Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
File: 9XvH8urwyvppvuX6vmcSK0Nj_nI.mft (raw, json)
Hash identifier: sFgCd01/Qr8maJxQpKv3+jw2m1U999oAoM1KA/WoNxU=
Subject key identifier: 65:47:43:2C:A2:43:09:C9:84:B4:77:C2:D0:D2:1C:8D:47:C7:1C:2C
Authority key identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
Certificate issuer: /CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Certificate serial: 019A4F2B6615F4DE77DA464DB594F8416E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:00:35 +0000
Manifest this update: Tue 04 Nov 2025 14:00:35 +0000
Manifest next update: Wed 05 Nov 2025 14:00:35 +0000
Files and hashes: 1: 9XvH8urwyvppvuX6vmcSK0Nj_nI.crl (hash: wo9Y9eaT+bOZph6NbAr/qXN/wOOCTi8UzwN/wd0k34E=)
2: KNQf97WzItrOYioPwLu-Tdh4fNc.roa (hash: RIjtWc8dl547OecCvbWgp63AohvHeAGZkMZVo9/tFEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:66:15:f4:de:77:da:46:4d:b5:94:f8:41:6e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Validity
Not Before: Nov 4 14:00:35 2025 GMT
Not After : Nov 5 14:00:35 2025 GMT
Subject: CN=6547432ca24309c984b477c2d0d21c8d47c71c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:59:5a:c9:f5:c2:dd:1f:04:4e:92:3f:a5:
e7:31:c6:31:e1:1c:24:97:07:21:2c:4c:1e:a2:f6:
ca:c6:90:0a:91:b3:27:dd:b5:d1:ff:9f:5c:33:63:
e8:e2:43:63:f0:39:d4:84:f6:4b:fb:4a:4a:6b:f4:
61:5c:ce:11:37:41:3f:a5:7a:f8:d8:cb:2b:3b:e6:
42:42:80:a2:6d:18:8a:10:e6:fa:e3:4d:92:60:27:
26:76:f2:bd:82:6f:f4:74:e9:ca:45:90:86:31:56:
97:23:99:9b:06:f1:2f:61:1b:e0:3a:9c:7f:ad:bf:
11:b0:32:a9:1c:78:7f:47:a2:26:3f:fd:a6:75:80:
5e:c0:e3:cd:3e:9e:aa:40:ca:02:c3:f8:2f:99:0d:
07:01:80:6a:8d:79:dd:8e:cf:62:74:2e:d7:cd:d9:
5a:27:e8:14:1f:61:26:99:3e:70:fb:a2:78:79:56:
5e:c8:d1:11:4a:18:e6:f9:2c:62:94:ae:8f:51:21:
74:2d:a3:b8:aa:c1:70:18:9b:57:4f:a4:3b:8b:2e:
30:6b:54:59:4d:c8:df:08:ea:33:38:3a:d4:e1:95:
c0:da:9a:72:4b:84:39:40:4e:00:d4:0d:5d:6e:38:
1a:1b:fa:d1:77:63:52:4d:f5:e1:bc:9b:ba:81:15:
25:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:47:43:2C:A2:43:09:C9:84:B4:77:C2:D0:D2:1C:8D:47:C7:1C:2C
X509v3 Authority Key Identifier:
keyid:F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:bf:92:df:3a:67:5b:d1:15:5e:f1:38:97:65:f0:d3:55:74:
42:e0:f1:4a:05:57:1f:e4:4c:91:fd:05:10:b9:b7:d9:26:f4:
d9:1c:53:9a:30:ee:00:fc:eb:bb:8f:94:fd:61:fa:5d:91:03:
3d:f2:40:0c:bf:1f:2f:11:39:e0:46:d8:6a:e0:c0:22:82:67:
d5:b2:96:ea:6c:e9:f1:54:30:ef:ba:29:7d:af:89:8a:b2:d6:
03:e3:b1:3b:90:db:51:21:66:92:0e:60:2d:cf:91:21:f8:2a:
c5:0c:9c:38:ec:2e:32:5b:37:c0:81:3d:22:96:38:e5:bf:58:
9e:2e:26:99:28:25:b9:01:a4:c7:20:6e:b9:70:d0:9f:95:51:
25:eb:e9:7f:4c:85:32:d6:a0:52:2f:4a:9b:fa:10:04:cb:9e:
22:aa:45:35:51:6c:24:ca:65:94:ef:97:4a:77:9c:8a:78:07:
ef:65:18:0d:af:06:49:fe:03:a8:94:64:5a:56:29:83:1a:c3:
08:1c:22:18:19:8f:ef:14:80:6d:c6:a4:70:40:71:92:ef:3c:
03:0e:d8:8c:d2:62:b7:6f:54:95:84:c6:5b:92:dd:d4:f2:1f:
68:51:e3:7a:0b:a1:e5:f7:b5:d0:7f:4d:65:b1:1b:5f:9c:cc:
9f:61:77:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:41 2025 by rpki-client