Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
File: 94bCd_bKgIr9ygVnP0tsJXOXTj4.mft (raw, json)
Hash identifier: AyKst7ECooihVMYC2Sqf9H9N740bUA6Ind3y2Ns21Fo=
Subject key identifier: 3E:0C:A3:05:2B:F3:3A:83:15:B1:F9:A2:2B:DC:5E:60:09:AE:BD:1B
Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
Certificate issuer: /CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Certificate serial: 019A4E191494B53DBB998B87E188735DBB53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 09:00:57 +0000
Manifest this update: Tue 04 Nov 2025 09:00:57 +0000
Manifest next update: Wed 05 Nov 2025 09:00:57 +0000
Files and hashes: 1: 94bCd_bKgIr9ygVnP0tsJXOXTj4.crl (hash: BuVChSciQR0xBA5eW6lbK+KMkUIPDsFuW5Wue7tDcXk=)
2: H7N53zVEHeFF4Ypnr4KNxpw7Y7A.roa (hash: Rauzo4l8LbEJsHoIgmNH9pstkYvXoM+T/qkFcHjlqFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:14:94:b5:3d:bb:99:8b:87:e1:88:73:5d:bb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Validity
Not Before: Nov 4 09:00:57 2025 GMT
Not After : Nov 5 09:00:57 2025 GMT
Subject: CN=3e0ca3052bf33a8315b1f9a22bdc5e6009aebd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cf:95:4b:a2:e8:11:fd:9e:40:bb:66:8a:9c:
0f:72:99:05:81:d6:90:7e:dc:14:49:86:ad:28:5a:
ca:86:6f:81:dd:46:59:1c:d5:8a:60:97:0f:91:da:
c9:70:bf:5e:30:d3:7f:aa:e3:15:e6:0e:6e:39:70:
83:80:83:96:40:7e:4a:39:2a:14:fd:26:b3:50:a3:
48:fe:52:ba:53:41:d5:8a:35:11:d5:7b:f8:74:ce:
b3:b5:b0:5c:40:d5:de:17:86:45:ac:10:0d:1c:6a:
ea:e9:04:8f:44:d5:db:3a:1c:4b:14:ca:1f:2e:06:
b1:3f:99:4b:a0:d8:84:11:30:8a:f8:e0:07:6e:5c:
41:7b:b8:4a:ab:51:bb:68:d1:0a:b1:09:58:34:05:
83:a1:89:fb:d6:6a:ba:00:0b:cd:fd:9f:92:d2:6b:
4c:60:5c:c2:c9:38:88:bf:59:81:41:17:ce:f9:0c:
65:42:6c:70:41:99:48:d8:8c:82:1d:d4:4e:f7:4e:
44:3b:1f:11:10:5e:78:31:a2:57:07:d0:8f:f1:76:
ba:8b:45:7a:dc:2b:e1:4b:bd:35:c9:b6:50:49:da:
ad:81:81:46:b7:73:41:26:65:b6:39:1f:48:f8:e8:
ba:03:84:0e:f6:4c:72:7e:d7:30:a6:bb:ab:ef:bb:
55:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0C:A3:05:2B:F3:3A:83:15:B1:F9:A2:2B:DC:5E:60:09:AE:BD:1B
X509v3 Authority Key Identifier:
keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:69:bf:97:f0:fd:89:9c:6f:00:c9:52:42:99:6f:d5:b3:b3:
68:34:9b:b6:6d:8e:7b:92:76:45:4e:a3:46:59:a8:a8:67:2b:
ce:f7:86:8a:1a:4d:54:65:25:1e:aa:9e:98:67:eb:68:ba:96:
a5:65:bf:e2:6c:f4:99:60:e5:8a:ad:ad:00:cf:23:6c:f1:e6:
00:b2:4a:6a:59:05:08:17:9f:5a:be:45:c4:54:28:0d:84:70:
96:7d:ff:f8:70:73:d8:ed:24:e0:51:ac:dc:19:f8:87:cc:78:
85:88:a0:4d:3f:0d:0f:e7:04:e3:c7:21:de:59:f7:1a:88:c7:
df:8c:b2:a7:20:22:a6:8d:23:09:1b:f7:cd:fb:5f:5c:59:93:
ef:ca:5a:fe:3b:e9:13:0f:f2:fd:18:1a:33:fb:a9:be:ec:75:
6d:4b:19:b1:52:7c:fb:69:60:eb:d6:02:80:f4:73:20:b1:6a:
9b:bd:f6:a3:ad:79:5d:74:20:a8:ca:ed:87:05:80:70:18:2d:
97:c9:1f:36:e1:ca:81:f1:3b:21:03:ab:13:4b:3f:cb:b1:8b:
58:64:3f:56:1a:a0:03:60:19:bd:df:09:91:6c:5a:ee:12:b4:
98:03:72:03:0d:cf:4f:ef:31:48:28:80:65:0f:4f:b1:2a:60:
f3:ba:9a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:19 2025 by rpki-client