Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json)
Hash identifier: cGKcQ3sLBvf10GozjmHe7DPKdlfvqPlgJPK76nZcunE=
Subject key identifier: D6:42:48:60:4D:54:F7:81:76:0E:7D:DB:FA:20:DE:42:5F:66:61:BA
Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Certificate serial: 019A4EF5F6842213CB2B5818BFC0DDE0C946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
Manifest number: 0774
Signing time: Tue 04 Nov 2025 13:02:13 +0000
Manifest this update: Tue 04 Nov 2025 13:02:13 +0000
Manifest next update: Wed 05 Nov 2025 13:02:13 +0000
Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: yy0g3J/pZbxXzjfVtM5HpCoHDL0+9dDAs5KT4F0RahE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:f6:84:22:13:cb:2b:58:18:bf:c0:dd:e0:c9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Validity
Not Before: Nov 4 13:02:13 2025 GMT
Not After : Nov 5 13:02:13 2025 GMT
Subject: CN=d64248604d54f781760e7ddbfa20de425f6661ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:de:82:bf:2b:2e:b2:89:cd:55:c6:f1:01:66:
6a:7f:ff:a6:a3:8c:42:56:26:23:0e:d6:87:50:c0:
49:14:2b:cc:d0:1a:87:ae:f9:b2:69:00:78:9a:02:
64:2c:75:d9:0f:11:06:06:ab:ee:7c:6c:b0:8b:38:
fc:62:37:44:87:89:6a:d6:91:07:be:df:81:82:65:
1b:69:9d:f5:97:33:3e:13:50:b3:21:11:34:7a:f4:
61:13:d6:00:bd:a0:f6:56:19:37:73:94:2d:b5:c6:
74:b4:a0:f4:c4:75:38:c6:8a:1b:23:ea:c0:35:11:
d3:b5:90:83:b0:e5:2f:83:78:b0:bd:8f:64:84:b6:
66:34:c7:85:7c:10:3f:08:a3:05:a5:c3:54:a2:36:
0a:09:f9:b8:2a:98:57:24:b1:67:11:d9:b8:9d:54:
53:4d:25:98:7b:d5:81:b3:86:35:01:87:7f:b6:5c:
ad:18:93:d6:7d:d8:08:0d:45:87:87:e7:aa:04:10:
72:e9:dc:a3:b8:78:6c:dc:73:d6:bb:bc:c6:26:2e:
80:e3:5d:e0:8b:d0:7d:68:53:78:8b:21:e0:5e:a0:
8d:b6:cd:23:73:28:3e:d0:70:df:e1:74:31:b9:0c:
2f:5d:d0:5e:b4:87:cd:46:33:04:5c:ab:b1:cc:a6:
20:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:42:48:60:4D:54:F7:81:76:0E:7D:DB:FA:20:DE:42:5F:66:61:BA
X509v3 Authority Key Identifier:
keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:88:47:96:ea:e1:50:a4:26:16:53:c4:dd:56:87:1d:da:00:
6c:44:0c:55:44:3c:4e:9c:b3:2f:93:fb:11:21:fa:62:15:32:
eb:dd:f8:66:7a:bd:ff:dc:8a:03:99:66:db:23:2e:e9:82:7d:
bb:63:69:9b:5d:96:0b:e4:dc:78:68:57:d8:93:fd:0a:cf:5f:
ef:37:ad:c2:de:d3:27:47:60:0f:96:96:37:7e:f8:c3:12:ea:
b5:30:0d:ba:87:29:31:78:71:71:bc:d8:8d:87:0e:cf:d2:2d:
cb:48:3c:4b:dc:89:9f:34:c7:4c:b0:73:65:5c:8b:b7:f0:9e:
3d:34:19:ab:f0:0d:06:ee:00:7e:a2:0e:94:b5:c1:a6:90:d0:
36:ec:bf:1f:4b:11:0b:2d:9d:11:5e:2b:8b:70:d3:72:38:ef:
e9:87:04:98:a1:b6:0b:c4:9d:3c:3d:0b:f7:54:26:79:ed:a5:
28:08:a6:d8:10:b6:d2:04:ba:e4:35:d7:7e:ef:66:14:2d:21:
9a:3c:7a:c6:6a:00:91:c4:b3:a0:6b:bd:0b:57:58:8c:d7:e3:
02:b5:17:76:d4:9b:16:a2:6c:29:01:72:5a:35:9f:7d:bb:41:
b8:1c:42:12:14:97:68:05:69:9a:82:c8:b8:86:d8:ca:f6:98:
33:9e:a4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:05 2025 by rpki-client