Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
File: 9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft (raw, json)
Hash identifier: sEQepYi8qFUg78X1MnSldR9wqJ0Tbe54o8gsHcbGRos=
Subject key identifier: 54:8D:63:60:B0:4B:0E:FD:2C:1B:69:BE:B6:99:04:C1:F6:86:21:67
Authority key identifier: F6:56:FA:18:B1:19:C3:A4:9C:BB:CC:56:A6:04:57:43:9A:44:92:CE
Certificate issuer: /CN=f656fa18b119c3a49cbbcc56a60457439a4492ce
Certificate serial: 019A5150468396A60B46DAA65C8B013AA210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
Manifest number: 169A
Signing time: Wed 05 Nov 2025 00:00:06 +0000
Manifest this update: Wed 05 Nov 2025 00:00:06 +0000
Manifest next update: Thu 06 Nov 2025 00:00:06 +0000
Files and hashes: 1: 9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl (hash: iMJBU8v/FUUqjauJcLHW44+0mt7lNXmQA5+GZxoHR6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:46:83:96:a6:0b:46:da:a6:5c:8b:01:3a:a2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f656fa18b119c3a49cbbcc56a60457439a4492ce
Validity
Not Before: Nov 5 00:00:06 2025 GMT
Not After : Nov 6 00:00:06 2025 GMT
Subject: CN=548d6360b04b0efd2c1b69beb69904c1f6862167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:e1:17:04:b5:32:02:f7:70:19:17:14:10:
23:ff:1e:e5:d7:ea:00:97:e6:50:ab:80:70:df:fa:
0f:2c:91:a6:7c:72:3a:9b:b3:ec:19:e5:ee:07:4d:
e8:7a:d7:fa:53:7c:00:34:53:8c:f2:84:4e:c9:98:
78:33:a1:3b:0a:de:4a:78:3a:fc:e0:42:d7:14:e1:
4f:b0:42:b7:a8:6e:98:36:e5:53:0d:75:a6:bc:6d:
b6:56:17:75:a8:0e:cb:2d:84:47:79:5b:ee:95:c5:
0e:10:a4:2d:98:bf:d4:0e:a8:db:42:d1:95:82:b3:
e0:ef:be:0c:d2:3c:2c:eb:a5:24:63:8e:5f:db:c2:
8a:3a:bd:80:88:99:11:22:f9:7d:bc:3a:b9:4f:b1:
6d:2d:c5:0a:4c:3b:7f:47:81:c3:63:22:87:1e:f2:
c4:8f:4c:3c:af:99:6a:02:18:c6:8e:63:61:b2:77:
88:56:a8:b5:b9:1c:ce:cc:0b:87:85:c6:f5:b5:a2:
62:7a:27:cb:82:33:cd:c4:af:76:3d:b5:c3:74:8b:
19:78:15:9d:dc:f4:7f:0c:6a:5c:9b:9e:2c:33:de:
6d:e2:65:e9:9c:6f:6d:51:3f:ca:2d:09:e4:16:eb:
f3:d4:0b:87:af:0b:52:ba:33:0d:bb:cb:cc:a9:8d:
8c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8D:63:60:B0:4B:0E:FD:2C:1B:69:BE:B6:99:04:C1:F6:86:21:67
X509v3 Authority Key Identifier:
keyid:F6:56:FA:18:B1:19:C3:A4:9C:BB:CC:56:A6:04:57:43:9A:44:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b9:94:fe:bd:9e:48:98:04:fd:76:a8:d4:01:cf:60:e5:ba:
8d:f3:ee:56:a4:3d:78:ed:c5:55:b1:d1:c7:5a:35:9b:79:08:
46:ec:fd:7e:11:95:f1:c5:0d:4d:36:a6:fb:ae:d6:29:29:e0:
a3:40:ed:56:5d:da:a0:18:c8:32:8b:83:9e:11:6d:a4:11:c0:
11:66:c2:71:aa:3d:bf:a2:2f:af:79:af:0d:50:96:ce:1d:c6:
a2:fe:7e:d6:1e:5a:85:5e:40:f2:eb:41:ab:44:6a:a4:10:41:
ef:5c:62:d6:40:9c:42:76:5d:82:9f:2a:c0:5f:f3:b7:db:f6:
1f:01:e7:d3:20:71:9b:0e:f8:11:e1:d3:7a:5a:6c:5e:02:1d:
4d:0f:3b:1a:8e:29:24:97:5f:5b:e9:05:a7:0a:7b:df:63:68:
48:e7:b6:1a:3d:70:4a:b6:9a:2d:6e:db:e9:91:29:08:01:2e:
b1:27:6f:f5:bc:7b:9a:ca:ae:48:6a:6e:56:1e:8a:07:b6:3d:
56:dc:37:b1:52:50:83:28:90:b0:20:36:48:67:7e:25:6f:3f:
93:fe:e9:88:93:96:41:97:a2:98:9d:86:34:72:8a:41:90:46:
d5:cb:ee:b1:d7:4b:52:d6:0a:1f:c7:fa:3b:a2:92:3d:23:26:
10:9b:14:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:58:25 2025 by rpki-client