Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
File: 9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft (raw, json)
Hash identifier: cv9LQpvZo2u89cSHfKVuLJfIBUcl0sJLDcKRGJtumJg=
Subject key identifier: 2D:AA:22:38:80:5A:19:F5:6E:AE:1A:62:65:3D:C3:CC:F0:7D:D7:3C
Authority key identifier: F6:38:7E:90:C4:FE:56:EE:1B:63:94:6F:E4:D4:63:1C:60:87:E7:ED
Certificate issuer: /CN=f6387e90c4fe56ee1b63946fe4d4631c6087e7ed
Certificate serial: 019A4E4F4B6D4298364C4FB7FC858D7B8FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
Manifest number: 07D1
Signing time: Tue 04 Nov 2025 10:00:10 +0000
Manifest this update: Tue 04 Nov 2025 10:00:10 +0000
Manifest next update: Wed 05 Nov 2025 10:00:10 +0000
Files and hashes: 1: 9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl (hash: 1vbpYYl2Y/ysKZn5+6pUe8nZoikFmYFuVjzQRy17Y7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:4b:6d:42:98:36:4c:4f:b7:fc:85:8d:7b:8f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6387e90c4fe56ee1b63946fe4d4631c6087e7ed
Validity
Not Before: Nov 4 10:00:10 2025 GMT
Not After : Nov 5 10:00:10 2025 GMT
Subject: CN=2daa2238805a19f56eae1a62653dc3ccf07dd73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:95:96:86:db:d6:3d:84:be:8c:6c:f7:f1:
5f:6c:28:4f:7f:ab:2f:45:97:2e:44:a9:c5:47:15:
ad:de:30:f7:88:f8:3d:32:ef:3d:40:b4:97:4f:2b:
35:b3:1e:66:51:ab:f5:b6:5c:dd:fb:cc:ae:45:8f:
8b:ea:7a:59:55:86:99:8f:e3:c9:99:c6:3f:1e:11:
d0:12:c4:2e:f0:37:6d:d1:97:78:a2:89:70:a0:87:
3e:6c:20:05:4c:bd:db:95:ae:a0:63:34:6a:ee:60:
3b:d8:7b:5e:4b:29:51:12:40:95:42:90:c3:c0:38:
2c:23:cc:c9:ee:4d:6d:75:4d:e4:be:37:c8:3d:4c:
45:cd:d6:16:be:20:1a:a3:fe:83:00:e9:30:70:6e:
48:f0:92:82:23:ff:74:1d:65:c0:7c:46:41:8f:3d:
23:96:fb:71:f8:a3:97:66:c8:5a:ae:0d:73:d7:b7:
64:1c:54:5c:ad:9d:74:7b:0d:f0:2b:87:9f:4f:20:
6c:59:b6:0b:86:f1:6d:7b:e5:eb:69:2c:ae:b2:f9:
c9:6a:d0:4e:10:69:f1:d4:aa:da:9e:26:75:a0:64:
4b:06:31:c0:07:60:8c:03:a4:fe:6d:2f:5c:bc:57:
d8:20:8c:71:c2:2c:54:86:6f:d7:57:1c:ee:c3:79:
5a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AA:22:38:80:5A:19:F5:6E:AE:1A:62:65:3D:C3:CC:F0:7D:D7:3C
X509v3 Authority Key Identifier:
keyid:F6:38:7E:90:C4:FE:56:EE:1B:63:94:6F:E4:D4:63:1C:60:87:E7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:78:aa:18:15:0d:ed:a6:d4:15:b8:73:4e:af:ed:bc:1a:47:
29:17:f2:64:56:dc:21:52:4d:a1:b9:bd:fc:53:2d:10:a6:b5:
b5:ce:c7:37:2c:e5:11:f6:2e:96:bc:58:b5:2b:69:52:1a:4f:
6b:67:fb:0d:69:2a:d3:25:15:ad:73:a7:2d:6a:1e:b2:ca:fb:
7b:59:0a:1b:4c:84:3d:87:6f:05:ec:a0:f7:6e:7a:91:c2:c7:
cf:55:6b:dc:31:30:95:54:da:fd:29:a0:e1:73:af:da:2c:1e:
59:84:26:33:18:6a:7c:87:d0:1e:dd:58:8b:a8:89:65:86:56:
fe:a5:b0:18:cf:95:48:02:48:c7:84:c8:df:e8:7b:a0:43:0b:
84:9c:0c:bd:36:9a:48:c0:bd:0c:48:84:3a:ed:06:fc:b9:60:
13:04:93:97:1c:f2:79:d2:1c:76:0c:f9:6e:11:fe:e8:3d:7a:
ba:de:00:05:62:3e:d3:31:00:4d:e1:19:2d:f7:3a:6a:5b:96:
bf:22:db:76:36:93:fb:5f:13:87:a6:3e:0a:7f:e4:a4:96:c6:
db:cc:18:b3:f0:1e:01:c9:0c:d5:29:29:36:ff:58:c4:5c:f9:
be:55:8a:92:95:25:8b:38:ac:e5:55:96:57:a3:3f:05:c3:f5:
b9:37:36:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:52 2025 by rpki-client