Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
File: 639rU_mItXcyDvKJM4Cl6oJLauQ.mft (raw, json)
Hash identifier: nOzKPvV/eHEqlI5wdZ3FOKkj3+TWRlDcmtyy2141qyI=
Subject key identifier: 9F:AE:A4:04:C7:15:6F:0D:C1:4E:52:8C:F4:13:6C:E4:1F:33:AD:A9
Authority key identifier: EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
Certificate issuer: /CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
Certificate serial: 019A4EF5ED51856A2A72BC7B9D2EA5CEF24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:02:11 +0000
Manifest this update: Tue 04 Nov 2025 13:02:11 +0000
Manifest next update: Wed 05 Nov 2025 13:02:11 +0000
Files and hashes: 1: 639rU_mItXcyDvKJM4Cl6oJLauQ.crl (hash: IuVNiesD0Hjx8p0lm6QmlHoi1i//0dmiLkrtVvuCJEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ed:51:85:6a:2a:72:bc:7b:9d:2e:a5:ce:f2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
Validity
Not Before: Nov 4 13:02:11 2025 GMT
Not After : Nov 5 13:02:11 2025 GMT
Subject: CN=9faea404c7156f0dc14e528cf4136ce41f33ada9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6d:4f:f6:1e:7c:4b:6d:b6:a1:6c:c3:ec:c6:
fa:a6:ad:98:08:38:ae:5c:45:3a:ae:29:31:34:b2:
96:56:b9:65:19:10:11:60:1e:10:f7:b9:92:42:ea:
53:04:1c:fa:d5:63:0b:32:59:91:89:30:0b:b9:51:
63:1f:3b:6d:06:03:e3:0b:2a:44:66:e7:cc:3d:12:
ad:58:4a:6c:fa:e6:de:a7:51:6f:94:1a:a7:94:c1:
ba:94:13:31:40:0d:dd:74:b0:6d:b5:6f:3d:e9:91:
e5:52:ae:d0:d6:1a:57:b1:b6:f0:13:85:38:23:36:
d6:ba:be:8c:4b:08:24:13:49:ed:a4:59:aa:a2:0d:
9e:24:5b:8b:22:ea:e7:73:c8:4f:81:bf:51:7d:7a:
19:1d:21:a8:f5:8f:98:1c:e6:74:df:03:9b:38:30:
53:dd:38:3f:52:07:79:60:19:23:e5:f9:36:4c:fc:
3a:ea:e1:9c:15:0d:79:4c:11:ef:50:b0:a0:3c:fb:
39:36:b9:ee:c1:63:f5:70:39:12:5c:3e:31:4a:ef:
de:68:2f:ef:ab:90:6f:58:48:b1:d4:99:1f:cb:db:
06:02:d7:17:3c:83:7e:fd:53:93:dd:47:2b:8d:6f:
5e:f5:b3:33:a9:df:6d:1f:45:97:c2:30:4e:cc:3e:
2a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AE:A4:04:C7:15:6F:0D:C1:4E:52:8C:F4:13:6C:E4:1F:33:AD:A9
X509v3 Authority Key Identifier:
keyid:EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ed:9b:55:01:59:35:a5:1d:30:ad:92:d0:63:81:82:bb:53:
4c:46:6b:ec:4d:dd:5d:04:8d:5f:a8:c6:b2:2c:04:87:3f:92:
44:66:8a:1b:d7:7f:4b:78:6d:54:54:2a:1c:9f:09:38:7a:e3:
c4:01:ee:c7:07:68:38:e7:ab:ca:97:b7:7c:1b:a8:89:db:25:
79:51:e0:d7:00:51:83:fc:6c:e0:87:36:2f:ea:24:21:71:35:
93:8b:c6:c3:59:3c:1d:ff:23:7d:89:a0:84:87:1b:b7:9b:1f:
99:df:7e:b4:ee:2c:f2:6a:f1:3a:2e:b7:e1:50:1f:19:8c:f7:
38:67:30:d4:0d:4a:17:df:50:01:e5:d3:11:ad:5b:65:dc:cf:
e1:da:92:13:53:dd:99:08:ba:b0:1f:c8:5c:a5:4b:97:26:04:
01:de:dd:8f:c9:aa:74:ed:af:ab:4b:f3:af:5e:09:a8:e6:8d:
f2:77:c4:a6:7f:18:65:4a:52:fb:1e:44:71:e4:ba:00:0e:c0:
63:36:1d:e7:ff:98:4e:54:04:bd:a2:46:be:70:06:79:f8:17:
8c:89:ab:58:28:53:4f:7c:a4:4f:15:f4:1e:73:9c:77:4f:32:
24:d5:af:98:89:1d:8f:2d:57:2c:dd:9d:89:ef:75:08:70:4e:
08:0b:20:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:49 2025 by rpki-client