
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
File: 09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json)
Hash identifier: 7vczzylMxQ0qrbN1YM/rEMEgJ/Ucbyn0k1I9MG5tQF0=
Subject key identifier: D5:BC:CC:B3:D4:93:AB:32:CC:5E:9E:0C:89:56:7A:CD:90:CB:F5:4F
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial: 019A53ACCC5385ED7FE3167CD7DF3E9495D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
Manifest number: 1717
Signing time: Wed 05 Nov 2025 11:00:24 +0000
Manifest this update: Wed 05 Nov 2025 11:00:24 +0000
Manifest next update: Thu 06 Nov 2025 11:00:24 +0000
Files and hashes: 1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: dlDZuUNR4yYsmTHpf4EK0rrj/U5YqAwbWs+iMVqQZMQ=)
2: 4c68WXa89S9GaEZ3betWtfOynEI.roa (hash: fVAp1PUxEqPq1PXw46ujCE/Pw+4uzGlNeTIsndTtQ4g=)
3: 7kfcYNNoB5VB3-_80xlsWN3weyk.roa (hash: 1wJop1mQ6qBQDepGqT5ANO4tx0iRC5GqiIyWQqeZxiY=)
4: Bs0O01jXAqadcOrA_652_6vgquk.roa (hash: hEdFCfeLg1JToe8V2oyy+hkNpnht00+5NYTQRgNDOq8=)
5: KidN7PJCXFwqwby4fVpHaeAhpFY.roa (hash: rFMoYmqrD8lR5TajeeUqUicyuRT28K2jKIN4IFZHnsU=)
6: NYzishm2ogJfRyzy8nT6kXYmzuI.roa (hash: LaEEfSMmtUB1mBqYxGiYK3KhOkpxYURIQoeWj6Zjkz4=)
7: RIPl0ZcnNzCRnoJoRMQdo7FatJo.roa (hash: V51bdAbDUbCCdG4ap1IngeKOzNBFdbTp51TPAvBkqrE=)
8: eKmkaw2M8tueZ_tzxfDI9F6CNcc.roa (hash: fg34CUb41rhu+065E2VZ9qaIx2X2iqQ2jxGQO4GwQe4=)
9: pq2QS5SBDS3pAxrbz1jylBKYb1c.roa (hash: kdt9b8eHxviCcBXo3alD6ToqY7JvOLmYwFiRPu6twu8=)
10: tpxzfABwHA4uTKjODgtKlvT10t8.roa (hash: /uiIY+OMfjw8MyTKZlNYbS4i9kHVxO0uNCEe4Op3YPE=)
11: xz6DVtU3-Ra9kwVQS1hT5B1NgIk.roa (hash: L6obqobAUv8Kf3w8kISkegiNvXZC3M7YbdVJnQVDNRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:cc:53:85:ed:7f:e3:16:7c:d7:df:3e:94:95:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Validity
Not Before: Nov 5 11:00:24 2025 GMT
Not After : Nov 6 11:00:24 2025 GMT
Subject: CN=d5bcccb3d493ab32cc5e9e0c89567acd90cbf54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a9:93:88:93:66:01:68:44:0e:30:d0:32:9d:
72:d7:31:95:78:dd:b7:87:21:64:ab:67:67:87:75:
16:c3:43:92:6e:11:7f:12:32:b1:2e:f6:0d:a1:a7:
8b:c7:c0:01:14:9c:12:95:2e:4a:c5:4c:3b:f9:ad:
7e:28:76:b9:83:05:db:59:8d:0d:55:c3:7a:1d:bc:
64:de:c7:83:1d:05:5a:34:dd:82:6a:78:63:0f:8d:
32:b0:a6:ab:50:c2:aa:0d:26:18:df:9e:eb:e9:67:
6a:7c:cf:a7:c0:fa:65:9d:a1:83:b0:b5:a1:40:8d:
9b:60:ad:da:cd:f7:fc:30:06:a2:98:4e:7a:1d:e7:
52:2a:79:4e:94:8c:4a:7b:cb:09:c2:8c:04:59:07:
1d:03:6b:50:ff:45:a5:34:cb:43:0a:f9:eb:ef:33:
22:38:f6:dd:de:99:bd:b3:b7:d1:fb:39:84:f6:4e:
33:a3:77:13:5d:19:cf:da:8f:8d:84:15:0b:49:c8:
f4:74:e3:0c:f8:6b:3b:42:23:ef:d8:7e:2f:95:a9:
1a:6b:ad:a4:67:d9:7a:01:d8:ea:0a:90:5d:2e:29:
c2:38:09:17:9c:94:29:cd:d6:eb:b1:b6:2e:7d:da:
6d:b4:70:59:e5:a1:f8:d1:3e:78:db:21:27:9a:b5:
eb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BC:CC:B3:D4:93:AB:32:CC:5E:9E:0C:89:56:7A:CD:90:CB:F5:4F
X509v3 Authority Key Identifier:
keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9b:74:80:ce:51:ce:b4:93:20:0a:52:af:02:86:dc:e5:6d:
5a:68:84:4c:89:46:d5:5d:ee:8c:6b:24:d6:41:dd:ae:fe:7b:
cc:cd:87:75:e0:36:b1:5e:80:87:5f:57:82:ff:48:df:27:5b:
43:47:c7:29:41:fa:4b:4b:24:b2:67:7d:a5:17:66:c7:2e:9c:
47:19:d1:a5:88:8a:d1:ea:32:c2:34:5d:3c:b4:37:68:f5:75:
cd:0c:9c:0e:79:03:90:a4:e8:12:c1:9d:8e:5a:f3:3a:88:f6:
f7:34:8a:4f:32:e4:7d:ed:9b:79:ad:42:b3:cb:d1:ef:14:df:
37:ff:19:34:e2:8f:b7:7b:57:31:5e:de:fa:41:cc:d7:c9:c6:
bf:64:57:79:e5:44:6f:07:a0:69:05:8c:cd:eb:9e:0f:ad:98:
38:9c:6d:e7:af:8a:92:26:52:74:fd:f8:71:4b:48:72:5a:db:
76:cc:24:3e:e0:f9:48:8d:d2:ab:70:74:17:d6:3e:13:41:5e:
1e:bb:37:bf:ca:2d:5d:69:66:00:e5:2a:10:4f:5e:24:21:f4:
0c:e8:a8:93:0d:eb:7d:cf:58:68:58:45:d5:ca:c7:19:e2:d6:
1d:27:ee:3f:9d:9b:f2:88:59:38:2b:59:f6:26:ce:3c:ae:c3:
ac:e7:04:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:01:13 2025 by rpki-client