Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
File: 9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json)
Hash identifier: /nNtKsJELLI89AV+lyQ/9fcQGeVPaTLspJp/2Qr4xMI=
Subject key identifier: 00:86:6A:59:F8:70:CC:D0:99:E0:2A:A6:5E:5A:9B:58:20:58:FA:F0
Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
Certificate issuer: /CN=f6a1722e8baddc358a15874265b466743e703656
Certificate serial: 019A522C4DDC7125023771AA7191CD05A38B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 04:00:26 +0000
Manifest this update: Wed 05 Nov 2025 04:00:26 +0000
Manifest next update: Thu 06 Nov 2025 04:00:26 +0000
Files and hashes: 1: 3gQqwuDknMD1by1_10QyLFjqTSQ.roa (hash: 7rS6ATpFIQATm/1nB63KRTZ9v2IEBgVrsScfZWZHuYo=)
2: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: jBsqJhLDac2VZNiJtYbrJeVKz92N/gjZCq5YpJSE+V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:4d:dc:71:25:02:37:71:aa:71:91:cd:05:a3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a1722e8baddc358a15874265b466743e703656
Validity
Not Before: Nov 5 04:00:26 2025 GMT
Not After : Nov 6 04:00:26 2025 GMT
Subject: CN=00866a59f870ccd099e02aa65e5a9b582058faf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:93:e5:a3:a5:91:4e:69:60:b7:48:0c:4f:29:
7b:a7:63:f7:71:e5:6c:e8:1a:a6:cf:7d:e8:b9:0a:
36:fd:8b:be:43:50:69:b5:ce:2e:45:4e:90:42:5d:
83:a6:30:fa:69:49:7c:d2:ea:9a:91:94:cf:d7:cf:
05:3b:75:19:8f:bf:74:60:9b:46:09:0f:de:ec:99:
f8:a8:90:d7:0b:14:da:2b:76:42:0c:2c:e7:f0:96:
55:62:5f:19:ac:90:f7:6f:d9:77:38:14:1f:19:3e:
17:1f:ab:9c:4f:27:fc:0b:92:44:39:7f:f2:0e:ba:
2d:86:3c:be:4c:62:aa:21:bc:6e:c6:64:f4:6f:92:
fe:ba:7c:eb:da:6f:e3:e6:09:72:aa:e3:2c:fc:6e:
f5:2c:eb:bb:a1:cd:22:1d:03:10:ed:95:cc:74:79:
c1:03:c5:b5:bb:2f:09:f7:16:59:86:29:47:d7:47:
2a:f0:2d:7b:c9:a1:37:f1:20:84:0e:4a:53:3c:ad:
51:09:e7:12:d1:49:eb:b2:e9:fd:47:ba:64:44:87:
51:4a:1e:27:a2:19:fe:a2:c4:eb:1e:19:16:86:9b:
79:84:16:52:fa:e4:a9:43:aa:2c:21:b4:41:fe:e6:
54:75:f6:5a:70:37:44:32:ec:ed:03:e1:36:27:3c:
23:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:86:6A:59:F8:70:CC:D0:99:E0:2A:A6:5E:5A:9B:58:20:58:FA:F0
X509v3 Authority Key Identifier:
keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3c:6d:c8:c5:b3:a1:09:6c:64:05:89:c5:d1:48:dd:93:89:
7f:5f:79:b5:9f:ca:6d:d0:a0:c6:34:08:c9:20:a3:56:fc:1b:
67:ac:9d:ce:bc:42:91:17:cd:90:39:70:04:09:38:df:5a:a2:
c5:85:3f:78:44:19:63:29:53:40:d3:8f:98:c5:1e:c9:e8:01:
52:b8:39:f2:9a:d5:33:c5:3e:fa:e9:48:e9:66:71:ac:34:8f:
c6:26:9e:33:0b:e1:1e:c0:c4:c9:f2:25:c2:cb:17:ef:dc:87:
27:c2:31:1f:70:7c:d2:75:87:d4:01:4e:07:26:79:43:80:4b:
9e:43:39:b7:f3:0b:71:ef:c6:26:0b:10:6f:ef:5c:d2:7a:d7:
81:ab:ac:e6:fb:70:98:ba:84:0f:11:71:37:de:ce:3b:cb:47:
9f:cb:ab:59:22:90:12:69:eb:bc:00:6f:08:c8:c2:b0:44:7f:
f0:10:e6:e7:24:2a:12:67:9a:e6:e6:bc:99:5b:f8:ea:a5:e0:
d3:95:b9:fb:72:e9:3f:49:0d:f5:b4:80:92:90:39:fc:e6:dd:
13:96:ab:90:f5:a8:51:5b:6f:d2:db:cd:24:b6:e3:cf:50:3a:
33:85:2a:de:92:67:a8:e8:9b:d4:62:ab:bc:38:c7:93:80:b9:
7a:84:af:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:54:15 2025 by rpki-client