Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
File: 9n1n2ohguDIsTyBNYRsAYTjxs5E.mft (raw, json)
Hash identifier: pl6kF61qa1E0zSKJJ7vNiriWweQTWXOmRcgOR9XzdXw=
Subject key identifier: 57:0B:E9:F8:DA:D3:95:01:99:F3:E1:EB:0C:E2:32:1E:68:59:2C:A7
Authority key identifier: F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
Certificate issuer: /CN=f67d67da8860b8322c4f204d611b006138f1b391
Certificate serial: 019A4F9976BA901D7B0AE108C99008A36847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
Manifest number: 040C
Signing time: Tue 04 Nov 2025 16:00:48 +0000
Manifest this update: Tue 04 Nov 2025 16:00:48 +0000
Manifest next update: Wed 05 Nov 2025 16:00:48 +0000
Files and hashes: 1: 9n1n2ohguDIsTyBNYRsAYTjxs5E.crl (hash: B5YZR3reQBy2sP5gGVy6kUVDvUXwTFwLJ4WbxobQjSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:76:ba:90:1d:7b:0a:e1:08:c9:90:08:a3:68:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f67d67da8860b8322c4f204d611b006138f1b391
Validity
Not Before: Nov 4 16:00:48 2025 GMT
Not After : Nov 5 16:00:48 2025 GMT
Subject: CN=570be9f8dad3950199f3e1eb0ce2321e68592ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:02:40:0a:7c:4d:54:5a:d0:e0:27:54:53:d4:
79:ad:04:53:3d:d7:2f:76:78:4a:d7:d6:7c:ac:9a:
22:d9:c1:ad:e2:0a:f3:07:68:36:ce:52:1f:80:b3:
cc:15:49:ef:e4:69:1c:2a:63:16:1b:71:70:a5:27:
6b:23:57:45:d2:db:50:ca:7b:ef:9a:01:1d:8e:04:
1e:ce:bb:62:a1:09:19:17:79:44:fe:41:51:a2:be:
25:c8:b5:b1:12:42:c7:a5:cf:45:9a:2f:e3:1d:4a:
d6:d5:11:b1:e9:47:33:93:dc:ae:d8:3f:73:85:05:
8f:63:85:e4:58:8d:c3:be:2e:21:ab:5c:9e:9f:01:
49:db:b3:4b:cc:2d:f0:79:13:4f:ea:a2:a5:18:ed:
e2:81:c0:77:08:a7:61:df:a0:a3:87:d0:25:f4:12:
ad:4a:36:72:65:0d:0a:76:a7:04:27:e6:31:b5:2c:
3c:a8:61:08:79:fb:23:71:98:90:bf:fc:da:ed:0c:
e6:31:61:74:ed:5a:d8:56:37:fb:0b:b0:e9:37:a9:
20:b0:34:30:20:4d:bb:c6:49:5f:b7:df:30:ec:b7:
54:67:03:82:7c:e8:a5:3f:40:21:63:0b:f1:4d:0c:
a7:3e:8a:f8:a8:f7:17:c3:e0:59:fb:a1:52:e5:8e:
a3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0B:E9:F8:DA:D3:95:01:99:F3:E1:EB:0C:E2:32:1E:68:59:2C:A7
X509v3 Authority Key Identifier:
keyid:F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9d:e2:dc:38:13:31:8f:eb:f9:d5:f2:4f:a3:0e:27:bf:2e:
5d:75:c1:28:57:99:60:6d:af:6f:d3:97:52:83:3f:7d:78:5f:
52:27:c4:f7:4c:13:3c:59:cb:3f:e4:89:bc:16:9f:1e:4c:dd:
60:74:e9:f7:17:3b:de:6d:51:0c:fd:f4:1b:c4:6a:0d:62:92:
68:31:ed:02:e0:9d:00:07:80:a7:95:2c:84:23:82:ac:94:e7:
77:a3:f3:77:8e:48:3a:d3:e9:4a:4a:34:fb:87:d1:5b:3b:ba:
29:82:92:78:be:ca:7d:61:8a:3e:30:dc:87:c1:15:17:30:f0:
26:02:e4:91:54:8e:4e:18:80:70:b5:ed:e3:9c:2f:16:8e:c7:
93:7d:c6:26:9e:50:b8:e9:4c:95:84:ce:78:52:37:55:3a:88:
36:56:bd:b3:c0:ee:fa:e0:51:13:e9:fa:61:c3:ba:9b:72:8b:
65:46:65:dc:b5:93:aa:e0:9c:a3:c4:32:5c:d4:47:93:f9:31:
6a:74:9c:6e:78:b4:8f:74:29:cb:fb:54:cb:de:c2:10:ce:db:
74:e7:d9:d7:b7:1a:61:3a:a9:3f:91:89:50:44:b1:2b:e5:13:
44:58:e4:e8:14:db:7d:07:ef:51:38:5b:71:7a:0f:3d:f5:31:
71:74:05:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:47 2025 by rpki-client