Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
File: 9TNT82jdgBzWECIy36HOpp3Yy2w.mft (raw, json)
Hash identifier: t/eDkz6u9zgYd6b0MKkFkaXJ+XDBTo7YR4pBeYr5PYo=
Subject key identifier: 22:86:DA:B9:00:1A:4A:E5:C3:3F:34:6E:5D:55:43:E5:97:BB:4F:D7
Authority key identifier: F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
Certificate issuer: /CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Certificate serial: 019A51197A05BDFAE157A9804B9D9F3C6720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 23:00:15 +0000
Manifest this update: Tue 04 Nov 2025 23:00:15 +0000
Manifest next update: Wed 05 Nov 2025 23:00:15 +0000
Files and hashes: 1: 9TNT82jdgBzWECIy36HOpp3Yy2w.crl (hash: bARyQ1cqHxtjKgf7RXza7SVQ076/Uy/Kdf38fc5xToc=)
2: KPjydIOJaGq7MrGDIyks0pG8OMc.roa (hash: EbMrbtdHkpWfjQpY4PIBNTo9mg3b+j3TofouOP6XhE4=)
3: j-eMIttscanFAqtICoI80Cr1JzI.roa (hash: 9wKinY0pxocac6rpiGpVi4F+dA87gof09Z9RuDhbY0A=)
4: kza4BzO7mzHg574_1Eicw1sryow.roa (hash: T/X2stycZnJ66mhbGAsW7v/HLZ/en6oPqkycFGz/g/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:7a:05:bd:fa:e1:57:a9:80:4b:9d:9f:3c:67:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Validity
Not Before: Nov 4 23:00:15 2025 GMT
Not After : Nov 5 23:00:15 2025 GMT
Subject: CN=2286dab9001a4ae5c33f346e5d5543e597bb4fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:b3:d2:ee:44:61:12:e2:d7:5a:43:67:8f:cf:
51:6f:a3:48:f5:a8:5c:26:00:16:b4:4d:68:0c:f5:
19:1b:70:36:46:ad:66:3f:20:59:d6:e8:9d:5d:1f:
93:53:cb:9f:0c:a8:de:c3:e9:04:66:f2:33:b7:00:
5b:9a:13:70:8b:8c:51:f2:68:a1:00:7b:2a:46:ad:
21:cb:1a:bd:94:fc:e2:8c:82:1c:a4:7e:80:c1:05:
e9:41:99:2e:df:96:47:97:c2:5a:00:64:5c:4a:04:
f6:2a:7a:15:50:14:25:9e:94:04:88:fa:a3:10:3e:
e3:3d:cf:78:39:78:09:5a:42:f5:53:5c:3b:f6:ef:
66:0d:15:cc:9c:f7:de:fb:6f:fb:ea:e7:d7:11:8d:
4f:36:81:60:c7:17:36:92:a4:0e:85:3f:4c:00:09:
63:c5:50:ef:9c:0d:e8:4f:4d:55:47:26:2d:95:28:
4e:4e:7d:8b:0e:3a:6d:31:d9:33:16:b3:8e:18:70:
ab:c4:92:2d:5c:f4:10:14:96:58:fa:6c:2a:5a:9d:
40:b0:d1:1d:11:f0:5a:80:8c:8c:df:bd:58:8b:4a:
48:12:d7:7b:52:db:f1:8b:7f:aa:1e:56:16:f1:73:
59:4f:30:52:35:74:76:8a:78:c9:00:47:cf:f2:bd:
9b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:86:DA:B9:00:1A:4A:E5:C3:3F:34:6E:5D:55:43:E5:97:BB:4F:D7
X509v3 Authority Key Identifier:
keyid:F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:0f:4d:fa:04:04:bd:4c:c8:1c:b8:57:43:75:cd:99:22:36:
5c:bd:d1:d0:7e:ec:c3:2e:12:6c:cf:49:00:0f:87:8b:c9:87:
da:2a:ef:f4:05:5e:91:48:2f:35:f5:cd:9e:a3:55:67:c0:82:
b4:93:b6:39:ee:c8:67:c6:3a:40:05:27:8c:06:b9:93:a3:9d:
7c:8a:ac:20:2b:5c:36:fd:12:1c:eb:f2:d3:00:a4:06:60:23:
eb:35:2a:7a:2a:11:c8:d8:50:f0:b1:d2:a1:d3:6a:82:c5:aa:
d7:af:48:38:70:8a:0c:a1:14:ff:6f:da:27:48:fb:50:81:f9:
c9:f2:91:62:67:ea:e9:4a:6f:2b:47:c6:86:6d:af:65:de:c0:
2b:6a:be:73:d1:b4:4b:9a:6a:7a:d5:74:b3:74:64:c1:52:75:
c2:b4:c8:0a:d0:89:22:3b:73:d1:fc:89:95:cf:1a:3b:23:ad:
21:cf:b1:fd:3a:c1:81:93:00:50:51:cb:a1:46:9a:2b:a3:e2:
ac:99:31:23:ef:3d:d5:a6:fa:a5:98:b4:79:03:0c:e9:e1:8a:
3a:df:a6:df:7b:7c:89:d1:c4:ab:75:11:28:c9:b1:11:57:a6:
ee:b0:7e:f8:71:74:fd:56:f5:b3:c6:f3:df:20:e3:42:52:f6:
c5:44:a9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:10:51 2025 by rpki-client