Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
File: moI9HNrrg3dfH7vV-frkGsXfFxk.mft (raw, json)
Hash identifier: T/vNTAd6CSfcWeOr1McAIykGgh6RefrNcp6Ksu1RTC0=
Subject key identifier: 62:B7:1F:08:A1:71:72:D3:C6:DF:DE:FE:8A:D6:1C:DF:95:B3:CC:22
Authority key identifier: 9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19
Certificate issuer: /CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719
Certificate serial: 019A4D744B98C7BDBC6CEF8F83D4BB7305C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
Manifest number: 0744
Signing time: Tue 04 Nov 2025 06:00:58 +0000
Manifest this update: Tue 04 Nov 2025 06:00:58 +0000
Manifest next update: Wed 05 Nov 2025 06:00:58 +0000
Files and hashes: 1: moI9HNrrg3dfH7vV-frkGsXfFxk.crl (hash: ruFmlJW2jf9xpdkCFTMp9PefvpOWd7A5Nvp7/cTiSsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:4b:98:c7:bd:bc:6c:ef:8f:83:d4:bb:73:05:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719
Validity
Not Before: Nov 4 06:00:58 2025 GMT
Not After : Nov 5 06:00:58 2025 GMT
Subject: CN=62b71f08a17172d3c6dfdefe8ad61cdf95b3cc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:c2:a1:b1:37:1a:e5:76:d2:3a:89:d5:21:
f7:ff:7d:18:7b:79:80:3d:dd:fd:5e:16:13:fe:42:
3a:00:79:37:27:d4:6c:bd:c1:40:d6:1e:da:3f:40:
d5:82:84:bb:d6:6b:30:4f:0a:87:41:b8:af:49:57:
45:fd:5b:ce:d6:10:aa:38:fa:17:12:06:d7:51:87:
d4:a6:15:9c:40:21:83:9d:7f:4d:26:57:23:e0:79:
27:b2:24:23:59:b6:32:c5:b0:c3:b2:ae:79:6c:6d:
3e:8b:9c:57:b0:a3:03:a6:29:dc:02:ed:79:28:01:
3d:81:60:06:0b:85:2e:aa:34:ba:e7:3e:90:b2:48:
3e:7b:0e:24:db:44:9c:e5:1d:2f:00:32:f6:6b:ed:
1a:6c:75:7c:35:64:5a:f2:2d:33:14:68:c4:ee:f7:
2a:13:84:64:37:8f:64:7b:88:3e:3c:df:45:09:14:
99:0f:cb:64:c0:fd:4b:ec:1a:a3:00:0f:7a:03:d5:
c7:3d:eb:7b:49:b9:6f:27:a6:19:75:98:7d:e1:ec:
1f:19:bc:b1:5c:79:c3:35:54:94:66:db:07:b2:ba:
45:76:3d:4c:6c:b6:7a:23:75:81:41:10:34:f4:b7:
24:55:26:f8:7a:23:96:a7:6e:b9:cb:bb:00:1f:37:
65:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B7:1F:08:A1:71:72:D3:C6:DF:DE:FE:8A:D6:1C:DF:95:B3:CC:22
X509v3 Authority Key Identifier:
keyid:9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:75:5c:e3:8d:ea:22:75:94:79:f4:8b:9a:38:17:fb:91:34:
fa:9f:47:8f:d5:60:66:99:a7:53:33:60:c0:ff:df:7d:d8:5b:
c0:9a:db:2a:be:f6:be:53:42:c3:81:6f:9e:75:b5:62:db:b5:
6b:29:79:f0:6c:b3:83:dc:7f:11:d0:2c:31:b2:a1:d5:f0:e2:
65:96:aa:62:74:99:5c:d5:d0:65:97:50:66:1e:1b:7b:02:f6:
01:8f:d1:de:e5:e5:1d:c1:90:1a:32:e7:a1:92:7b:97:37:14:
6a:ca:eb:ea:0e:2d:82:86:da:1b:6a:1f:64:72:15:93:7f:99:
04:50:67:df:79:0c:c9:08:be:68:8f:dc:c9:8c:a6:42:d7:bf:
91:16:17:9e:26:de:0e:77:b0:13:9b:8f:97:22:67:98:e6:df:
b8:bd:00:f8:b4:64:1f:fd:13:12:33:7c:c7:1e:59:a1:48:ca:
c8:f6:de:1d:dd:ad:19:46:e1:76:47:9e:56:b7:de:d0:7f:64:
7a:aa:41:ce:e4:02:1d:e4:79:87:01:72:77:85:fd:c8:5f:b1:
4a:d9:3c:6a:17:da:19:23:3c:ba:70:8a:39:b3:b7:46:69:33:
73:66:ef:78:7c:f4:c0:c2:f3:f2:be:87:5a:fa:fc:d7:7b:82:
54:71:85:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:38 2025 by rpki-client