Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
File: c-9b03Yu9g-njtVfVE-joFE_2EI.mft (raw, json)
Hash identifier: d9n5YL/w8J7/MK0WhFQzOXfCPg6MeNH8Kr0XmvgfSEE=
Subject key identifier: 80:92:40:27:F7:B2:D8:41:2A:71:62:4B:96:D5:ED:1D:E0:05:09:71
Authority key identifier: 73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42
Certificate issuer: /CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
Certificate serial: 019A4EF432D9C20783E0EB6BE701C1063680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
Manifest number: 1213
Signing time: Tue 04 Nov 2025 13:00:17 +0000
Manifest this update: Tue 04 Nov 2025 13:00:17 +0000
Manifest next update: Wed 05 Nov 2025 13:00:17 +0000
Files and hashes: 1: c-9b03Yu9g-njtVfVE-joFE_2EI.crl (hash: EXWWiXRtviUpPcmiQ8xe1o7MpKMW9Y40xsIsN3sHgtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:32:d9:c2:07:83:e0:eb:6b:e7:01:c1:06:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
Validity
Not Before: Nov 4 13:00:17 2025 GMT
Not After : Nov 5 13:00:17 2025 GMT
Subject: CN=80924027f7b2d8412a71624b96d5ed1de0050971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a8:96:e9:34:7c:3f:f0:79:ee:f5:b2:e1:96:
94:f8:66:80:8a:6d:e4:60:eb:7f:8e:e0:7b:93:3e:
c7:30:6b:c8:24:7d:8e:fd:43:34:93:bc:a3:40:b3:
da:cc:2a:ef:d4:46:86:80:c0:1e:e5:fc:c5:39:9c:
23:d3:bc:3a:ba:58:c7:a0:e3:2a:de:db:df:fa:c7:
a7:42:fd:cd:71:b8:70:89:5d:07:12:b1:9d:8d:94:
71:36:48:a9:84:3a:22:c7:37:2d:61:65:67:ba:4f:
33:59:4c:85:ce:bb:1a:d8:78:32:85:4c:9f:1c:5b:
b3:65:62:22:e4:d5:be:53:51:99:53:7f:ef:21:e6:
da:7b:b7:c7:17:d3:a4:97:af:e7:87:f4:04:61:e2:
88:3a:1a:75:85:f0:85:6b:2f:3a:69:51:ae:3d:7e:
b9:50:07:93:97:20:90:fc:c5:e2:b2:d7:c8:d3:2c:
ef:d3:b2:f3:7d:dc:8f:c8:4a:b3:30:64:ce:fa:cf:
a0:ec:e6:e2:a1:b6:01:3a:cd:a0:9e:f5:c7:dd:71:
ea:87:a3:52:7a:4e:9e:40:4d:b8:d0:1f:c4:c4:1e:
52:b1:00:00:9b:38:b5:b1:c4:30:ba:ef:54:dc:fd:
ce:fb:ed:cc:b1:f7:e5:59:87:ea:6a:3e:5c:01:36:
03:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:92:40:27:F7:B2:D8:41:2A:71:62:4B:96:D5:ED:1D:E0:05:09:71
X509v3 Authority Key Identifier:
keyid:73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:da:c3:37:38:bc:db:a5:59:e5:b4:e2:0c:64:1d:f4:88:35:
32:b2:cd:5a:c3:da:c1:7d:a7:fb:d7:a0:a8:d7:0f:a7:e7:11:
9b:18:50:1b:dc:aa:40:51:a5:ad:80:00:18:9d:e8:92:44:3c:
02:62:2f:30:ec:b3:45:ed:58:87:20:49:c7:ad:ef:f6:00:10:
22:c5:85:9e:22:87:3e:0d:61:74:e4:c2:ba:8c:41:14:18:f6:
65:46:07:4e:ca:54:bd:7d:c6:f1:c5:30:0f:9c:39:5a:ad:a0:
92:5e:f3:fa:fd:48:bb:31:fe:fc:c1:1e:8d:56:8b:ba:dd:87:
e3:3f:b0:4f:53:a8:15:4d:dc:23:40:fe:9e:9d:0f:a8:e4:f4:
f1:9b:ee:66:28:ea:e8:19:99:f4:3a:20:7d:d3:8b:55:86:7b:
e5:2a:68:f9:41:7d:9f:51:e5:28:5e:d4:3d:ff:8e:7f:5d:ad:
9f:c8:15:f2:19:f3:93:80:8c:04:56:31:48:0d:6d:7a:3c:4e:
f6:1f:b3:5f:53:9e:5e:6b:7c:5e:9a:af:79:2a:df:57:06:84:
9a:5c:df:1a:9b:be:f4:20:f0:eb:cd:22:0c:64:fd:67:b1:7a:
e7:53:38:62:bb:0d:14:4d:b4:5c:72:cd:47:10:92:88:b3:1d:
20:1f:46:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:30 2025 by rpki-client