Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
File: 9UPqUocUidhqqcpcoMKXyIq4KrY.mft (raw, json)
Hash identifier: O15+ancwnjaLrf5dzOwggzWhl+JA+1PSlv8juYXn+qY=
Subject key identifier: 5A:31:D7:91:22:26:8F:32:60:9B:6F:C6:92:D9:07:26:3E:A9:BC:B5
Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
Certificate issuer: /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Certificate serial: 019A4D73DF0BF586CFA582E1CB837A7B61E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 06:00:30 +0000
Manifest this update: Tue 04 Nov 2025 06:00:30 +0000
Manifest next update: Wed 05 Nov 2025 06:00:30 +0000
Files and hashes: 1: 9UPqUocUidhqqcpcoMKXyIq4KrY.crl (hash: qRTK0XiYx/fJX0PlPtiatyqyQPB/7b4VgsHixKLCINA=)
2: FNrF4gJ9GeSqn1QNR00c9Q4ygYg.roa (hash: 2ncm1gP0ao8l2RvVLkDskRllvyDwCE2AZXVvFGp+UKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:df:0b:f5:86:cf:a5:82:e1:cb:83:7a:7b:61:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Validity
Not Before: Nov 4 06:00:30 2025 GMT
Not After : Nov 5 06:00:30 2025 GMT
Subject: CN=5a31d79122268f32609b6fc692d907263ea9bcb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:2a:76:3f:22:ca:eb:cc:6a:08:98:f0:03:70:
f2:70:52:a6:fa:2a:18:6a:b7:3d:3f:a5:e0:30:c8:
00:0f:cd:1f:3f:e2:53:9a:dc:7b:7d:6b:9d:fe:e3:
93:ea:3a:18:04:d7:35:4b:51:79:07:a2:0f:f1:ac:
30:dc:77:55:9a:dd:2a:8f:fd:b3:d0:9f:0d:11:50:
07:37:33:16:e8:c5:2f:b7:79:c5:6d:44:d6:d8:ac:
d2:9c:a3:28:a9:9d:fc:2a:f2:69:38:21:95:a5:3e:
9b:19:ec:d9:59:82:6c:44:09:1e:c7:34:4f:53:75:
98:ac:49:53:de:92:4d:b9:32:cf:87:8b:a3:dc:09:
52:cb:a5:60:24:5d:ec:09:c7:b3:38:0b:61:f7:72:
5a:aa:e4:81:2c:58:93:14:5b:5b:32:36:22:32:24:
66:f8:ca:55:55:89:0c:15:5b:a7:9a:8f:ec:9f:ae:
11:79:e3:7d:e7:95:75:ca:c3:bb:35:9e:5f:21:55:
39:d0:82:4b:8b:bf:53:5e:7a:e2:36:2b:44:3f:53:
a7:b1:b9:a4:b5:b1:0e:e8:f1:d2:c1:e9:5d:e5:76:
1b:e6:19:7b:cd:55:53:a0:f3:4d:b8:c2:cb:1f:12:
65:94:4d:d0:a5:c4:16:97:d7:a9:05:ed:19:3f:eb:
71:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:31:D7:91:22:26:8F:32:60:9B:6F:C6:92:D9:07:26:3E:A9:BC:B5
X509v3 Authority Key Identifier:
keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9c:4f:ec:ab:e2:64:8a:c3:80:06:53:8e:61:bc:ec:87:6e:
9e:73:36:a3:d1:f9:c5:a1:7e:dc:25:ea:ad:6e:c5:c5:06:be:
cd:21:11:00:45:c4:93:a0:f7:f7:47:5e:d4:f9:a2:61:01:48:
4d:bd:9e:fa:eb:33:ab:1d:58:65:cf:57:9f:c2:44:4b:01:5c:
1b:55:37:4e:ce:4f:4c:e4:6b:0e:6a:b4:48:95:09:24:ac:f6:
85:a8:06:2a:59:eb:5b:4f:06:96:91:1e:b1:74:62:2a:9c:80:
a1:f6:49:62:3a:fe:1e:76:36:e5:5a:b5:c6:2f:95:72:47:f1:
90:66:78:34:c1:df:e3:4d:67:b5:ba:bb:b3:11:ab:54:48:5d:
1e:5c:91:5c:1e:3a:e5:70:e4:3c:e9:6e:76:b5:c5:59:67:c2:
3d:9d:56:46:d0:ce:a5:cd:0d:c7:ab:91:44:63:68:98:de:19:
a5:0a:e7:29:42:d8:70:da:a0:cf:24:63:12:22:0b:95:d3:c4:
ff:87:4e:92:dd:df:b1:ca:d4:06:2a:e9:1a:d5:b5:e1:d4:45:
17:74:41:2d:cf:37:5e:5a:fb:9c:b6:8e:d4:af:73:5b:60:4e:
9f:15:88:1a:a2:f6:33:e6:bc:9c:11:51:4a:7b:5a:32:f5:68:
05:e2:f7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:16 2025 by rpki-client