Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
File: n9e3i11VWv7XZxyRbCbrf_x-LJo.mft (raw, json)
Hash identifier: KQyOLzjPZmNPZffCRuXra8wCNm55OOg7MV3wqPAgQOo=
Subject key identifier: 7B:3B:FF:61:B4:77:F4:C3:DE:69:9A:98:2C:E2:25:70:C3:D2:49:EC
Authority key identifier: 9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A
Certificate issuer: /CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
Certificate serial: 019A4DE2169BE12FEEEE5FEFE7A9394FC223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
Manifest number: 0608
Signing time: Tue 04 Nov 2025 08:00:53 +0000
Manifest this update: Tue 04 Nov 2025 08:00:53 +0000
Manifest next update: Wed 05 Nov 2025 08:00:53 +0000
Files and hashes: 1: n9e3i11VWv7XZxyRbCbrf_x-LJo.crl (hash: wpan6aRVhtxpbT3EjhNfHf+d/qX5rRoCVihnc8M/rRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:16:9b:e1:2f:ee:ee:5f:ef:e7:a9:39:4f:c2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
Validity
Not Before: Nov 4 08:00:53 2025 GMT
Not After : Nov 5 08:00:53 2025 GMT
Subject: CN=7b3bff61b477f4c3de699a982ce22570c3d249ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a3:60:ba:c3:1e:b4:88:85:51:79:62:5e:7e:
a0:6b:d8:68:1e:bc:c7:5b:82:f8:b0:38:83:1b:62:
b2:ba:9b:1f:57:72:cc:8d:27:3a:4c:b0:42:75:56:
97:36:83:0e:8d:af:8c:67:7c:65:5f:0f:98:ee:b1:
e1:70:9c:18:cf:9f:82:ea:a1:bf:d7:52:b7:7e:d3:
f0:b4:33:b4:96:12:c6:08:a0:d8:b7:f5:02:d3:b6:
d4:95:91:b7:e5:ae:bf:d3:5f:03:83:3c:68:cd:0a:
37:97:f9:8b:fd:c6:59:dd:69:96:33:96:73:9c:59:
ce:38:b9:4e:1c:67:90:4a:c6:cc:ae:1c:7e:84:54:
eb:10:0b:c7:a6:3b:7a:a0:15:34:b2:83:84:e2:ca:
b4:93:23:56:d3:b0:7f:e5:d5:fe:41:a8:a1:2f:3f:
8a:54:00:67:5c:db:38:21:ec:92:44:77:39:52:3c:
71:5e:14:86:17:4d:d2:b1:c0:5b:23:a3:68:2a:ae:
5a:2d:6b:00:bb:d5:28:fb:10:f1:e9:4e:46:49:cf:
26:22:77:86:08:7b:75:68:10:ff:90:b5:aa:51:38:
02:0c:2c:7d:b4:b6:ea:df:4e:f5:a1:26:e3:15:3b:
ea:5b:ef:33:09:be:a4:cd:c3:ef:55:56:3a:8b:9f:
1e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3B:FF:61:B4:77:F4:C3:DE:69:9A:98:2C:E2:25:70:C3:D2:49:EC
X509v3 Authority Key Identifier:
keyid:9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:5d:e1:01:b2:9d:ec:ac:ac:22:31:a4:1b:bb:5e:f1:0f:7a:
94:dd:d0:72:f7:78:58:20:7b:64:24:2c:44:dd:a6:1c:f3:81:
f8:1d:f2:3d:5e:15:3d:24:ab:f5:f2:2e:9a:8f:b5:60:79:fe:
92:ff:89:f1:ea:25:7d:51:c2:24:7f:5d:0a:e9:ad:71:c5:59:
dd:b5:81:2b:6f:c7:b9:bb:13:85:35:fc:5a:73:0e:34:6b:ad:
81:c9:44:82:d3:81:40:86:b2:95:1c:51:54:67:01:e0:e2:60:
93:d4:00:1e:b4:d5:25:02:66:ff:c4:9b:c3:21:fc:c2:23:ce:
c7:15:74:e2:b1:89:f9:97:5b:c7:9f:0d:02:97:d9:36:63:d7:
1d:be:77:fb:4d:ed:ee:1f:b5:5a:33:81:cc:0a:86:74:14:a8:
d9:ce:82:c2:23:f7:e8:f2:54:0c:49:77:03:32:ae:62:14:4a:
bd:0f:bb:11:f4:5c:02:2a:1d:c6:12:3d:18:1c:2a:42:67:48:
7d:b5:18:bd:af:60:b0:14:bd:63:b5:10:21:c4:f7:d0:d6:ed:
47:8a:f8:91:4d:3a:10:5c:b2:1a:c6:21:52:58:09:6c:39:9c:
a4:24:b2:ef:77:2f:dc:b8:c7:49:2a:c7:a8:e0:01:4f:a9:e7:
af:75:a6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:40 2025 by rpki-client