Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
File: 9lO0wxURtUguuEJaORN51D_W1FU.mft (raw, json)
Hash identifier: Ryvz6tHHfZ13mxRsDf4Jov97v/reBk/4GkgEzKyAGR4=
Subject key identifier: 14:F3:6A:F6:B0:0A:68:4C:A0:91:C5:E4:6A:42:AD:44:2D:CC:D6:8E
Authority key identifier: F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
Certificate issuer: /CN=f653b4c31511b5482eb8425a391379d43fd6d455
Certificate serial: 019A4D748005F3A3F57ADC3ED45C890A9DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 06:01:11 +0000
Manifest this update: Tue 04 Nov 2025 06:01:11 +0000
Manifest next update: Wed 05 Nov 2025 06:01:11 +0000
Files and hashes: 1: 9lO0wxURtUguuEJaORN51D_W1FU.crl (hash: PrbQNo6ptByjjTDaj1o2gAedV0J6Q/eYbN0RVZOioHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:80:05:f3:a3:f5:7a:dc:3e:d4:5c:89:0a:9d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f653b4c31511b5482eb8425a391379d43fd6d455
Validity
Not Before: Nov 4 06:01:11 2025 GMT
Not After : Nov 5 06:01:11 2025 GMT
Subject: CN=14f36af6b00a684ca091c5e46a42ad442dccd68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:6b:6a:49:de:d4:39:d2:d9:29:68:52:9f:
fe:b7:22:b0:db:f9:cb:1a:38:da:a4:9f:01:1d:50:
e2:d1:39:71:6c:11:cf:9e:4a:0e:99:a4:c8:5f:f2:
e8:4a:39:67:ee:a0:8e:21:73:a1:b4:07:97:5d:b2:
84:80:50:cb:36:31:1e:35:ee:c0:db:06:9e:80:0d:
84:9f:8c:5d:91:5d:78:cf:af:cb:ad:62:68:f6:71:
b6:63:97:26:db:32:8d:09:48:af:96:b7:c8:75:21:
c6:9e:ef:9f:b5:65:bf:e1:68:0d:48:68:69:f2:58:
eb:fd:0b:21:94:4f:48:2c:cd:1f:81:5f:e5:2f:a2:
d8:43:4c:c3:11:6f:69:86:7a:b8:f9:d8:f7:ba:0e:
d7:6b:03:b8:97:7f:18:aa:2a:87:a4:b9:c0:25:61:
52:d0:85:db:39:b6:12:94:f4:19:43:77:34:d7:2c:
1a:07:4a:80:30:af:2e:2c:db:0f:51:62:bf:79:e6:
54:69:a9:4a:79:7a:bb:9e:39:9d:5f:46:23:fc:79:
74:58:59:a2:c4:6c:23:39:25:ad:fe:cf:c7:70:84:
cb:3c:10:00:b5:25:ea:45:73:bb:64:b5:87:35:c0:
f3:8b:ff:4b:82:c6:16:21:c1:bb:bf:a1:e0:0d:b3:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F3:6A:F6:B0:0A:68:4C:A0:91:C5:E4:6A:42:AD:44:2D:CC:D6:8E
X509v3 Authority Key Identifier:
keyid:F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7c:22:59:50:05:ab:5d:64:bb:2d:04:ac:13:ba:fb:b3:33:
27:ba:1f:c2:a1:ac:8a:a5:18:76:5b:0a:f7:9b:79:d9:7f:b1:
51:0c:03:ce:ce:1e:94:37:e6:3f:84:bb:ad:80:fa:4e:d8:ea:
5f:1e:4e:99:09:c4:2f:9a:ae:77:7d:5f:e6:99:c8:54:75:9a:
d9:8d:31:72:c0:16:1f:e7:ca:c7:60:90:36:20:d5:be:a6:e3:
50:c9:fa:d3:81:6c:e9:9f:d6:22:90:e4:05:cd:85:7e:c8:3f:
cd:e5:80:99:9d:5a:e1:50:57:1b:de:3d:b4:3c:22:37:15:ed:
2a:d4:1d:ef:85:62:b8:69:02:63:f9:59:ad:8a:83:38:4e:c1:
3b:f3:e8:cd:04:29:77:ff:45:7c:3f:4b:4b:e8:27:49:8d:33:
dc:c6:e0:52:10:1e:69:9c:ec:f8:e4:ca:72:d9:57:cf:c7:e7:
0a:eb:af:61:f2:2a:c5:9f:97:3c:27:4f:33:d2:4b:15:e8:16:
78:97:17:81:58:7a:6a:08:6a:7b:9c:f8:ed:c3:17:7e:a9:76:
06:84:19:c1:01:06:69:b7:0d:8d:76:6b:82:b9:ca:f0:26:c6:
20:52:1c:84:2e:3b:e5:65:42:e2:9e:b8:3e:24:4f:a9:4d:b6:
3d:ef:0b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:34 2025 by rpki-client