Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File: x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier: 3dEgd1NxAZFFHNt35e0KVCAxgH40PQ/R3jcK8g395hQ=
Subject key identifier: 17:BC:CC:99:39:D6:42:1D:25:10:66:90:56:88:5C:AF:84:94:B9:D7
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer: /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial: 019A4D7476A026983920E363CD824270E60C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:01:09 +0000
Manifest this update: Tue 04 Nov 2025 06:01:09 +0000
Manifest next update: Wed 05 Nov 2025 06:01:09 +0000
Files and hashes: 1: cFEMcTrZnpJM6OI3sLSildoG7_o.roa (hash: 9byuaTVIbm1V06CyQEH6JUvAc6lfIjdANtz73++4OCM=)
2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: FLBPpWebb1ZHAOWxjHWaQwDFMDX0/gugMUf9NCHZtkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:76:a0:26:98:39:20:e3:63:cd:82:42:70:e6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Validity
Not Before: Nov 4 06:01:09 2025 GMT
Not After : Nov 5 06:01:09 2025 GMT
Subject: CN=17bccc9939d6421d2510669056885caf8494b9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:e7:13:f3:73:92:57:ef:17:fe:75:db:01:
47:a6:d7:74:b5:1e:f4:68:f1:23:2c:a2:4b:79:7d:
d6:84:01:1c:fb:28:f8:11:c0:fe:17:61:e8:4a:d4:
69:ef:d3:4b:59:45:b0:76:6a:b3:b8:89:fc:12:0b:
56:c9:85:af:74:19:14:84:f4:5d:73:a6:e0:72:c2:
f2:3e:ae:b0:2e:25:64:d8:fe:7f:ce:c7:27:b0:d5:
91:4e:1b:34:bd:8a:e3:a0:2d:35:1f:e9:dc:25:7b:
9f:a3:4e:a8:7f:68:19:e8:16:ee:15:ec:42:50:ad:
15:e7:a5:c0:5e:27:9f:7a:73:f1:ad:ba:5e:d3:27:
6a:b1:ed:21:20:44:da:52:0b:b2:cf:73:45:cd:d3:
78:13:29:16:5d:57:ea:ef:92:56:7c:62:06:53:5c:
2e:9b:b9:e9:03:18:74:78:50:39:fe:6f:b5:ea:81:
3d:76:a8:da:f6:86:92:06:0c:a6:51:31:e1:b2:80:
09:bb:ac:52:d4:78:ea:ca:dd:64:72:73:8a:7e:55:
2c:74:82:5b:18:c9:85:33:f7:60:d3:81:e8:17:2d:
c9:2c:6f:fa:a2:4b:e2:73:55:12:7a:87:e1:f7:c6:
7f:a0:ea:0b:8b:34:81:cc:b4:71:df:67:b4:4c:40:
08:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BC:CC:99:39:D6:42:1D:25:10:66:90:56:88:5C:AF:84:94:B9:D7
X509v3 Authority Key Identifier:
keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:45:f3:ec:6d:6d:b5:02:0a:d8:22:d1:74:e2:05:17:6a:ed:
50:ce:9d:4a:12:46:a3:f8:12:14:c0:bc:f8:64:85:ab:76:f6:
ef:ae:68:27:c9:90:07:6c:45:c3:2b:ad:75:b2:b8:e8:a1:e5:
26:70:89:98:5e:dd:ad:f8:6f:d8:56:be:27:95:a2:aa:51:98:
b8:ec:b1:ed:bc:3a:f1:c3:1f:14:01:65:f3:d8:5d:74:14:61:
c7:f6:16:4f:38:6f:4c:13:dd:83:aa:c5:1a:4c:d9:ed:a6:78:
9a:3c:a8:07:c9:15:63:fb:4c:0d:7e:3c:54:0c:cb:dc:59:89:
4e:47:fb:60:54:75:08:69:69:dc:fb:86:a7:ef:db:a0:f6:7f:
d4:2c:2e:01:0e:db:2b:93:4d:ac:60:b3:5d:60:6a:bc:20:83:
24:6b:e2:70:1b:21:b7:6f:0d:31:e3:a2:e9:e1:ac:23:45:ed:
43:bd:fa:29:6e:9f:60:37:c6:f1:26:21:d4:0c:b5:f8:07:75:
f9:bd:62:e8:8a:c2:08:c7:87:55:2a:b7:80:2a:83:0a:e1:38:
a9:44:cd:ae:03:86:d7:8a:86:09:e1:01:83:a1:3a:d9:21:27:
f0:82:d0:dc:3e:33:6a:ff:49:5a:87:49:96:f8:2a:29:25:29:
2b:fa:4c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:26 2025 by rpki-client