Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
File: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft (raw, json)
Hash identifier: 95C2YrzSqDcuiwWv+Z0BfNke8NFWrNs7TLj5tEKqwFg=
Subject key identifier: D3:9F:EE:7E:4D:F1:61:45:39:66:F3:D3:A5:97:77:85:BE:30:84:2B
Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
Certificate issuer: /CN=bbd351b274fc23a42728303638a0d62b606401b4
Certificate serial: 019A4F2B8B3B3E952D67B88183AC9D5BDE3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:00:45 +0000
Manifest this update: Tue 04 Nov 2025 14:00:45 +0000
Manifest next update: Wed 05 Nov 2025 14:00:45 +0000
Files and hashes: 1: 5g1tjgsfll7LK-waAj9bTQ2h-3c.roa (hash: 8D1n33aMnmCgAozOd2zA5z3xSs5pmebBm8HLBHCuK3k=)
2: LH7w3vOlTcRmJHq2EtyJwGzFlEE.roa (hash: BdRuTFIKBfgw0BiPV5lECgqiOEd6ZtJOGCfbNoIAYBE=)
3: Q6nJt5OyB3yAAOcFFRG5qOehAok.roa (hash: KO9C76YDm/Okx701iaZdKEGFLB0y+hfe45N6CADpuPc=)
4: mSE5jFaDyQq229roQ5L8OUwLYf8.roa (hash: 9syYjhG++XjU5LLyMYmj6GtRt7K4tV+VTMTyeR8mVrI=)
5: mrSrlKE7xCslqlPTXvwVWDdiqIY.roa (hash: p/QlzvPV8hfJGKn1J+54dIx9OQB/pBF0YHBs+kQo1HM=)
6: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl (hash: HGpP/dlFtdZ3dGqOCNmTkuIDcFZCKFPs9WsdRJv/WjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:8b:3b:3e:95:2d:67:b8:81:83:ac:9d:5b:de:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4
Validity
Not Before: Nov 4 14:00:45 2025 GMT
Not After : Nov 5 14:00:45 2025 GMT
Subject: CN=d39fee7e4df161453966f3d3a5977785be30842b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:96:c5:b2:c0:34:74:04:42:85:ee:ee:46:aa:
ef:24:73:dd:08:45:15:e3:6f:6e:fb:16:a4:3a:65:
d8:98:1d:21:d5:2c:42:65:d8:b8:6d:1c:fa:f7:95:
ae:af:6f:6e:23:74:07:4a:5b:09:ee:08:dd:26:92:
65:4d:3d:6d:49:01:1e:70:7b:5c:7d:58:b0:1f:06:
5c:f3:69:fa:de:35:ac:39:bd:7d:10:ce:6e:87:f3:
87:e8:e4:87:9e:14:57:bb:36:24:8f:c5:84:b5:d2:
a7:e9:33:c4:36:6c:f0:33:01:51:c7:e8:4d:f9:c5:
64:41:53:be:61:ea:58:bf:4e:5a:34:98:36:a3:16:
44:3e:8e:70:07:d8:77:af:e3:1b:e8:38:d9:90:2a:
fd:5b:91:3c:7e:42:6f:8b:57:1b:c9:72:da:ca:5b:
d2:15:e0:b7:e3:2b:8e:d1:8c:76:e5:1c:9f:4f:b8:
da:2b:64:3a:a3:8c:fb:7a:99:ea:34:e9:45:b2:8d:
54:b2:69:d5:f8:5c:82:f7:7f:1c:15:18:17:fb:d4:
2f:d5:35:1b:eb:50:46:e9:d9:80:ae:14:62:96:98:
a2:58:2f:63:eb:40:5a:38:1d:8c:56:c0:b9:59:fa:
72:20:db:4d:8b:04:0f:72:48:ce:b0:5f:21:ee:c0:
12:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9F:EE:7E:4D:F1:61:45:39:66:F3:D3:A5:97:77:85:BE:30:84:2B
X509v3 Authority Key Identifier:
keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7f:05:06:00:b6:8f:4e:08:7c:6b:71:d7:97:06:83:39:73:
b2:93:94:68:4d:4b:9f:64:af:d9:af:82:4c:75:a1:b9:7a:64:
59:14:8b:f5:be:19:5c:69:0b:e1:02:5f:0c:ea:31:59:57:19:
45:29:90:8a:67:59:74:52:77:a7:32:44:05:2e:da:9c:b5:65:
fd:08:e6:37:c8:49:c7:52:8f:e8:8d:78:58:a9:50:ad:59:0c:
b2:51:55:1d:15:0e:9d:67:9b:61:65:c6:c0:5f:a5:02:ff:f3:
b7:b0:46:b8:3c:eb:2e:45:fc:83:46:dc:d2:35:4c:6d:ae:8b:
f2:7f:d2:46:6a:d1:75:3a:d0:43:4f:ce:48:e9:55:4a:94:51:
62:01:52:58:9b:57:2a:49:d4:33:f0:54:6d:68:1c:dc:3f:39:
f7:2d:d3:7b:2a:6b:92:c3:c5:cf:fc:7c:b2:be:7c:fd:c4:22:
dc:5a:d1:a8:4c:10:e5:54:fb:bd:0b:c2:b5:d8:79:8d:0b:2f:
4e:1d:d7:c8:62:05:53:ae:96:8e:fd:97:cf:fb:6c:e8:28:b0:
f1:f1:2f:10:5f:86:78:5e:f7:af:02:85:fd:f7:8d:8c:6b:40:
a0:0e:94:20:08:ac:a9:d9:50:f6:c4:0e:36:08:1a:0e:9b:9c:
f9:07:3f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:56:28 2025 by rpki-client