Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
File: 9FT4T3gIX46gOklonL43LnSsFTw.mft (raw, json)
Hash identifier: WK1fLfLAGuMYYP714oKfu9PIpVy0t8zd0pdGZEbPsJo=
Subject key identifier: 9D:6A:26:49:01:05:DB:8D:CA:CB:E1:07:AF:57:B5:38:F3:19:86:7A
Authority key identifier: F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
Certificate issuer: /CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Certificate serial: 019A4E1892E0D23372C8ED3923B177D47286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 09:00:24 +0000
Manifest this update: Tue 04 Nov 2025 09:00:24 +0000
Manifest next update: Wed 05 Nov 2025 09:00:24 +0000
Files and hashes: 1: 9FT4T3gIX46gOklonL43LnSsFTw.crl (hash: iT0Q6xkHYvMvpvKg/IqCRFq1Xfb+Xj/kninuP+JOlOc=)
2: BGu53Mnt6YnfcS4G3l8YVZ-mfTw.roa (hash: QzO5j9RPktNq5NXFjAY7mK7/e0HDOPdGV4+293fHloM=)
3: br5LvPAh3qC25uv5le-_vMirU9E.roa (hash: d5eKzHAQ2jh203ot8SX9ieqegHwAZyoAukOsm+PkxYo=)
4: keFbyWRx9CXFGktePoeob--QEYA.roa (hash: iRz71Y07r23FnbminnQhY3v7rzlViMoRNVr4WwEmWj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:92:e0:d2:33:72:c8:ed:39:23:b1:77:d4:72:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Validity
Not Before: Nov 4 09:00:24 2025 GMT
Not After : Nov 5 09:00:24 2025 GMT
Subject: CN=9d6a26490105db8dcacbe107af57b538f319867a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e7:51:93:4b:a5:2b:80:a3:14:1e:87:43:b8:
d9:b1:3f:e1:f5:ea:da:bc:5e:88:da:ca:03:f9:15:
4c:8d:5a:50:c9:27:db:47:6d:b4:81:9c:c1:1f:10:
f1:ff:a9:2e:e9:6f:24:f4:9d:b3:f7:6d:67:1f:8f:
e8:58:ea:89:05:f6:08:45:79:e2:11:9d:bc:be:1a:
c9:1e:cd:d0:04:b1:d2:e0:2b:2a:ca:53:9e:9a:29:
cb:99:9b:ed:d4:f5:5d:4f:ea:21:fb:62:75:fd:3b:
09:66:2f:f9:4b:cc:23:ce:0e:8c:15:a2:07:f5:10:
f6:e2:53:09:d1:50:7a:fc:2e:38:28:6a:70:81:1f:
49:b0:87:10:a7:f7:e0:7f:bf:ce:56:e1:3c:d9:8c:
54:94:20:93:8d:b3:4a:c1:21:2d:1b:31:cd:fa:f1:
26:c7:96:98:e5:10:ad:d2:a2:64:3c:ce:d4:47:12:
2f:c8:6e:44:84:e0:5f:b0:fe:df:22:1d:46:b4:da:
c0:49:af:33:05:22:88:70:66:73:3a:6f:a5:27:b5:
95:0d:08:7d:b4:e3:2d:24:9b:d4:a4:bf:39:56:c3:
00:45:fa:a5:f4:92:ac:f8:65:01:91:92:a2:36:fc:
fb:72:9d:40:d4:8c:b2:d1:24:21:ac:00:f6:be:56:
2b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6A:26:49:01:05:DB:8D:CA:CB:E1:07:AF:57:B5:38:F3:19:86:7A
X509v3 Authority Key Identifier:
keyid:F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d3:6d:23:36:de:1e:4a:32:d1:91:51:fa:34:db:09:77:ae:
1e:ab:6d:56:66:7b:31:17:62:54:5d:53:b4:1a:91:83:27:73:
1e:1e:6e:24:6f:07:ed:e9:cc:84:29:50:22:2b:21:85:c6:ca:
78:16:c8:11:3c:b6:bd:c6:44:4c:03:1a:da:f7:30:95:30:b2:
2e:8c:09:f9:f6:4a:77:0c:90:c2:9a:98:f0:78:cb:30:1e:4f:
42:50:50:08:aa:59:bd:0a:fa:b4:a3:c2:5e:da:b3:f9:e1:39:
8c:51:5f:c9:12:6d:24:fb:bb:a0:ef:90:96:2d:64:5f:c4:57:
99:a8:94:9e:d0:60:ee:fb:b3:3a:48:aa:9b:d9:f9:43:b2:85:
10:b4:1f:b8:4c:11:e7:34:90:5f:42:24:d0:89:a4:0c:c1:2f:
74:1b:8b:6e:a1:6d:51:61:cf:a1:3d:da:2d:0e:27:78:f5:8e:
4c:0f:54:ab:67:dc:7d:88:f8:15:65:db:f5:2d:a2:8f:d6:63:
1d:b8:25:89:db:56:97:1b:8a:f1:73:d6:9a:23:23:e7:02:fb:
6a:fa:a9:f8:5b:f3:48:a9:17:5e:43:54:d4:4b:0a:e1:ec:6d:
a5:5f:d2:db:5f:9e:2b:b8:12:48:3a:64:99:4f:20:7b:14:e2:
fe:2d:72:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:13 2025 by rpki-client