6uUTAL7/prVeP4dHZodKIg7B4Iem3pqNM=
Subject key identifier: AA:59:06:96:8D:75:A7:1C:F3:66:52:6C:83:B2:6A:9F:A8:5C:81:49
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 019A507483E1FF338BB06B5411062728BAB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 20:00:04 +0000
Manifest this update: Tue 04 Nov 2025 20:00:04 +0000
Manifest next update: Wed 05 Nov 2025 20:00:04 +0000
Files and hashes: 1: FlduQKMxPetRFEf3K99xaEoZ7QU.roa (hash: 2r4TM6IwMUnx2aicUZFPb2Iq+BV2xdiFUdzdromgaYg=)
2: aX_b4UaRWSPBF6_UJgMjS5N9O-c.roa (hash: YV9fhTwKDLCkfBPeMSZl5AvTP7h0hbaT54bWMdXdAUo=)
3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: PzLg/czuTziywIlstrHGKPJEPHQNqihAfb/jM27X8TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:83:e1:ff:33:8b:b0:6b:54:11:06:27:28:ba:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Nov 4 20:00:04 2025 GMT
Not After : Nov 5 20:00:04 2025 GMT
Subject: CN=aa5906968d75a71cf366526c83b26a9fa85c8149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:27:93:d4:59:d5:7c:28:b8:b8:1a:29:58:83:
39:a5:65:6f:12:3d:02:09:0a:dc:2a:9d:2c:f8:f7:
4f:73:ee:a3:bf:b6:d7:d1:e3:af:85:90:a9:c2:38:
af:ee:e0:c1:44:1d:8e:58:8c:55:2d:99:d4:8f:e2:
b8:22:fd:21:57:c6:e6:48:41:4d:34:48:69:2e:7e:
a8:f7:fd:d0:ca:65:61:73:35:f0:0c:72:5d:cd:b2:
45:14:a5:ab:0d:d9:7e:7c:74:62:fd:fe:05:50:68:
c7:9f:5d:46:b1:b1:df:ad:7d:01:11:1e:ca:5f:b6:
7c:57:3d:e1:59:7c:b1:3a:7e:e0:4b:f3:ff:39:ad:
ad:55:93:e3:d8:71:fa:52:ce:28:c7:c6:ff:a1:1c:
6b:d0:d7:78:22:32:77:73:e5:5d:24:60:f0:2b:ba:
e6:bc:a5:30:ad:e7:76:07:41:72:5f:28:db:a8:cb:
f9:35:0c:c5:71:15:6f:71:0b:03:fe:05:0a:11:e3:
e2:bb:2c:99:cf:69:42:25:4f:63:ef:7b:cd:d5:e7:
6f:38:27:9d:57:54:a1:45:c1:c6:a7:d5:9e:8e:d9:
be:ae:47:2a:7e:80:32:9e:1b:73:8b:bb:29:d3:b3:
e0:04:98:ad:4d:90:8c:19:45:e7:4e:eb:85:52:3e:
14:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:59:06:96:8D:75:A7:1C:F3:66:52:6C:83:B2:6A:9F:A8:5C:81:49
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:4e:9f:83:dd:8a:bd:30:69:a1:57:63:66:40:99:74:4a:8f:
8a:1e:b6:91:d2:70:d5:5c:2d:35:d1:65:49:c2:24:c5:68:07:
a2:c7:04:39:cc:73:de:01:09:f7:d0:82:b8:2e:01:ce:cf:3e:
ef:79:6a:32:1d:f5:7a:e6:c2:d1:f4:fa:0c:db:63:e1:47:8d:
98:8b:ad:e5:3c:ea:03:bb:fb:a0:21:05:86:74:59:bb:42:02:
8f:ff:0a:d5:4c:6c:e3:1d:05:7c:5c:00:30:08:54:b9:56:a6:
ef:91:e5:7f:b5:72:dd:ba:39:9c:94:96:47:8c:76:e4:ce:01:
62:e1:5e:9d:c7:5d:bc:d8:87:7d:60:54:2b:14:9c:bf:8e:89:
50:c1:34:22:f9:3b:5f:ec:17:6b:36:93:7c:1c:52:3d:52:07:
83:a2:f2:2a:39:e3:77:62:60:2d:c3:ed:e2:23:5b:2e:78:74:
df:3c:f8:f9:e3:bb:c4:86:0b:6b:72:37:99:5f:6f:7b:a9:98:
db:4a:64:ef:7d:52:7a:b9:f1:60:15:9b:08:4c:c3:be:6e:43:
3b:c2:1c:a8:68:f6:eb:46:ef:2e:82:c9:f8:8b:05:f4:c0:ca:
5c:1a:ca:42:47:3f:69:ba:0b:a9:bf:95:c2:f0:4c:18:0a:85:
1d:35:c4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:46:32 2025 by rpki-client