Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
File: 1-cSsxnpLABNVenTs5mQfT5R1_y0.mft (raw, json)
Hash identifier: AFGiwhrRSTh4bIMp0hKriJ0qTDVdWXJokPJ5NEA2YDE=
Subject key identifier: B8:66:1D:B5:7B:93:1E:F0:D2:D2:F3:78:AC:7C:62:8E:A0:E4:3D:61
Authority key identifier: F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
Certificate issuer: /CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
Certificate serial: 019A4D74755E2227C7800B928DF380BBF1A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:01:09 +0000
Manifest this update: Tue 04 Nov 2025 06:01:09 +0000
Manifest next update: Wed 05 Nov 2025 06:01:09 +0000
Files and hashes: 1: 1-cSsxnpLABNVenTs5mQfT5R1_y0.crl (hash: 7OJhWAFVcGKRx2Ffyne/uJhn3+IMNFh+hImj/97wvN8=)
2: 9KxQR6j2axabNDMZ1-8dgcNiaM8.roa (hash: 2rUs2SoRDiW7TeHLXoH00fOWIiSClvCYzvEbW1LWNms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:75:5e:22:27:c7:80:0b:92:8d:f3:80:bb:f1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
Validity
Not Before: Nov 4 06:01:09 2025 GMT
Not After : Nov 5 06:01:09 2025 GMT
Subject: CN=b8661db57b931ef0d2d2f378ac7c628ea0e43d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:99:f5:4f:ba:3b:30:11:37:5c:0b:9c:b8:f1:
4e:4a:dd:49:8e:3b:b0:f2:3b:18:f3:f1:c0:7f:2b:
d0:5c:68:07:8f:a1:99:5d:fa:fd:69:81:1d:56:7d:
40:96:c0:92:52:16:8e:d6:2c:b8:d4:68:f4:0e:6a:
8a:ab:2e:94:f5:b1:39:83:6f:aa:45:24:31:2e:f9:
84:49:b6:aa:a1:a5:4a:c6:6f:ab:ce:bb:80:ae:2f:
e6:cf:a3:dc:63:e7:84:6d:17:ae:47:21:d0:3c:60:
38:d5:c1:35:93:cb:12:f1:21:72:18:ba:fe:96:48:
8a:72:38:74:a0:5a:af:37:7f:59:f8:37:74:5e:9c:
ac:e1:f5:da:4c:e7:8b:bc:81:82:0c:d8:37:25:1a:
2f:d0:30:cd:0a:27:d9:9b:6b:61:1a:82:7b:19:34:
fd:ac:23:58:92:92:f1:ca:e9:f3:e3:ba:62:dd:3d:
7b:b6:f7:87:36:c6:64:c7:ee:d0:ad:f9:57:f4:ec:
75:d9:1d:63:d6:04:ef:27:46:79:bb:f9:64:a9:b9:
cd:e7:9d:22:f6:91:86:c8:1e:ca:5f:5e:d4:21:13:
01:e6:96:3e:4f:f1:31:8e:c4:e7:db:31:6e:c9:4d:
83:cb:18:e1:b1:aa:e0:bc:64:08:f7:45:a1:e5:ec:
20:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:66:1D:B5:7B:93:1E:F0:D2:D2:F3:78:AC:7C:62:8E:A0:E4:3D:61
X509v3 Authority Key Identifier:
keyid:F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:c1:de:d7:7e:3d:f1:ac:bf:8b:23:fe:be:95:a0:fd:0c:90:
08:9a:95:a8:36:22:cd:3e:3a:fd:e6:8f:d8:70:7f:5b:72:22:
23:77:97:f9:ca:fb:ed:aa:a1:1b:38:b9:7f:ee:99:7e:04:95:
8c:f9:81:7e:e5:2c:a1:ee:6c:ef:72:03:2f:dd:73:c3:28:ac:
b3:75:1e:1e:2e:27:9a:ca:31:4b:c8:9c:fc:8e:c2:13:94:79:
49:75:36:ad:b0:d5:73:2d:8a:62:46:99:65:82:f3:2d:72:23:
3a:b6:9c:65:1d:52:10:04:ad:95:d1:75:9b:b9:42:84:9b:ed:
d0:83:91:de:85:a2:3f:5f:95:59:39:bf:ac:49:d8:83:e3:b5:
f8:1e:91:24:64:5f:fe:0e:cf:86:63:e9:e4:fc:61:31:9d:04:
97:4e:22:13:ed:f1:58:ab:5b:0a:2b:06:22:e3:0b:3b:9c:92:
83:dc:53:4c:1b:aa:88:1d:5e:5a:3a:d9:14:a8:81:b5:e1:5b:
dc:28:29:85:63:19:be:8f:92:07:15:8a:32:af:93:c9:91:3d:
7b:99:7b:65:d7:7e:e1:83:0a:34:1d:a9:dc:90:b7:e8:a4:3e:
0b:fe:31:05:e0:fa:77:c1:72:8d:18:c1:f8:60:66:d3:16:39:
1d:11:17:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:21 2025 by rpki-client