Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
File: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json)
Hash identifier: FA+y55H/J/yr/7XVDLXmMmwGE5EjzItlEo2ZKixsadA=
Subject key identifier: 9E:84:CF:56:8A:85:55:33:44:82:8D:9A:78:12:E5:D0:B9:63:94:17
Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
Certificate issuer: /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Certificate serial: 019A4FD094C06982D1F9270914E571C8D1A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
Manifest number: 12DF
Signing time: Tue 04 Nov 2025 17:01:00 +0000
Manifest this update: Tue 04 Nov 2025 17:01:00 +0000
Manifest next update: Wed 05 Nov 2025 17:01:00 +0000
Files and hashes: 1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: 79XMPVPK2lDQt7FT7MMmqEJJrYZXmcMK7asYBtvHmwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:94:c0:69:82:d1:f9:27:09:14:e5:71:c8:d1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Validity
Not Before: Nov 4 17:01:00 2025 GMT
Not After : Nov 5 17:01:00 2025 GMT
Subject: CN=9e84cf568a85553344828d9a7812e5d0b9639417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b2:66:04:33:58:a0:9c:e1:d3:ac:e1:ab:90:
4a:85:77:cc:c4:b6:a0:a4:8d:84:3d:6a:1c:04:06:
d4:f9:d9:db:1d:ac:42:2b:e6:97:af:59:b8:c6:a1:
38:bd:71:65:37:f7:99:59:fa:23:c5:46:f5:eb:d5:
f9:df:b3:c7:d7:71:cd:38:6f:92:b9:99:a6:f0:b3:
75:6b:fe:fa:fe:16:49:f1:cd:bc:81:6e:cc:c5:94:
6c:52:44:21:f0:49:bc:f7:9e:e4:55:57:93:d8:33:
ba:ea:f8:2d:71:a3:cd:16:f7:3d:21:8b:6e:0f:9b:
71:f7:bf:36:91:3f:32:41:37:94:0a:fd:a6:02:3c:
53:30:56:62:09:64:bc:a1:f9:f3:89:cc:b4:a9:ae:
2d:7f:35:03:d5:c7:76:3f:c0:fe:b5:e7:e2:11:35:
00:5a:2c:b1:fb:6f:11:67:06:a7:64:f8:3c:19:5e:
41:1e:b0:ee:83:f9:9f:6e:76:01:11:f1:81:a6:65:
79:1e:6c:a6:7c:80:c3:18:d5:e3:37:7d:5f:d8:51:
83:8a:98:2c:cd:07:54:df:b5:53:c6:ed:35:90:68:
42:7b:a2:cc:e5:71:3c:ce:1e:35:f9:b4:5f:9c:1a:
ee:25:7c:e4:fd:63:68:da:56:f5:94:6a:c6:84:b7:
6c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:84:CF:56:8A:85:55:33:44:82:8D:9A:78:12:E5:D0:B9:63:94:17
X509v3 Authority Key Identifier:
keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:4a:55:cb:96:b2:de:87:94:67:c8:72:7e:fb:84:75:4a:f0:
cb:6c:28:c7:5b:50:fd:7c:07:28:92:9d:58:a2:e4:79:0e:5c:
ca:66:55:48:3c:17:18:3c:b3:ac:a3:ac:72:27:5b:f3:eb:85:
bb:31:7a:72:69:06:36:66:b0:2b:4b:40:70:7c:ec:56:b4:ff:
e9:ae:08:7b:bc:80:ae:63:59:cb:5e:54:00:97:1d:1c:e6:19:
60:30:ab:4d:66:a6:5b:43:86:1e:1b:81:c6:76:9c:a3:b9:71:
d6:db:fb:64:9a:03:83:29:a1:c5:f4:01:ff:47:03:ad:3a:1f:
f0:91:48:4b:7c:ef:89:bf:c7:eb:b0:95:e8:17:b2:dd:9a:23:
67:81:86:46:d8:de:be:f2:0e:0c:23:06:69:4c:79:a3:94:fd:
f1:a9:32:a3:42:e5:fb:d0:71:ed:63:fe:63:de:15:4d:2a:2e:
f3:93:ae:a1:af:99:74:5c:09:0f:c3:8d:05:b2:35:0c:d7:c7:
12:b7:4b:d8:71:91:d8:31:b1:c5:12:0c:67:33:c0:9e:4e:01:
16:92:f5:ff:df:3e:eb:cd:0d:29:af:fc:35:51:c5:6e:e1:cc:
dc:d5:26:c8:8f:c0:88:d6:f5:1d:de:27:e6:c8:4b:9b:e0:65:
ce:b4:c0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:36 2025 by rpki-client