Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
File: 9WFTxQuIFb0o37sA4j5vJjIDFy4.mft (raw, json)
Hash identifier: cka58EuNAWuo89mbEV50sghH4sgA/F0bDl11w5+4+tQ=
Subject key identifier: C4:B7:A4:A8:91:A4:24:EA:36:95:78:CA:2F:0D:68:83:27:2A:E9:FD
Authority key identifier: F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
Certificate issuer: /CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Certificate serial: 019A4DE211CD2CDC89B02D6549216FE807AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
Manifest number: 0BEF
Signing time: Tue 04 Nov 2025 08:00:52 +0000
Manifest this update: Tue 04 Nov 2025 08:00:52 +0000
Manifest next update: Wed 05 Nov 2025 08:00:52 +0000
Files and hashes: 1: 9WFTxQuIFb0o37sA4j5vJjIDFy4.crl (hash: dWScT56yFHHQDoeCs3mUrpxN/N9YvZU73rowy5PS3fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:11:cd:2c:dc:89:b0:2d:65:49:21:6f:e8:07:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Validity
Not Before: Nov 4 08:00:52 2025 GMT
Not After : Nov 5 08:00:52 2025 GMT
Subject: CN=c4b7a4a891a424ea369578ca2f0d6883272ae9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:c6:e2:d8:2f:aa:9f:3b:26:2e:76:8f:db:
48:52:8e:31:af:75:f9:60:0f:26:b6:59:bf:5c:1f:
fc:4f:1b:d3:8d:86:ab:40:35:48:d2:f6:38:4a:94:
b0:5a:3b:e6:69:fe:b1:01:ff:47:7b:45:1a:fd:06:
11:23:85:8e:ad:ff:4c:72:80:f3:a9:59:1e:9a:57:
89:0e:98:4d:31:a1:32:0e:16:15:0a:76:b6:ec:47:
ba:f8:fc:b1:dd:a8:bc:15:dc:88:be:d4:13:f5:3a:
c3:0d:1f:1b:19:d1:89:08:9e:f1:05:22:ce:6b:8e:
62:5a:c2:04:d9:66:62:52:77:bf:b8:89:7b:c0:ba:
4a:6c:a8:50:ee:b3:a4:26:51:ed:73:28:8a:26:7b:
22:ed:eb:54:da:78:1d:72:4f:d7:e4:44:93:c6:ce:
70:d3:f1:71:7b:ff:d6:bc:db:e3:c8:8b:1a:e4:1f:
02:52:3d:9a:12:92:77:b1:1e:bb:e7:6c:e0:c7:30:
81:cf:c2:e8:8b:78:f5:d8:a7:da:0e:c6:9a:e3:2c:
09:83:ea:12:a5:fc:66:f7:b9:04:d9:9e:06:70:b9:
11:ad:00:8c:79:f2:dd:69:f9:b5:85:8d:76:79:bf:
48:67:91:87:fe:0b:bf:49:c4:7e:0f:5e:75:01:19:
87:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B7:A4:A8:91:A4:24:EA:36:95:78:CA:2F:0D:68:83:27:2A:E9:FD
X509v3 Authority Key Identifier:
keyid:F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5e:92:cf:b7:79:f5:5c:ec:65:88:f1:a5:f7:65:d3:13:52:
8f:4e:63:0f:d9:7a:2e:9c:c1:75:57:58:57:cc:28:7b:b4:39:
3c:30:2e:e0:10:51:05:eb:20:53:17:cf:5d:1a:25:94:31:1a:
32:fd:dc:a4:1f:f0:2f:94:ea:ac:de:c9:5c:de:47:8e:38:8b:
ac:ec:98:09:99:f0:34:a8:1f:35:85:09:e8:c2:90:46:8d:43:
48:8c:f9:03:75:fe:ef:f4:cd:ff:72:f5:62:5b:cc:79:27:25:
25:8a:a7:6d:ef:22:3d:7b:41:9b:a7:06:48:e2:d2:1b:8b:4d:
b9:c7:a3:64:fe:b5:b1:75:02:43:15:94:0c:65:6e:0c:0f:d5:
2c:c4:4b:64:e7:9f:89:db:0c:69:80:2e:d2:0e:54:92:30:6a:
de:8f:e9:d5:1f:d9:86:5a:4c:ad:5a:71:7b:19:6b:c8:3e:9c:
64:bf:df:c0:09:85:40:15:93:33:8f:ff:f1:dd:6f:f0:13:29:
4c:09:99:0d:38:2d:86:c9:8f:96:c9:a1:36:c8:47:bf:0c:05:
c6:de:ce:5c:15:7b:ef:fc:fb:15:5f:c0:3e:e4:48:df:d2:df:
31:a2:7e:b3:cf:2f:f0:bb:d8:1c:a1:63:56:7b:99:59:8e:e4:
cc:67:6c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:23 2025 by rpki-client