Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
File: 1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft (raw, json)
Hash identifier: SmzxTGI1xN1piNqzD3oLGXIVQnwGvm7i59XrNNDVbb0=
Subject key identifier: 63:D9:61:56:51:96:90:C2:97:72:EE:A5:08:FC:03:0D:3D:FE:AC:98
Authority key identifier: F9:A0:3D:24:50:DC:E5:87:D5:37:55:A9:F6:B4:A4:65:6A:28:0B:4B
Certificate issuer: /CN=f9a03d2450dce587d53755a9f6b4a4656a280b4b
Certificate serial: 019A552D66074A5094B60B3F0AB48D6FC2D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 18:00:29 +0000
Manifest this update: Wed 05 Nov 2025 18:00:29 +0000
Manifest next update: Thu 06 Nov 2025 18:00:29 +0000
Files and hashes: 1: 1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl (hash: zvfjmoPJaYFylrvm/VtTpzrpz8MA8h37VZ2eOpGN0Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:66:07:4a:50:94:b6:0b:3f:0a:b4:8d:6f:c2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a03d2450dce587d53755a9f6b4a4656a280b4b
Validity
Not Before: Nov 5 18:00:29 2025 GMT
Not After : Nov 6 18:00:29 2025 GMT
Subject: CN=63d96156519690c29772eea508fc030d3dfeac98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:3a:a7:1a:17:f7:28:86:32:b5:3e:71:90:
fa:a2:ae:b9:2e:2d:df:52:17:8b:cb:97:97:cb:74:
ab:44:e2:f5:33:fb:57:33:a8:39:56:00:0f:66:b3:
c2:68:46:84:1a:36:03:32:11:f0:cd:9e:a6:f7:1a:
af:6f:53:00:81:2f:5e:11:a9:cb:55:16:bb:5b:05:
4e:a9:fe:27:55:ef:b6:21:6e:7d:b7:ff:77:68:f2:
51:50:df:c1:b2:9c:9d:00:de:bf:97:c9:85:ee:e1:
8f:3e:53:0d:80:39:8d:e7:8e:05:e8:90:f2:e2:3c:
70:09:15:58:ca:b5:c1:49:6c:f2:8f:67:04:e5:a7:
21:4b:e9:76:21:14:24:d0:46:22:18:f1:2b:81:d2:
55:e1:fa:09:7e:53:07:4f:85:8e:a5:83:b3:4a:4d:
1e:aa:73:f8:86:40:b4:47:dc:a4:b3:94:2e:f6:8a:
db:d1:68:c6:c6:92:f0:99:d6:a9:4f:6a:49:a1:de:
24:04:f5:6c:30:5e:45:da:98:c8:6f:4e:9f:7d:7e:
3d:1e:01:90:57:eb:27:b3:bf:d7:23:b6:64:97:5f:
ed:82:97:f2:a4:83:7a:3b:a8:56:65:ba:6a:46:f5:
e9:98:88:71:91:c5:f9:db:85:88:77:49:51:58:09:
e7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D9:61:56:51:96:90:C2:97:72:EE:A5:08:FC:03:0D:3D:FE:AC:98
X509v3 Authority Key Identifier:
keyid:F9:A0:3D:24:50:DC:E5:87:D5:37:55:A9:F6:B4:A4:65:6A:28:0B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:37:56:1d:e8:6f:3b:c2:fe:e5:38:5b:fc:e0:4f:41:b8:d0:
98:62:96:7e:84:d4:cd:e4:8f:a9:4e:93:c2:d1:b5:f2:b3:ab:
ee:3c:f2:53:96:ab:45:4c:d4:48:b4:76:87:81:e4:cd:d7:f7:
8f:77:d0:fb:98:20:88:b3:9b:fa:bf:2b:1f:c4:63:d0:f8:1b:
dc:71:bb:06:10:79:58:b5:7b:e4:52:4b:d1:ad:fb:6c:16:a4:
ee:32:9f:b0:13:50:0d:c1:92:87:3b:5a:ce:25:f2:3a:7c:86:
47:71:bb:7f:d9:2e:7d:8c:41:9d:39:3c:e6:a6:9f:32:14:e1:
df:63:df:e4:9d:53:54:c0:d8:47:c4:b8:29:c0:1f:8c:26:fa:
4d:8c:b6:f2:3e:a8:57:69:ed:13:44:95:04:67:74:ba:0c:84:
33:c4:96:b1:c3:37:ad:dc:92:09:c8:d3:1f:8d:9c:7a:6e:63:
37:e0:e7:37:78:d6:fc:57:f1:6c:8f:15:10:7b:91:ea:a9:8f:
fa:44:51:a2:bd:90:e7:4b:10:55:a1:d4:01:be:64:02:67:85:
f2:e6:d1:5a:f1:1e:d2:c1:5a:9b:dd:19:0b:1e:54:80:e6:01:
7f:22:37:62:06:8d:08:e1:a4:fd:bc:79:21:bc:f2:bf:9e:1a:
66:f3:33:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:13:02 2025 by rpki-client