Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
File: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft (raw, json)
Hash identifier: uj8fhAeqbi1dzdW90tYH/sCsgok10uadCGyedLMraa0=
Subject key identifier: FB:8E:2A:7B:6C:14:B8:17:FF:F8:21:74:96:AC:33:99:F8:45:F8:8F
Authority key identifier: F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
Certificate issuer: /CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Certificate serial: 019A4E4FD50DFBD48C0CA4D0AC797B2E7D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 10:00:46 +0000
Manifest this update: Tue 04 Nov 2025 10:00:46 +0000
Manifest next update: Wed 05 Nov 2025 10:00:46 +0000
Files and hashes: 1: 1-qQeR-EbZDs_qM5ldnB8c124Szc.roa (hash: ofMkv+rY3TqWIfaJFchO8QPgkzQdWyH95GmuYP6Ctek=)
2: 1GAA9RXUZFiO200bDHHgj0azbq4.roa (hash: tS4ee1uFzhVa+UdElOzwvh+A6ENy1LuuOQxxEe9qEtY=)
3: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl (hash: u3E7SocJggNnKjO9GhCMSzRBNUNvCxv4g0A26nsT1t8=)
4: S8bkAVPKOZ-Wv8bcLyLv58IY5XI.roa (hash: WjxXP1OmvNWD7wvgFTcDicv8zRYqIUNqNm/DyzGISFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:d5:0d:fb:d4:8c:0c:a4:d0:ac:79:7b:2e:7d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Validity
Not Before: Nov 4 10:00:46 2025 GMT
Not After : Nov 5 10:00:46 2025 GMT
Subject: CN=fb8e2a7b6c14b817fff8217496ac3399f845f88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:39:2a:62:b6:1d:3f:29:6e:33:e3:0c:86:5d:
db:ad:7e:37:07:9e:a5:3e:76:0d:a5:23:d4:d4:b5:
a3:d2:79:b7:08:37:1d:f6:3f:96:b1:99:28:07:d3:
70:a0:9f:35:64:3a:cd:d4:22:79:d9:79:b4:62:6f:
59:96:31:66:b1:2b:2c:a4:f4:bd:0f:86:2e:88:9e:
d9:fd:d7:53:9d:ff:e3:84:c7:da:18:9e:51:aa:55:
ff:26:ac:40:3a:6b:47:8f:7f:17:5e:35:83:2e:5e:
a8:29:0f:95:af:66:9f:1e:28:97:68:91:26:1c:77:
c9:42:7f:03:52:49:60:f0:cf:af:2f:8a:c4:00:4d:
86:04:d1:11:98:db:37:c8:2c:33:af:43:43:11:14:
49:43:38:8e:c0:1c:fe:a7:bd:34:76:35:44:88:6e:
6d:78:36:64:fa:19:2e:1a:2a:36:0e:7c:19:36:a6:
5a:d9:eb:48:c8:b2:d9:46:9d:47:f1:2c:fa:8d:dc:
af:29:39:ed:78:a3:08:09:71:e8:5e:82:e4:1c:5b:
3a:fa:e3:ad:61:97:3e:13:ec:c8:d1:ca:93:54:43:
cd:d2:4b:13:07:ce:1f:43:88:11:1a:da:97:ba:ba:
30:99:9f:23:a7:fc:7b:69:e9:7f:ff:a8:4d:42:79:
c7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8E:2A:7B:6C:14:B8:17:FF:F8:21:74:96:AC:33:99:F8:45:F8:8F
X509v3 Authority Key Identifier:
keyid:F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b9:77:99:21:36:9e:6c:22:75:95:d9:c8:53:38:a2:69:13:
77:d3:5a:2f:c8:1b:9a:3a:80:d7:c8:bb:30:a8:97:e1:f1:a0:
03:d3:8b:0f:a6:ea:4f:b1:d4:6c:53:29:38:9f:60:17:f7:06:
e0:3a:ca:d7:54:a2:df:e3:c6:d4:5a:f3:c2:a1:14:c4:f4:a1:
5b:34:97:4e:13:e3:0c:cf:6b:2d:2e:5e:f3:bd:28:95:e0:eb:
91:83:7d:1a:66:32:9f:9c:26:17:a6:56:b3:ac:20:79:de:b2:
e0:55:21:03:5f:04:fa:65:af:75:7d:8a:94:c6:a8:e1:47:dd:
7f:33:3a:7c:6f:28:b1:b6:07:5e:6f:3d:ea:36:d9:02:cc:6b:
17:13:32:9d:6b:95:7d:21:10:21:6d:9c:c7:75:2e:42:50:c6:
47:98:a0:c5:05:c9:9d:56:9a:84:9c:65:dd:73:7c:85:06:a0:
ca:af:f1:88:18:a8:26:45:fa:8a:95:8f:7e:3a:93:80:0a:61:
00:9a:d4:17:b1:21:6f:80:e0:1d:4b:5e:da:6d:9c:74:b9:32:
95:4e:d2:c3:b3:36:7f:f0:02:b8:8b:f1:c7:47:3d:e6:65:ad:
61:82:8b:15:78:99:c9:39:ef:18:8a:93:46:f1:36:d4:f3:68:
1c:1c:d4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:50 2025 by rpki-client