Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
File: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft (raw, json)
Hash identifier: ke/jcHnAgwqT8s4893Y7M58VLYpDylBp593LQmtelwk=
Subject key identifier: 88:B5:43:92:ED:E8:81:4B:64:66:1F:64:0E:DF:E4:29:BB:4E:57:57
Authority key identifier: 9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
Certificate issuer: /CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Certificate serial: 019A522CA346578D9EA916525AEE8153BE17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
Manifest number: 05B5
Signing time: Wed 05 Nov 2025 04:00:48 +0000
Manifest this update: Wed 05 Nov 2025 04:00:48 +0000
Manifest next update: Thu 06 Nov 2025 04:00:48 +0000
Files and hashes: 1: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl (hash: 1rIj3UEOP92Od9RWRYZ97DulbCXq8VgR+d28qEsT1KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:a3:46:57:8d:9e:a9:16:52:5a:ee:81:53:be:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Validity
Not Before: Nov 5 04:00:48 2025 GMT
Not After : Nov 6 04:00:48 2025 GMT
Subject: CN=88b54392ede8814b64661f640edfe429bb4e5757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:97:3d:49:fa:78:04:28:e8:75:6e:0d:52:
c0:24:1c:73:da:7c:d4:ac:6e:cc:42:47:20:1a:76:
b8:7f:19:06:29:ac:c1:3e:0e:49:66:c1:e2:7b:f8:
1c:b0:39:f1:e2:75:c2:b0:9b:74:4f:60:7d:df:f6:
37:3f:ff:06:ac:f8:b6:2f:7a:65:b7:16:4f:68:1e:
25:de:c0:e8:ec:cb:50:e2:4c:29:fc:29:e3:15:de:
0c:af:e2:87:7d:99:71:02:71:79:dd:09:0e:b4:39:
97:69:1d:a6:a4:d4:a0:dc:6b:8e:24:89:ed:e6:d4:
75:dd:a8:f4:e2:13:29:82:ce:29:19:40:e3:60:c2:
ff:e7:92:5f:f1:94:7d:ae:81:13:2e:f8:b4:f2:65:
c5:13:52:51:c1:85:ee:00:45:1f:ed:1a:60:76:23:
c2:a1:e8:83:a2:af:60:78:cd:8e:60:ab:fb:b3:5f:
14:57:04:a0:c4:48:4b:8e:11:1b:df:59:5c:7a:70:
8a:f0:57:12:e3:80:8d:aa:38:ee:1c:08:8f:20:25:
03:88:16:a5:a3:75:e0:0b:90:71:c6:25:fc:b3:29:
81:76:ba:42:38:03:a9:94:f1:8b:c2:70:98:7a:ea:
d7:f9:f4:5f:ff:6e:99:11:a8:05:94:ef:9d:39:2a:
cd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B5:43:92:ED:E8:81:4B:64:66:1F:64:0E:DF:E4:29:BB:4E:57:57
X509v3 Authority Key Identifier:
keyid:9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:23:b4:90:6c:1d:03:b5:56:f3:b2:97:70:e2:7c:67:0f:4e:
2a:50:e4:6c:5b:45:2b:ea:41:f4:7b:bc:ce:e0:30:74:2a:69:
4b:fc:96:44:45:5c:7a:cb:ff:34:df:e3:15:a7:f5:6d:d4:27:
bf:2d:dd:6c:89:b8:15:91:08:6f:f0:f5:2e:ad:f7:65:76:52:
93:c0:15:cd:70:69:65:8e:08:2f:96:81:68:68:23:b2:f5:97:
d4:8b:62:24:b7:6d:51:94:db:84:ab:28:4c:fb:88:53:ab:6a:
88:0c:bb:94:cd:48:e4:f0:e0:7e:24:e9:27:a7:fd:1f:dc:eb:
13:97:84:3a:e9:af:07:48:16:fb:6c:44:a3:dc:39:a7:74:ad:
9f:79:47:93:af:87:9e:87:28:66:d3:8f:c2:37:6f:7d:12:6f:
37:40:e4:32:da:25:07:4a:6e:29:64:14:a3:01:0a:f5:8c:e2:
9a:de:fc:a0:97:d2:d8:66:03:85:eb:76:15:71:01:80:c7:2b:
dd:ae:20:18:46:61:6e:ff:bb:9a:e6:77:6c:32:ff:31:de:f8:
34:a4:85:bb:d5:c6:93:28:bc:e3:b6:29:dc:8e:89:c3:48:1b:
31:9b:92:00:81:12:49:99:c6:e8:71:f6:90:df:3e:2b:63:ee:
cd:d1:f6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:41:12 2025 by rpki-client