Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
File: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft (raw, json)
Hash identifier: wlA8IQB/OvtD+xqbo89Gn9PN9zAA/3fhXnGtQRoiFP4=
Subject key identifier: B8:80:6B:47:25:40:60:C9:A5:42:10:87:06:E0:EA:2E:60:A7:58:9D
Authority key identifier: F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
Certificate issuer: /CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Certificate serial: 019A4E18960F85CFFB2697D4CCB3700246CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
Manifest number: 0500
Signing time: Tue 04 Nov 2025 09:00:25 +0000
Manifest this update: Tue 04 Nov 2025 09:00:25 +0000
Manifest next update: Wed 05 Nov 2025 09:00:25 +0000
Files and hashes: 1: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl (hash: taxxa9IDe+ZSR1LaeyS7ds9kHnmdVM5UjtLFWnrjK7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:96:0f:85:cf:fb:26:97:d4:cc:b3:70:02:46:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Validity
Not Before: Nov 4 09:00:25 2025 GMT
Not After : Nov 5 09:00:25 2025 GMT
Subject: CN=b8806b47254060c9a542108706e0ea2e60a7589d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0f:38:38:87:fa:03:cd:3e:ae:be:c2:63:33:
e7:7b:ec:ea:f4:d8:56:35:ed:41:df:12:99:7c:21:
42:b0:44:b6:f9:9c:bd:9a:d3:0e:39:cd:d8:22:60:
a0:a7:85:98:1a:af:53:d4:64:69:5a:9c:54:d8:ee:
d4:37:9a:59:02:c4:7c:d3:12:27:25:21:f3:18:f9:
ca:8f:c4:a6:1f:88:d7:b7:e3:b2:34:96:27:5f:29:
b2:d0:0d:fb:b1:a8:a6:81:2f:df:f4:c9:50:e1:54:
d6:24:27:7a:b5:8b:b5:2f:a3:55:07:7b:ce:31:71:
f5:f7:ce:39:db:fe:18:de:28:ad:da:da:26:5b:33:
b9:fe:13:e5:d2:4f:c8:fd:88:27:99:ba:37:7f:4e:
73:e4:fc:c8:25:3f:11:b8:48:36:32:bf:8c:d2:17:
1a:45:2e:07:9c:43:5c:17:ef:34:8f:6c:e8:ad:fa:
7f:cb:ef:e3:13:95:d3:19:fa:af:7e:24:d5:f5:3b:
ad:e3:d0:5f:e1:a2:de:b1:2c:80:29:7b:0b:37:9c:
56:3f:7b:ca:38:38:e1:ab:ef:57:5e:41:82:8f:0a:
1f:4d:05:f2:47:c4:0c:fa:39:b7:be:7e:41:c3:bc:
7e:9d:40:fa:49:c9:53:78:7f:47:ec:57:a6:20:b8:
61:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:80:6B:47:25:40:60:C9:A5:42:10:87:06:E0:EA:2E:60:A7:58:9D
X509v3 Authority Key Identifier:
keyid:F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ce:29:7b:d5:28:a7:72:f7:a6:c8:49:9c:24:b5:fe:7f:54:
b4:50:42:40:7a:11:9e:73:b0:81:c5:18:03:5c:a9:2b:a5:4f:
10:d4:78:4f:fe:ef:1e:9f:02:6b:ba:14:7c:e7:0e:44:e8:84:
5f:4a:73:3b:57:c3:62:81:1d:7a:5b:f4:cb:15:78:ab:76:c7:
46:cc:46:d5:53:39:bc:79:6e:00:e9:d9:bd:2f:da:3b:c4:37:
b5:3a:9c:5f:62:46:1b:85:2f:6f:e8:93:03:f2:48:91:89:04:
90:31:eb:9b:d3:fc:6c:dc:75:28:4f:76:c1:9c:8a:79:85:b6:
b6:bf:39:b8:c6:6c:6c:78:95:a6:b3:4b:43:ce:e3:6a:78:8b:
65:39:8a:52:ed:c5:50:1d:e9:90:36:3d:83:c1:7f:0e:e3:c9:
0f:bc:27:c3:17:7d:27:70:e1:d9:97:79:79:b3:0c:23:c7:52:
03:01:a2:e1:ef:a3:7f:f3:f9:f0:0b:90:73:d2:58:0f:04:10:
0e:e3:97:0a:ff:e1:7d:b3:91:ee:50:e0:b6:80:d3:40:a3:73:
41:9a:13:71:73:7f:a3:43:b7:f4:70:67:1e:4f:a4:9c:b0:a9:
a8:c2:33:08:ef:bd:a6:b7:a4:c7:47:47:4e:f2:4b:d2:b7:86:
be:56:18:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:02 2025 by rpki-client