Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
File: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft (raw, json)
Hash identifier: 5o815kyQrhNwrtYVhlbx7lDQHMXjYAnpIUcOcMUQ0E0=
Subject key identifier: BF:BF:B8:D3:9F:70:18:93:EF:C7:31:BE:00:C7:E4:43:EB:1B:FA:85
Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
Certificate issuer: /CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Certificate serial: 019A51BEE0BE00141D8A3DECE17C52185A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
Manifest number: 1072
Signing time: Wed 05 Nov 2025 02:00:54 +0000
Manifest this update: Wed 05 Nov 2025 02:00:54 +0000
Manifest next update: Thu 06 Nov 2025 02:00:54 +0000
Files and hashes: 1: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl (hash: wsW2XQJiNw9sij5G7pan9eLOKwXC9dhyY//z8G+Jidk=)
2: JKDoGMCZzjSndX7Ct7p3CxyKJR4.roa (hash: bo2ZyeRjzsKv0IsXJYurWXlAoWDOMikTk02MIFIPMnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:e0:be:00:14:1d:8a:3d:ec:e1:7c:52:18:5a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Validity
Not Before: Nov 5 02:00:54 2025 GMT
Not After : Nov 6 02:00:54 2025 GMT
Subject: CN=bfbfb8d39f701893efc731be00c7e443eb1bfa85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:59:bf:f9:12:f3:74:2f:88:a4:a2:fd:e3:1e:
fc:d0:8b:1b:6a:b6:d8:17:98:96:0f:e5:fe:ba:7e:
b8:b5:c5:a1:46:79:bd:d4:64:1b:61:15:41:ba:14:
aa:bc:ad:17:86:45:9d:34:c4:c6:f6:2a:0a:34:b6:
10:ae:6e:ec:cc:0c:c4:49:0e:dc:0b:b9:4c:7d:07:
b9:40:18:a2:5f:1f:fe:da:d7:62:cb:4a:73:97:cd:
54:27:46:34:05:05:d0:df:ac:24:46:85:6b:9f:f3:
8a:c2:f9:a9:04:93:71:b7:50:aa:55:97:d6:d9:55:
73:cf:5b:1e:05:9a:66:d9:9f:fc:07:28:e0:69:7e:
74:7d:cb:a3:b9:82:7a:92:6d:63:22:59:cb:40:7f:
6a:0c:d6:24:78:fc:9c:4f:b1:47:c8:ee:ac:d7:e4:
aa:c8:e7:e6:e9:3b:b1:1c:74:2c:24:86:62:b7:04:
8d:13:e8:74:ee:d0:23:03:6e:5e:73:31:9f:50:b4:
a8:e4:af:dc:6d:57:81:30:31:15:45:41:c9:fc:f7:
49:8e:11:84:19:21:21:9b:60:6a:53:46:30:0e:d5:
be:f8:69:f7:aa:ae:e5:fd:b0:4b:a1:9c:56:6b:7a:
f6:13:ce:47:bb:31:ea:0c:cc:9c:1b:53:e1:b6:8c:
d3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BF:B8:D3:9F:70:18:93:EF:C7:31:BE:00:C7:E4:43:EB:1B:FA:85
X509v3 Authority Key Identifier:
keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3c:ce:91:4f:de:9b:63:da:13:3d:4e:8c:3b:51:59:14:53:
9a:25:65:b4:27:b2:aa:7d:8d:90:15:7e:7e:a5:1a:be:1e:fe:
5b:85:a9:1d:1c:61:e4:4c:86:2c:97:1d:3a:6e:bd:8d:cc:58:
e0:ef:e3:c7:a9:3d:c6:9e:8b:22:9a:e9:d8:07:71:a6:55:b8:
d6:14:2f:0d:26:b0:e0:53:28:c5:22:74:47:b7:05:85:b5:e2:
d4:42:02:88:51:e5:7d:dc:59:55:6a:4e:73:f2:3f:53:73:d7:
8c:d8:2a:80:22:75:e7:95:9f:1a:65:56:ce:c0:22:8d:6a:19:
7c:e4:4d:67:40:47:b8:3a:4a:d7:83:32:ed:e5:fa:9b:72:14:
1a:76:ab:97:d7:c8:6b:ff:72:68:ce:68:34:bd:39:cf:0c:27:
dc:0e:4e:d3:cc:d2:f1:c5:a1:7d:23:0c:fb:ea:ac:da:29:0e:
dc:67:60:34:da:e8:18:e3:34:35:0b:66:0d:bf:df:7e:8f:30:
1e:13:d2:f4:bf:4d:de:24:5b:63:1b:9d:9b:bc:32:26:ca:1e:
a1:72:e6:0d:8b:16:1d:61:09:f8:16:95:81:a1:41:89:b9:a1:
62:0d:c3:2a:d9:d0:9b:ef:e4:86:67:c1:d7:ef:d4:f4:b2:48:
fe:34:72:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:50:28 2025 by rpki-client