Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
File: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft (raw, json)
Hash identifier: WYx+CnodBc9TJz2QtlTHFaAWZ0UceAq60hrbf1Su1MY=
Subject key identifier: 3D:47:68:02:A1:49:C5:6D:53:FF:2C:5F:1A:A9:98:EF:1D:58:68:8A
Authority key identifier: D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
Certificate issuer: /CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Certificate serial: 019A4D0641DB1AF6341716976295C5DCA4C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
Manifest number: 13DB
Signing time: Tue 04 Nov 2025 04:00:46 +0000
Manifest this update: Tue 04 Nov 2025 04:00:46 +0000
Manifest next update: Wed 05 Nov 2025 04:00:46 +0000
Files and hashes: 1: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl (hash: G1b9q7VZrgkGg/bNGONwJ8A8QCXEKybrbxdAcK69c8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:41:db:1a:f6:34:17:16:97:62:95:c5:dc:a4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Validity
Not Before: Nov 4 04:00:46 2025 GMT
Not After : Nov 5 04:00:46 2025 GMT
Subject: CN=3d476802a149c56d53ff2c5f1aa998ef1d58688a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:e8:f0:77:74:4d:71:31:23:17:cf:9c:56:
d6:84:2b:47:04:f6:0e:e7:5e:a4:f4:57:0e:0b:55:
c2:e3:67:fe:d8:68:52:79:56:72:cc:9b:71:61:c2:
6e:89:bf:bc:20:67:30:6b:0a:68:95:fe:d7:ed:f2:
56:24:79:89:94:01:15:23:2a:40:d9:8e:36:24:51:
b9:01:64:f7:95:bc:65:f6:3b:0b:5d:38:9e:1d:cf:
54:68:38:a8:23:03:4d:f1:99:99:dd:5e:08:8d:4a:
88:46:07:a9:7a:15:ae:10:4a:78:98:58:6e:0f:ac:
08:3f:27:29:24:03:c9:8e:43:7d:ff:45:fd:e8:fd:
2e:4f:96:0e:a6:89:62:60:a7:a2:a8:56:fe:3b:a3:
ce:06:1b:ef:eb:5c:d5:73:c1:d3:38:ee:eb:bc:55:
d5:dc:6e:8a:9f:2e:0b:5f:85:86:db:bc:50:ad:f5:
db:0d:fd:62:5d:23:e5:07:1b:a3:a4:d2:44:94:b2:
94:73:dc:f2:58:1a:af:8f:bc:fd:be:2e:cd:e4:fe:
e9:f3:e0:24:f7:d7:12:d2:43:09:a5:ad:47:3a:d4:
5e:5c:04:cf:15:b3:5b:01:be:e5:1a:fa:e0:64:4a:
27:23:04:1a:5a:16:a3:9b:1a:4a:5c:09:c1:51:35:
c8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:47:68:02:A1:49:C5:6D:53:FF:2C:5F:1A:A9:98:EF:1D:58:68:8A
X509v3 Authority Key Identifier:
keyid:D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:50:f3:dd:76:ee:61:3c:71:d5:4e:66:25:7e:c7:23:74:13:
ef:66:6a:8c:1f:e6:b1:06:0d:d7:74:2b:cb:9a:d3:33:cd:53:
a7:36:b3:8d:6e:41:f8:18:d6:bf:cf:b7:60:44:a7:c7:4e:33:
01:d7:d3:14:ec:f2:7d:10:b5:c4:63:fa:e7:08:f9:ef:a0:d6:
d8:7c:47:f8:a5:60:3b:3a:b2:67:45:14:e8:e6:f0:3b:17:1c:
14:59:21:00:f8:ce:f3:90:68:fa:03:64:43:ee:7c:67:91:80:
29:d2:11:b0:f9:6e:e9:2e:a5:fc:de:91:c7:a2:bb:09:ba:b0:
ba:d5:52:b3:ea:e1:3a:e9:ac:0b:db:a7:0b:ce:ef:c6:48:41:
51:ee:8e:6f:fb:9a:9b:9a:4e:30:9d:cd:cc:c9:5e:fc:65:c4:
f4:4e:1b:93:11:e7:37:fe:10:0d:e4:ff:cf:f1:b9:9d:3b:79:
f1:4b:cf:e5:cd:3f:56:a9:bd:3a:6e:5a:69:fa:ba:87:48:6a:
0e:90:ed:28:bb:a1:01:f0:80:61:51:60:ad:f1:28:b6:c8:01:
a4:dc:a1:d0:45:87:fe:cb:83:9c:bc:e5:79:75:ec:99:a2:cd:
79:2b:a4:03:e3:1b:24:64:30:75:2d:d1:cc:15:89:65:bb:9c:
8d:31:66:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:16 2025 by rpki-client