Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
File: T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft (raw, json)
Hash identifier: 4Gl7u10Lb1KUKIJa85D5xgjW/h1rNIRMkRCLjMZLtA8=
Subject key identifier: 9A:95:45:1D:83:FA:E7:9E:E4:B8:ED:58:F0:37:F5:E3:E7:F5:50:6B
Authority key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
Certificate issuer: /CN=4fd6646c93c2974789ecef7b444656ee64161729
Certificate serial: 019A4E4FD9A46560E3FB7EE41BC376C62C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 10:00:47 +0000
Manifest this update: Tue 04 Nov 2025 10:00:47 +0000
Manifest next update: Wed 05 Nov 2025 10:00:47 +0000
Files and hashes: 1: HSxOpF8LeaRif88_oEZ4y7MBldM.roa (hash: n8DGCpnE1FwgPJK7R+0dK8cIDb4XdG2XSYHd7OuwJKU=)
2: T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl (hash: BgybzdxJy2MJEf3FZek50hkFz6QXWnvBWPpkgk2wp3g=)
3: W44szkVz920V6-JywE9vsVlLyvY.roa (hash: CydWhda8ET4rgRmemVZtuScSzfI/qh7Sm6ASW7UNUoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:d9:a4:65:60:e3:fb:7e:e4:1b:c3:76:c6:2c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6646c93c2974789ecef7b444656ee64161729
Validity
Not Before: Nov 4 10:00:47 2025 GMT
Not After : Nov 5 10:00:47 2025 GMT
Subject: CN=9a95451d83fae79ee4b8ed58f037f5e3e7f5506b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9d:e2:46:e6:34:38:de:81:7f:bc:3b:70:1c:
4d:8d:be:53:ab:09:d7:ef:60:80:f2:96:77:4c:77:
e8:81:b4:cd:d1:b2:64:a1:51:44:59:ce:03:9a:15:
68:1e:d3:f0:54:31:57:e1:75:da:49:6b:47:c9:a9:
23:bf:0f:d5:bf:98:67:b4:37:b3:7b:8a:11:6a:e9:
33:b9:a6:48:f9:94:9e:f6:f7:e1:a7:a9:22:ce:8b:
05:4c:fd:a4:c7:b6:c2:64:f3:43:c8:54:b9:93:dc:
23:77:32:4b:86:c8:15:33:12:a8:31:66:c3:55:c5:
fb:4d:a2:94:e2:3d:7a:82:79:90:9e:89:94:f2:11:
0a:12:23:db:87:70:39:e5:cc:f9:48:fc:4f:b5:7e:
dd:30:1e:06:69:24:c1:01:c3:5f:7a:f4:f8:e2:d0:
d9:be:f7:ca:49:a0:a8:a0:c6:b0:a8:72:0a:88:96:
ad:c8:38:f7:8f:2b:22:c2:b6:b6:6c:a0:56:5e:69:
8c:29:34:1e:36:5b:1c:f0:ea:c6:8a:10:ce:fa:71:
f6:84:59:bf:ed:eb:a0:71:0b:54:00:35:93:51:e3:
69:2a:a9:f1:b0:18:3e:44:0b:10:8e:bf:83:35:37:
0f:c7:e9:c2:52:ae:93:24:d2:11:10:a1:37:e4:77:
dd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:95:45:1D:83:FA:E7:9E:E4:B8:ED:58:F0:37:F5:E3:E7:F5:50:6B
X509v3 Authority Key Identifier:
keyid:4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:da:6d:3b:20:ce:c6:10:5e:76:e8:70:cc:05:c4:97:9a:ef:
a6:67:e8:b7:3c:8f:c6:15:00:da:88:47:5a:34:f9:43:a9:6f:
8a:72:f3:5c:4f:7c:6d:8d:ec:ca:fb:53:da:51:53:08:b3:eb:
c7:fa:fe:e3:64:68:88:c0:d1:97:b8:ed:6d:e7:ee:f9:e3:83:
4e:b6:42:00:f5:f0:f0:f6:14:dd:36:dd:5c:d0:4f:e0:e4:7a:
e0:d6:d6:d5:b5:ce:ee:bf:6b:3b:bd:57:df:1c:e2:d6:96:b8:
18:76:19:0c:aa:40:57:c8:34:38:44:88:38:5d:92:67:74:88:
d0:04:fb:0b:40:d8:04:f3:8b:5d:10:8c:84:fe:a6:88:f4:65:
7a:95:52:8f:0c:f4:48:47:ee:2d:23:96:ce:69:87:93:b0:9c:
cd:31:1c:60:d1:1a:df:5d:85:4e:5a:a7:8e:1c:60:7d:a5:d3:
0c:c4:e5:b7:a1:6c:3a:09:c9:46:d4:33:14:9b:05:2e:56:77:
17:b2:6d:7b:8d:9a:65:16:87:4c:1c:53:78:ad:48:37:65:ec:
be:c9:bb:d8:5c:50:6a:02:b8:48:27:8d:1a:a0:27:1b:bb:38:
18:3c:4d:db:98:f6:e4:96:b2:a0:94:92:94:cc:a8:1c:89:32:
30:ee:fb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:56 2025 by rpki-client