Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
File: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft (raw, json)
Hash identifier: jyQ/8L/C2oxXuhsm5V0kxJX9oarvd4hUkUyJ0J+RGJE=
Subject key identifier: 5E:0A:16:2B:C0:5F:F9:29:59:BD:EF:4C:8C:E9:88:E6:72:88:45:5C
Authority key identifier: F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
Certificate issuer: /CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Certificate serial: 019A4F62C1365C53EAED8E0A1473F736DFA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
Manifest number: 0DED
Signing time: Tue 04 Nov 2025 15:01:03 +0000
Manifest this update: Tue 04 Nov 2025 15:01:03 +0000
Manifest next update: Wed 05 Nov 2025 15:01:03 +0000
Files and hashes: 1: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl (hash: F4mOjXBY/5t9aWR8bA/NTspeo0uHGqEEaR3iLAfg0oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:c1:36:5c:53:ea:ed:8e:0a:14:73:f7:36:df:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Validity
Not Before: Nov 4 15:01:03 2025 GMT
Not After : Nov 5 15:01:03 2025 GMT
Subject: CN=5e0a162bc05ff92959bdef4c8ce988e67288455c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:de:8a:d4:15:2d:6f:d3:08:34:7f:6b:ec:
5e:36:ab:c1:e3:a6:89:24:9d:1c:a8:4a:8d:36:e6:
17:59:e0:cf:7c:5b:43:c8:03:3e:cf:2e:e9:39:81:
59:31:20:3f:63:40:27:1e:d3:09:2d:60:4c:29:d0:
0b:91:65:65:ed:86:c1:73:b9:06:19:58:fe:d3:ed:
bc:15:58:62:6f:fa:01:4c:24:e4:6c:ec:ec:9e:43:
8a:50:3c:3a:0b:7a:3d:2d:80:16:48:3f:cb:2b:7c:
8a:8e:7b:6b:12:50:11:d7:53:e6:ae:f4:a5:67:d1:
6d:fd:63:b8:7e:88:d9:ff:a7:27:3d:ef:da:88:63:
93:93:5f:66:7c:e8:eb:1c:1a:8e:76:c7:00:af:38:
d5:07:fd:e7:15:76:7e:87:e8:b9:32:bf:e3:c3:c5:
0a:26:0f:54:ac:2d:13:e9:90:cc:38:fd:37:ce:9b:
18:f8:86:2d:bd:24:01:02:9b:3a:ec:76:c4:a4:fa:
92:00:9a:01:94:cf:41:15:63:a2:2f:93:4f:2b:58:
de:b2:18:33:32:9f:f8:47:5b:84:eb:8b:cf:e6:b1:
e2:cc:cf:0f:de:89:78:8a:ec:b8:a0:48:90:79:99:
22:25:2f:f4:29:a8:06:37:36:86:b7:0f:96:40:29:
91:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0A:16:2B:C0:5F:F9:29:59:BD:EF:4C:8C:E9:88:E6:72:88:45:5C
X509v3 Authority Key Identifier:
keyid:F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:99:35:cf:e9:1e:f1:bf:9f:fa:54:af:85:c3:7e:b8:58:4a:
e7:38:00:0b:78:c5:91:44:3a:41:ef:c3:08:cc:4a:d4:2d:a7:
7e:af:ea:38:92:96:d6:eb:c1:ba:62:e8:c8:32:60:73:6d:9d:
20:3f:27:7c:a6:a3:9a:b1:52:33:47:10:b5:4b:80:51:b1:d8:
85:94:6a:cf:ca:8f:c8:09:72:5d:c8:8f:6a:c0:aa:67:7e:d1:
bf:e8:3e:3b:c6:c8:d1:5c:c5:30:4d:6c:f7:db:e6:72:8d:a4:
75:03:43:fa:c1:c3:ef:3c:f1:9b:f6:cb:6b:f0:ad:98:53:f2:
e2:06:73:73:e7:2c:af:fe:ea:e7:fd:08:cb:d4:74:63:c0:a4:
6d:3f:49:42:b8:e8:14:72:16:95:f8:b5:1f:fb:0e:2b:85:b5:
ab:d0:85:21:f1:0e:67:9a:82:df:a0:bd:7e:78:7a:e1:f1:5f:
f3:6a:a1:bf:39:a1:91:d4:60:3e:99:e9:a1:25:f3:75:ae:98:
ee:7b:7f:4d:45:a2:06:41:ac:b4:44:0f:f1:48:bd:f2:fc:94:
75:3f:e2:1d:99:94:ff:e2:aa:00:b0:4a:2a:ec:17:73:5f:fb:
7b:36:f4:e7:3c:81:4c:68:b6:f5:3b:85:6b:5a:63:a9:b3:9c:
98:5b:a6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:30 2025 by rpki-client