Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
File: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft (raw, json)
Hash identifier: d0fbJCfKg0L8QnOqW/LHgEpLHRleJYajGUPKyV0TOgA=
Subject key identifier: D5:7F:15:F1:31:3F:8A:E5:5F:0B:DF:CD:D7:DF:70:FC:4C:68:D2:E5
Authority key identifier: F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
Certificate issuer: /CN=f57766f0726cff8618af968258f5bb229e937c6e
Certificate serial: 019A4E4FB453B8AFE68F311D2667B70F686E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
Manifest number: 0E39
Signing time: Tue 04 Nov 2025 10:00:37 +0000
Manifest this update: Tue 04 Nov 2025 10:00:37 +0000
Manifest next update: Wed 05 Nov 2025 10:00:37 +0000
Files and hashes: 1: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl (hash: iTTUMZsNfrDgB5MZ1A8azwpJ4BQq0Do8q3qx5GUHMsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:b4:53:b8:af:e6:8f:31:1d:26:67:b7:0f:68:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57766f0726cff8618af968258f5bb229e937c6e
Validity
Not Before: Nov 4 10:00:37 2025 GMT
Not After : Nov 5 10:00:37 2025 GMT
Subject: CN=d57f15f1313f8ae55f0bdfcdd7df70fc4c68d2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7e:1b:ad:dc:d0:10:b4:43:01:0e:07:13:bc:
ed:0b:e6:9c:fa:e4:36:0f:be:a9:18:a8:de:55:d5:
75:ef:17:d1:5f:c7:59:66:cd:c0:29:1d:e5:b1:7c:
68:2c:43:c3:5b:ce:06:63:69:08:b7:c8:4b:bf:c2:
e4:27:aa:8a:3b:d7:0a:f1:85:5a:1d:e4:00:f3:0e:
13:f7:67:31:27:6d:de:d1:f6:c1:3c:62:d2:38:c5:
8e:b4:75:66:ec:0e:40:63:42:fc:22:80:66:1f:f4:
70:ec:c1:1e:c1:c2:71:6f:16:9c:a3:22:c3:db:a7:
0e:47:77:21:cd:8e:27:9e:54:36:e1:ee:3b:c5:ac:
8a:97:fb:22:5c:60:38:82:ce:61:f6:06:50:be:ae:
9c:82:c6:68:e7:0b:d4:03:43:b1:b5:06:b1:cd:c8:
fb:2b:98:8e:b0:2d:d0:cf:fc:ae:c6:37:b4:cd:83:
a7:8c:02:a8:ba:97:0d:4a:53:be:ba:8b:7a:4e:88:
18:81:90:52:47:5a:14:71:39:57:d8:de:46:ce:74:
50:0e:7d:1d:3d:c8:06:50:45:67:ff:2a:46:18:a1:
96:36:e0:e4:30:40:6d:7c:7a:11:d6:48:24:30:e0:
3f:64:8d:9e:53:52:ff:3d:b2:4a:1e:7c:4c:ca:f6:
ac:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7F:15:F1:31:3F:8A:E5:5F:0B:DF:CD:D7:DF:70:FC:4C:68:D2:E5
X509v3 Authority Key Identifier:
keyid:F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:cc:c8:8e:52:09:6d:92:21:74:88:1d:53:84:ca:cd:e3:5a:
64:64:e2:00:35:05:42:39:1f:83:98:ef:85:7c:d0:a5:de:31:
fb:4b:7b:06:d1:ed:93:83:c3:72:84:01:f0:29:3e:7f:93:88:
4c:21:f4:38:26:f1:c1:6b:c7:4d:ef:e7:85:b6:7a:a9:c5:59:
55:17:40:d3:42:ca:89:80:19:b4:d4:e4:1d:a0:73:38:b1:48:
ef:98:d6:67:0a:76:1c:0e:5b:35:3e:17:ec:37:fc:f0:9c:8d:
f2:57:b6:41:9a:b9:53:4c:d2:86:9d:af:70:ba:b4:4e:84:7e:
fe:33:c2:8a:c8:85:b7:9c:c1:20:cb:69:c7:98:ff:05:52:7f:
ba:90:cf:d2:7d:07:a0:c9:e9:32:a9:da:fa:7a:23:a8:e3:d8:
54:56:5a:31:f6:98:f7:0e:f7:02:ff:93:11:e0:49:04:b4:17:
1a:ec:f8:1c:ab:54:fb:e3:c2:28:11:4a:12:23:b2:57:b8:8b:
7b:47:86:a0:a8:aa:d4:c2:2c:71:fc:90:33:87:81:f1:d0:ef:
07:78:9a:ee:ad:e2:f8:24:6d:91:ee:e0:c0:73:6c:ed:c3:10:
07:f2:d9:1f:5d:13:2d:75:c9:8d:36:a7:87:36:fe:8e:50:7e:
6d:1b:2c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:34 2025 by rpki-client