Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
File: 9keQtSf6QLqj8ts_oqFL-UzSgv8.mft (raw, json)
Hash identifier: ADaskbF3/fxJfXEX52QhyQssYS8aEMTXB0ODTS6YEhQ=
Subject key identifier: DD:24:F0:B2:34:2E:DF:ED:27:5D:34:5F:6F:EA:37:90:0D:4F:A2:7D
Authority key identifier: F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF
Certificate issuer: /CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
Certificate serial: 019A4DE168F07D83E8AFFE71E351B3A6B76D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
Manifest number: 0435
Signing time: Tue 04 Nov 2025 08:00:09 +0000
Manifest this update: Tue 04 Nov 2025 08:00:09 +0000
Manifest next update: Wed 05 Nov 2025 08:00:09 +0000
Files and hashes: 1: 9keQtSf6QLqj8ts_oqFL-UzSgv8.crl (hash: AC33lJBReOlTAI45zvP01Qlx226IMtJrLONVr0a6Avc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:68:f0:7d:83:e8:af:fe:71:e3:51:b3:a6:b7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
Validity
Not Before: Nov 4 08:00:09 2025 GMT
Not After : Nov 5 08:00:09 2025 GMT
Subject: CN=dd24f0b2342edfed275d345f6fea37900d4fa27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:10:2d:43:aa:c6:f9:7f:5a:a5:14:f5:a4:
19:eb:af:e6:a2:f0:87:98:17:e6:d1:35:97:22:a9:
ec:9b:5d:3f:a2:64:cd:40:3d:28:cc:79:dc:7a:90:
d2:97:ce:d6:b6:1f:ad:2e:b1:e0:91:94:80:c0:dd:
d6:6a:7b:6d:37:68:fe:7e:27:89:09:98:bb:46:06:
66:ac:fe:47:6c:61:2c:a1:1b:dd:36:06:7e:81:22:
a9:98:71:ac:21:23:08:fe:38:08:49:6c:b7:c4:41:
d6:9b:52:c3:16:e5:5e:4e:9f:ea:f7:c6:98:c9:1b:
48:41:ee:06:b0:d6:d8:cd:4d:b7:63:d6:8c:a2:a2:
64:f8:6a:29:33:7c:70:a1:52:5c:97:64:cc:64:ba:
3b:9c:4d:a1:7e:9e:7f:8f:d2:a8:af:e1:a7:9c:ed:
b8:d0:40:29:1b:27:4c:e4:25:2d:8d:9f:e4:4a:a5:
c5:59:7a:16:6e:c4:df:93:88:6b:a4:65:45:28:b1:
51:b9:1e:84:0a:54:60:99:15:89:f0:12:cf:7e:41:
00:1d:85:e6:d2:84:44:cd:fe:24:cd:42:5b:d6:07:
3e:e1:85:ed:ce:dd:0a:c4:13:46:71:ca:bb:7c:ec:
14:86:58:b4:6c:24:55:06:86:f8:2d:6f:53:8c:b7:
34:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:24:F0:B2:34:2E:DF:ED:27:5D:34:5F:6F:EA:37:90:0D:4F:A2:7D
X509v3 Authority Key Identifier:
keyid:F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:04:e6:bd:3f:7c:8f:d8:7c:30:e2:a9:30:c0:46:26:27:23:
b1:fe:be:bb:d3:05:d3:e5:b3:0c:6b:fc:51:b7:4d:1b:e1:f8:
9b:2f:cb:7a:93:1a:c7:48:41:df:e2:6a:88:36:32:e6:71:f9:
94:c6:0e:52:d5:07:3c:5e:23:7f:65:f1:5b:36:1d:a4:93:49:
22:5d:aa:4d:83:f5:bf:21:e2:1a:d3:19:7f:2d:04:5d:62:f5:
81:64:a1:7d:43:e6:ef:ca:cd:7b:37:ce:f8:1f:15:66:ed:2d:
f9:8e:3b:ba:af:26:22:42:b8:83:26:ec:7c:56:b5:0f:2c:57:
27:38:d6:23:90:e2:da:06:11:a4:bf:ea:70:34:2e:ef:e3:18:
19:ee:47:4b:76:6a:2c:5b:aa:f5:bc:66:4a:7a:e4:be:3a:55:
d5:8d:b3:29:16:35:99:fa:8f:9b:0a:ec:90:ae:d1:69:08:92:
2a:3f:8a:55:84:cf:08:dd:81:56:2c:6f:cc:46:5c:34:c3:8b:
1c:bd:77:f6:3b:fe:fa:d7:a8:17:b0:b5:8e:93:86:8e:a0:1c:
43:62:b4:6a:89:78:20:0b:7a:44:e7:70:a0:34:8f:06:14:d9:
ec:8d:b0:61:01:cd:de:53:84:c6:1a:28:ae:87:db:7a:e3:9b:
ee:be:d0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:20 2025 by rpki-client