Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
File: 9h0r7udUOkGpCKGgHs_AqHJqOuI.mft (raw, json)
Hash identifier: GuvAcuLSmbDnFzILrAM9Iog+KM7Z6C0S4LHOB1p2oQ4=
Subject key identifier: AF:85:50:B5:BA:65:10:24:8C:D3:97:65:42:3E:3D:5F:0D:4A:0E:7F
Authority key identifier: F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
Certificate issuer: /CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Certificate serial: 019A4E18BB2E5A5C351CA208AD7E271D632A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
Manifest number: 0BAE
Signing time: Tue 04 Nov 2025 09:00:34 +0000
Manifest this update: Tue 04 Nov 2025 09:00:34 +0000
Manifest next update: Wed 05 Nov 2025 09:00:34 +0000
Files and hashes: 1: 9h0r7udUOkGpCKGgHs_AqHJqOuI.crl (hash: 4BNT58NB3vhyQVtXUVHdRYka5rkodk9fOMvTyLN82b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:bb:2e:5a:5c:35:1c:a2:08:ad:7e:27:1d:63:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Validity
Not Before: Nov 4 09:00:34 2025 GMT
Not After : Nov 5 09:00:34 2025 GMT
Subject: CN=af8550b5ba6510248cd39765423e3d5f0d4a0e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:ed:c3:9b:74:f4:ba:87:9f:d1:1c:08:b3:
4a:32:ed:90:52:4d:59:fc:dd:f0:5a:1d:c7:18:ac:
c7:a0:bc:98:c8:40:6b:84:41:1c:17:c7:48:fd:3f:
2c:ed:b1:55:a3:f8:d4:78:f8:73:9f:38:a5:93:85:
43:16:e7:44:8a:23:41:85:79:36:56:35:50:ef:1d:
24:80:c3:3f:44:01:8d:8d:8f:bb:43:6d:12:af:4a:
e6:dc:d8:f9:f1:cd:e3:86:49:32:7c:a0:ea:56:28:
b9:34:b0:41:83:bc:03:c8:cd:77:3e:a7:94:99:45:
b7:a6:ac:d7:a6:59:e5:44:e9:d1:f1:6c:31:db:42:
53:17:f6:ff:67:b2:4a:9e:18:d5:56:ee:f3:ad:1f:
8d:0a:8d:39:9c:2b:fc:c5:73:0c:58:dc:08:0c:b0:
cd:1a:f2:4d:bf:6f:40:81:17:35:cc:8e:d4:d8:4e:
a2:8e:98:a5:fb:ca:4f:c6:f7:90:1f:2f:f8:30:b4:
93:a1:5f:24:fc:5d:6e:05:b9:b5:14:0b:16:0a:8a:
86:4f:fd:16:9c:de:0e:36:db:2f:f8:01:02:e9:13:
e9:b5:1e:f3:80:18:5d:aa:47:05:bf:26:7a:10:ff:
67:d6:1a:be:86:93:d8:72:8f:a7:35:4e:6e:9e:a4:
ab:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:85:50:B5:BA:65:10:24:8C:D3:97:65:42:3E:3D:5F:0D:4A:0E:7F
X509v3 Authority Key Identifier:
keyid:F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cd:72:82:e9:0b:00:eb:48:c4:c6:17:8e:11:8d:42:74:03:
78:50:26:3f:33:98:87:de:d7:68:75:83:f7:bc:8c:69:54:4c:
eb:0a:67:35:40:10:8a:e0:34:a5:e2:0c:80:ad:ae:8d:b2:11:
85:ea:b9:09:58:ef:fa:a6:53:5d:1c:32:e6:b2:5c:9e:9a:e7:
b4:d6:3b:99:f8:5f:2e:8c:ba:ff:23:00:8d:89:73:31:d1:1b:
61:56:cd:06:15:9e:fd:d9:0c:7d:7b:92:56:d6:3a:d6:d4:bd:
d6:ba:17:5a:23:b3:b3:c9:95:5e:86:fc:4d:3d:f0:e5:53:32:
32:19:9d:29:e2:90:96:dd:5e:d8:d4:53:70:d6:d3:5d:1a:c7:
35:e4:b3:e3:19:30:ec:ec:7e:a6:47:08:2d:a7:a7:15:64:89:
60:20:c8:cc:36:e2:1e:e3:3d:ec:5d:51:26:db:9e:eb:07:f2:
bd:f8:ac:3d:ee:fd:ab:0f:62:41:26:b1:33:ab:ed:e4:9b:1d:
76:4a:6f:1b:7d:97:2a:fe:8f:fe:4e:83:ce:b9:45:cc:89:f7:
57:e9:27:bd:47:e9:3b:f6:a6:22:c4:a5:62:e0:24:3d:b5:a5:
92:86:e8:96:7a:30:57:ab:e7:f1:14:99:cd:f8:6f:73:95:eb:
05:94:32:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:22 2025 by rpki-client