Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
File: 9URgWW1tUyQB3jE9-JA2blN21gI.mft (raw, json)
Hash identifier: tLupLsYlCisfYGMrz3/TVOJCVTMjs+4iSbHCxY9/tKY=
Subject key identifier: 78:30:46:92:35:F8:FA:2B:A9:4B:1B:0A:8E:35:2A:C7:A9:A9:6A:C5
Authority key identifier: F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
Certificate issuer: /CN=f54460596d6d532401de313df890366e5376d602
Certificate serial: 019A4F620899EA14E13189EDD830A3876EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
Manifest number: 06DF
Signing time: Tue 04 Nov 2025 15:00:15 +0000
Manifest this update: Tue 04 Nov 2025 15:00:15 +0000
Manifest next update: Wed 05 Nov 2025 15:00:15 +0000
Files and hashes: 1: 9URgWW1tUyQB3jE9-JA2blN21gI.crl (hash: eCFMebiWUbejYHn+kYE+hKJ2MDFzBt5sEwVL01ZlXic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:08:99:ea:14:e1:31:89:ed:d8:30:a3:87:6e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54460596d6d532401de313df890366e5376d602
Validity
Not Before: Nov 4 15:00:15 2025 GMT
Not After : Nov 5 15:00:15 2025 GMT
Subject: CN=7830469235f8fa2ba94b1b0a8e352ac7a9a96ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:05:2a:8d:83:3f:7c:14:93:a0:65:19:2d:41:
3b:d9:54:b9:9e:b3:e2:42:c6:3b:01:e4:20:87:dc:
80:53:ca:2d:46:77:00:f8:fb:66:1d:12:bf:0b:e3:
7e:88:9c:65:a1:c1:a4:dd:35:ce:aa:b4:65:ac:c3:
ca:53:df:e4:00:ac:5c:21:f4:04:2f:71:ac:1f:79:
93:20:2f:54:ae:db:b0:c0:d8:16:76:6a:08:49:b8:
30:59:c5:9c:5d:28:d3:4e:e3:c0:cc:d4:a3:74:8a:
c2:e9:ac:e1:73:73:ba:be:f2:db:0c:b0:19:71:5a:
29:c7:9d:b0:fc:d1:5f:b9:9c:0c:d1:f1:9b:33:72:
94:5d:cd:bf:98:e1:23:24:bc:6f:07:35:fd:93:ab:
ae:df:67:e2:e8:f5:f4:49:5e:bc:ea:25:5c:b2:82:
ec:d7:57:a8:d9:55:01:a4:02:6e:4a:87:0d:a6:05:
b6:ab:32:21:76:ae:f0:0a:6b:31:8f:b7:6f:b6:bd:
d4:4b:aa:7d:9a:e2:a1:6c:1b:27:53:32:71:2f:59:
a3:07:36:63:e9:b7:d8:f4:4b:75:66:e9:96:a7:69:
0c:a8:b4:ff:f3:ec:31:87:61:30:38:f2:f8:5a:d6:
3a:cf:f7:dd:8f:ce:6c:5d:80:6a:13:3a:aa:b0:b8:
b6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:30:46:92:35:F8:FA:2B:A9:4B:1B:0A:8E:35:2A:C7:A9:A9:6A:C5
X509v3 Authority Key Identifier:
keyid:F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:06:c8:fa:68:2c:6d:cd:e2:ad:f5:7e:23:86:12:50:0f:c2:
8e:1d:92:d5:36:07:77:33:c2:7e:b4:98:b7:78:62:bc:8d:d3:
44:46:0e:8a:17:3d:1a:ef:cb:74:30:bf:da:c7:3e:9d:99:4a:
9c:fd:5b:6f:e7:ce:e6:24:aa:c6:ff:8d:46:0a:79:14:ea:18:
5a:b7:ab:14:4c:bc:d7:88:44:47:4f:c4:f9:3b:58:d8:77:ad:
42:6b:00:b7:2f:0a:1d:3c:d5:ab:74:d3:33:4f:b0:2f:b6:10:
0a:5c:c9:d1:6c:d1:fb:a8:37:e4:32:c2:01:fa:d0:bc:82:ad:
7a:4e:02:5a:8a:d1:e6:82:cd:21:31:f6:c2:37:12:ea:29:9c:
67:40:a8:64:dd:e0:55:75:d5:88:fb:21:7d:0a:56:ac:b2:50:
fe:1f:7c:21:3a:43:32:c1:78:c8:d7:63:c1:b9:96:96:c6:d5:
d0:96:3d:5e:6a:61:88:0b:1b:47:75:b0:a5:7d:87:0f:4a:aa:
de:24:6d:10:bd:c5:c4:05:e4:0c:67:0b:a4:c7:63:b6:69:4a:
12:c5:a3:e1:7a:82:26:5f:20:04:8f:66:0f:e6:e1:c4:32:fc:
bf:12:34:8c:09:08:a1:10:8d:d5:2f:b5:63:e8:09:95:c8:5d:
9b:4b:4e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:27 2025 by rpki-client