Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
File: 9l50I9P3sbLnrMG6HO4CQLfWedY.mft (raw, json)
Hash identifier: hnBzu6v3aOdSgnVOt7iVooVKUHYHv0WiYmKCF0qbX84=
Subject key identifier: CC:0B:60:7A:FB:BC:81:93:23:36:A8:D3:48:7A:34:EB:4B:6A:88:CB
Authority key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Certificate issuer: /CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Certificate serial: 019A4E4FCF90A9BD895018C4CD09D20C0FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 10:00:44 +0000
Manifest this update: Tue 04 Nov 2025 10:00:44 +0000
Manifest next update: Wed 05 Nov 2025 10:00:44 +0000
Files and hashes: 1: 9l50I9P3sbLnrMG6HO4CQLfWedY.crl (hash: sEl1PppNrTxAZ+4OqEn3kFN5Cp/NyOEtjZy42McUfVs=)
2: FAJKZDo6nLNipexAJT8L9FAGXrE.roa (hash: NVIidy7uobZX7hs2QRQ052g+pZeZGSMOgKQJmZ0nDuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:cf:90:a9:bd:89:50:18:c4:cd:09:d2:0c:0f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Validity
Not Before: Nov 4 10:00:44 2025 GMT
Not After : Nov 5 10:00:44 2025 GMT
Subject: CN=cc0b607afbbc81932336a8d3487a34eb4b6a88cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:66:ef:9d:ed:81:bc:b6:5c:c8:6c:ba:e1:
f3:b5:64:3a:d5:e5:5d:3c:ee:17:34:3b:7c:9f:82:
54:e3:ee:9e:a2:56:66:83:44:86:d7:83:2c:de:dc:
76:d3:ea:04:b3:6d:4c:36:32:59:34:f1:aa:6b:ac:
7e:4e:5b:33:8c:ad:d7:2b:72:51:6b:c0:3f:99:f2:
e8:5a:ae:b1:59:e3:b1:1f:5e:dc:93:1a:eb:81:8b:
d8:31:31:c5:6b:5a:b3:ab:16:58:52:43:74:20:17:
3a:b8:4b:57:79:53:56:fa:9b:aa:45:3b:0b:c9:17:
04:1d:bc:55:71:99:12:d8:e8:33:4a:0a:bd:85:4d:
72:52:12:0d:a2:41:42:d2:b9:96:db:d7:47:83:46:
d1:da:0b:f6:3a:17:4f:37:d8:a4:96:b3:04:4f:3c:
42:2b:11:9a:7b:c3:12:e3:d1:6b:b9:cd:32:4e:be:
ea:0e:82:4f:40:10:f8:6f:cb:c5:9a:de:3e:da:3e:
f1:8f:61:1c:92:9c:ec:86:b1:c9:a7:61:e1:fa:89:
53:f1:b7:b7:cf:04:f6:e8:41:2d:6e:a3:71:5f:3b:
23:55:42:e4:13:8a:35:a4:0f:b0:89:df:28:1d:f5:
1f:b1:33:c7:0f:3c:c4:c3:52:cc:af:49:ab:ea:8c:
e8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0B:60:7A:FB:BC:81:93:23:36:A8:D3:48:7A:34:EB:4B:6A:88:CB
X509v3 Authority Key Identifier:
keyid:F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:68:ce:1f:ae:3a:f0:dd:77:20:57:19:9e:c5:8c:7f:29:39:
49:87:24:5d:b5:f2:39:e6:fb:a4:c9:49:97:d8:ee:1f:c8:02:
05:5b:c5:f7:6d:85:73:7e:34:b6:02:b1:8e:7c:84:9f:78:d2:
7a:ca:ae:cd:7c:58:c0:aa:8e:29:73:3f:bb:a6:a9:d3:ad:27:
06:0b:e6:9d:e9:b6:94:12:1c:b6:ee:b7:48:4e:c2:fe:f2:d0:
51:5d:db:5d:c9:80:a8:55:52:a4:fc:22:c9:d4:1f:10:c2:31:
86:8c:6e:13:bb:4d:56:c2:b6:e5:4b:ca:fc:ed:f9:d7:21:1c:
e5:77:59:7e:cc:75:3b:71:ec:f1:4d:f7:f0:1d:ae:93:28:a8:
e2:95:aa:77:ad:c1:6b:10:16:fb:e3:84:eb:1a:db:5d:72:b2:
13:77:53:0b:36:24:e4:15:91:03:30:e1:b2:73:09:2e:f4:9a:
84:a0:bb:19:1e:6b:07:45:78:7e:d4:e1:9f:b4:8d:11:57:a2:
a6:e1:ca:df:25:3a:39:1c:cf:bf:c5:54:b5:59:ae:41:97:9f:
69:6f:85:47:95:52:b5:a1:0f:51:9a:0a:63:26:26:de:25:cb:
55:a2:fc:63:b3:d1:d1:d8:45:6f:2b:e0:61:14:a7:8c:2b:19:
f8:c1:ff:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:14 2025 by rpki-client