Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
File: 9XIyXS0hl0ZpxIj566pru5LNX-0.mft (raw, json)
Hash identifier: fcMODSCMKyVueXHDcJHrjk64hDvl3o6V7jr2GANv3BM=
Subject key identifier: 90:9F:DB:97:0E:53:F3:8D:F0:C5:35:89:FF:CE:5C:9C:F3:39:B6:AE
Authority key identifier: F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
Certificate issuer: /CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Certificate serial: 019A4EF5394A2D385C8C912AA1845582524F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:25 +0000
Manifest this update: Tue 04 Nov 2025 13:01:25 +0000
Manifest next update: Wed 05 Nov 2025 13:01:25 +0000
Files and hashes: 1: 9XIyXS0hl0ZpxIj566pru5LNX-0.crl (hash: cY8U+3CyJbDo8CsrQ7B6EkQiT8hrdZg0d86NiJcq/vo=)
2: cBAS0GUhF4mz2fqaOHRlVgN3CFs.roa (hash: Lp1yFkf1vOWXjEEeUSdOv9NCeGF4SfR636ANc/ZvdMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:39:4a:2d:38:5c:8c:91:2a:a1:84:55:82:52:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Validity
Not Before: Nov 4 13:01:25 2025 GMT
Not After : Nov 5 13:01:25 2025 GMT
Subject: CN=909fdb970e53f38df0c53589ffce5c9cf339b6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:16:79:8f:3e:d4:bb:2e:82:48:c0:a4:05:04:
52:44:ea:c3:16:e8:d9:7a:07:e0:a8:c3:83:d4:d9:
1b:a4:49:b7:30:fe:74:bc:5e:41:4a:57:77:56:92:
49:af:b8:42:4f:64:f2:d4:2d:56:4c:54:dc:fc:cc:
c0:32:ef:dd:5f:b6:5b:bd:f9:f2:73:2f:65:c9:e1:
c1:f5:09:88:44:e2:24:50:e6:34:d0:97:cf:02:b9:
83:66:f6:0b:22:05:ca:7c:3d:7b:d1:73:ec:cb:6b:
cb:df:af:52:cc:87:d3:a2:36:64:9a:c1:9f:63:85:
d2:77:53:74:1d:cf:68:dc:75:54:2d:1e:36:45:33:
80:c2:c3:3d:b0:35:bc:17:03:2e:9d:c0:83:92:cd:
89:19:56:35:d3:38:02:24:b3:76:0b:36:00:67:4f:
0e:30:bd:ef:cb:65:34:ad:bd:44:ab:eb:ee:b1:7d:
cd:d1:e4:7b:01:a3:c4:02:7b:52:e2:fa:ae:03:a4:
81:32:cc:57:57:82:79:45:7d:ee:b3:4e:fc:90:83:
c5:bf:f8:1b:2e:83:87:9a:54:16:b7:2e:24:20:95:
0e:5e:54:28:9e:31:8f:cf:7a:1c:03:d8:5e:39:c9:
92:1b:e9:03:1e:71:ed:25:e5:69:c6:80:b2:da:71:
e8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9F:DB:97:0E:53:F3:8D:F0:C5:35:89:FF:CE:5C:9C:F3:39:B6:AE
X509v3 Authority Key Identifier:
keyid:F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:fd:8e:4a:df:79:64:1a:60:ff:dc:fc:dd:53:2f:f8:8b:47:
cf:0e:cf:16:7e:f1:13:4a:49:c8:38:38:95:33:13:9a:b5:6a:
d9:53:41:c0:7f:ff:3b:be:f4:c1:c3:b5:3f:6d:df:b0:e4:94:
4e:26:cd:36:94:53:b0:e0:1f:9a:73:60:3d:5b:76:93:4d:b1:
24:02:16:ef:dd:16:6f:ae:f3:ce:df:4d:f0:6c:2f:34:3e:0b:
ec:c2:32:94:43:2f:89:a1:5e:54:ae:60:69:02:4e:eb:80:7f:
5c:d0:0e:fa:13:c3:53:94:00:83:81:f9:3d:47:d4:c4:c5:56:
ed:6e:f3:7c:41:51:70:8a:bd:65:be:cd:6a:56:9c:84:80:81:
32:d9:c2:52:9f:d1:61:cd:21:00:0a:29:56:d2:a6:17:79:85:
06:b4:ae:38:42:39:fc:d0:68:6b:3d:c9:1c:14:ef:d3:6b:c3:
94:65:5b:39:c7:1a:d6:ae:87:04:31:a3:a8:99:c8:bb:ee:f9:
1d:1a:67:1c:7b:2c:b8:d2:64:80:88:3b:b4:cd:7e:5d:a3:2a:
34:95:1a:dc:3d:94:9c:fc:f1:3e:a2:3b:42:98:41:d5:e2:54:
45:fb:48:e5:9c:89:b6:89:27:8d:a1:67:82:84:e7:f7:c3:91:
17:7a:8e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:15 2025 by rpki-client