Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
File: mnj9TUGkk4S99ufcPrvFAL9m2dU.mft (raw, json)
Hash identifier: cmavavxqud/pVwMPIxUgOIwv4rQMd2GIjdJAWK0d/IM=
Subject key identifier: 09:04:68:0E:6D:75:7E:5C:CA:4C:79:35:DD:12:94:3F:44:AC:A5:D2
Authority key identifier: 9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
Certificate issuer: /CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Certificate serial: 019A4FD02F3358A7596E2A4D346080953952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 17:00:34 +0000
Manifest this update: Tue 04 Nov 2025 17:00:34 +0000
Manifest next update: Wed 05 Nov 2025 17:00:34 +0000
Files and hashes: 1: UxU055m6SYgLYJdY0EIHyH-buK4.roa (hash: L8Prey4FtmmkUZS9Fb3qw934vxOuIVmwZLaUrRs5uYI=)
2: g-ueJOZ8CrwpGCeGD3tl16S98d0.roa (hash: bDoSFJsdsspb9o+5HCKGnMJFTdCyV6X4FzTImtyv2cE=)
3: mnj9TUGkk4S99ufcPrvFAL9m2dU.crl (hash: yoS60s6JjDgci+3ZGhz8k69X92CbOa3xaRGb0mqJXtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:2f:33:58:a7:59:6e:2a:4d:34:60:80:95:39:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Validity
Not Before: Nov 4 17:00:34 2025 GMT
Not After : Nov 5 17:00:34 2025 GMT
Subject: CN=0904680e6d757e5cca4c7935dd12943f44aca5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:5b:30:dc:b5:48:cf:ca:c0:f5:68:48:9a:
22:7f:9b:2a:a2:f8:fd:ea:4a:51:0f:3c:6a:dd:50:
b8:0a:68:73:ea:6e:52:88:66:51:fa:76:dd:43:af:
60:a9:1e:00:61:59:44:87:bf:03:08:0b:32:6d:12:
ce:db:5b:84:9a:8e:09:6e:08:bc:4f:18:d5:74:f5:
fe:b4:47:69:81:e2:a5:f6:f2:99:be:d3:88:b5:8f:
f3:64:fe:03:97:6a:30:f1:73:a1:89:78:20:13:22:
ea:c4:97:57:cf:24:d0:30:b5:e4:bb:8f:16:75:29:
25:69:ff:e9:48:5e:79:d1:d9:1f:89:ea:3e:f3:4d:
76:71:6e:58:a4:ef:4a:50:bf:50:ed:c5:6f:6f:e9:
13:b6:93:b5:3a:48:1e:b5:ac:bf:61:82:1a:6a:01:
2a:13:7c:86:f1:0a:62:19:f9:c2:80:3b:ef:94:eb:
16:3d:55:06:ec:56:57:4a:00:17:cd:4f:da:7d:fa:
2f:54:56:16:30:56:a3:d1:0f:48:c0:05:57:09:ef:
75:a1:d3:62:ab:40:32:d9:13:56:0d:31:25:5d:04:
0d:58:e3:7f:10:60:b9:e5:26:69:e9:91:21:7e:f1:
f6:c8:67:4d:47:01:1f:5f:e7:c7:5e:e7:93:1c:f8:
bb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:04:68:0E:6D:75:7E:5C:CA:4C:79:35:DD:12:94:3F:44:AC:A5:D2
X509v3 Authority Key Identifier:
keyid:9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:31:cf:ad:c8:12:3c:b9:1c:15:23:bb:b0:db:42:67:55:37:
56:89:4b:dd:5a:0a:d8:2a:50:97:c6:28:6e:a6:9a:c2:02:79:
16:c8:f7:86:a5:80:b5:10:42:1f:60:84:6b:06:e1:71:4e:27:
20:ca:ae:e7:cc:34:eb:3e:d2:99:71:ed:4f:de:73:3e:5a:5e:
63:d9:63:36:b3:0a:43:ba:e9:41:de:c1:45:5f:87:6d:87:d2:
47:ef:ba:90:30:91:5f:ee:7b:58:3c:f6:6b:71:b8:50:53:fb:
a6:1c:31:99:08:b6:21:8c:4c:85:73:67:80:fc:88:9c:8d:fe:
05:e0:73:5b:e5:53:be:e7:cd:8a:b7:c1:3d:cb:b2:1d:d4:ef:
b3:e2:11:9c:f3:3e:26:4a:ea:42:4e:fc:f7:94:b7:0c:39:b3:
47:43:82:5e:c7:3e:44:fe:ba:be:b7:b3:6e:8c:43:8c:86:a4:
61:5c:d1:81:fa:1a:56:49:e7:9b:ca:3a:18:23:78:b9:54:24:
9b:f0:84:4d:38:c8:23:77:87:8b:5d:2d:7e:a5:38:d3:93:45:
98:88:8d:d5:fa:2f:66:8f:19:e2:38:72:7d:04:67:b1:39:d0:
e3:59:d8:a0:27:3d:55:3f:a5:48:33:88:fa:63:dc:e5:a9:34:
2e:e5:ac:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:33:15 2025 by rpki-client