Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
File: s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json)
Hash identifier: avNHq0vrvFB3qsRHQ8B0HD4dTPUjdPE8EiHkgutztqs=
Subject key identifier: A7:BE:E1:76:F0:D5:BC:6C:8B:9F:04:CC:A7:70:7D:EE:02:19:67:FB
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 019A4DAAE588397B5F59EC84CBAC1EC1E503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 07:00:36 +0000
Manifest this update: Tue 04 Nov 2025 07:00:36 +0000
Manifest next update: Wed 05 Nov 2025 07:00:36 +0000
Files and hashes: 1: jQsHaj5ydFI2fziM46K4sV8khMM.roa (hash: /VZu49ELcVRt0AgBq70u1HUIw5xDpnWHzAN7Dc2pulg=)
2: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: wbLxBAZK597hHCVl+HOZ6lTgKK2VXHfc5GrU+YVH94k=)
3: tRz8tYUpxwf8wN4GeTnH5f0QQNU.roa (hash: lo7qT/3mV2HNXlaDbWGrnZSKU8gfCipkct2DwMPEdOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:e5:88:39:7b:5f:59:ec:84:cb:ac:1e:c1:e5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Nov 4 07:00:36 2025 GMT
Not After : Nov 5 07:00:36 2025 GMT
Subject: CN=a7bee176f0d5bc6c8b9f04cca7707dee021967fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ef:c8:a8:16:7d:45:2e:00:8f:e4:56:a6:04:
d7:e0:e8:be:d9:42:e4:ec:4d:b3:f8:55:fe:ab:e7:
11:f4:cb:06:83:3f:0a:6f:3d:f5:f0:8c:e4:3c:4f:
2a:d2:96:a1:7b:8e:54:51:b2:9f:97:64:89:31:4e:
b1:e3:f3:27:2d:ad:81:c3:4c:d0:a0:3e:04:ec:ac:
f4:ce:a7:f4:28:4d:32:10:1c:68:8d:67:d7:19:02:
96:d5:87:e5:05:95:94:b9:db:e7:6d:ee:ad:55:9e:
81:e0:af:7e:fe:38:84:39:dc:e6:a1:f7:4c:ec:ea:
32:d7:82:cf:f9:1f:36:ec:12:d7:7f:dd:3d:c9:18:
78:e6:ab:4c:c6:d2:ba:41:b7:24:fc:95:de:e5:d2:
49:e5:89:4a:f0:d9:c2:3b:ba:42:a6:43:25:a0:7e:
6f:57:08:16:20:ba:db:8a:17:fe:75:f7:64:6b:b9:
c4:62:dd:ed:fa:5a:e3:46:f3:30:ed:45:0e:3a:f9:
69:bf:6d:a1:b4:a3:0d:3d:b4:e0:43:fe:fb:e7:37:
26:ea:f6:e2:2d:b0:3e:3e:1e:16:4a:9e:41:ac:55:
c5:87:37:e6:88:5b:bf:48:3e:aa:53:d9:4a:27:4b:
2d:93:d9:80:d1:a1:83:ad:e2:3a:25:e0:5d:6d:7f:
8a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BE:E1:76:F0:D5:BC:6C:8B:9F:04:CC:A7:70:7D:EE:02:19:67:FB
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:27:4e:91:de:64:6b:7f:ca:81:7a:e4:36:38:22:7d:07:06:
23:2e:0f:4e:0c:bb:be:3d:b0:2b:2a:af:48:77:ca:d9:d3:87:
83:e9:cd:9d:e8:f5:56:bc:75:e9:c1:fc:9b:93:f1:b3:28:80:
25:a4:d7:19:71:77:5a:f8:66:62:1d:6b:94:f0:63:12:ba:ba:
04:74:b2:34:07:60:19:a7:20:39:51:b2:fc:52:75:77:2f:dd:
06:4a:0d:fe:6f:51:f5:ee:98:e0:c7:ef:c2:88:13:df:76:e3:
c2:3e:31:fb:aa:5b:e0:68:ea:d7:31:7f:f2:03:13:36:60:b4:
0c:c2:0f:13:05:89:74:5c:00:1a:fe:91:17:a4:21:b7:5b:ea:
11:66:63:e4:32:7d:48:5f:bf:89:31:66:0d:f0:18:98:3d:ec:
4a:2e:71:f7:6e:9b:09:6b:61:df:0c:f3:c1:47:13:50:27:3d:
8e:87:97:02:52:6b:13:76:b0:ac:83:67:7e:8f:d5:4f:bb:51:
45:1d:27:fe:c9:c1:ef:c0:ef:1a:9d:40:eb:2e:15:2e:8f:ea:
d5:e0:3b:8b:54:2d:d1:97:ac:64:47:d6:b1:b0:88:8d:5e:a7:
e8:e8:31:52:3e:94:20:85:bf:69:af:62:5e:98:3a:b6:36:af:
41:5c:8e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:37 2025 by rpki-client