Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
File: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft (raw, json)
Hash identifier: Tk+6bT6eJsuhHzjS1CmlRHkyITnK1YmR99KluvNO018=
Subject key identifier: 8D:1F:32:B1:9D:3F:9A:F5:06:E3:FD:A0:4D:43:C7:24:9D:50:DC:A9
Authority key identifier: E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
Certificate issuer: /CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
Certificate serial: 019A4F627F11556274E96955B379D87E7236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
Manifest number: 09C3
Signing time: Tue 04 Nov 2025 15:00:46 +0000
Manifest this update: Tue 04 Nov 2025 15:00:46 +0000
Manifest next update: Wed 05 Nov 2025 15:00:46 +0000
Files and hashes: 1: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl (hash: +0P92pUzwBzanlw6Pit1sQ1ne736Oi0muY1yQC+xVQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:7f:11:55:62:74:e9:69:55:b3:79:d8:7e:72:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
Validity
Not Before: Nov 4 15:00:46 2025 GMT
Not After : Nov 5 15:00:46 2025 GMT
Subject: CN=8d1f32b19d3f9af506e3fda04d43c7249d50dca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:a8:91:3a:02:e7:92:f6:05:e3:2c:0d:5a:
9c:7c:dd:0c:8d:aa:dc:46:c5:45:a7:14:d9:0b:fb:
28:ad:5f:af:a2:41:fb:5d:3d:1c:b5:2a:36:55:68:
7a:f0:c9:71:82:7e:65:8c:f5:5e:5a:f8:3d:3e:b1:
b9:38:ce:88:42:90:4f:b4:13:ea:83:5f:a5:43:7c:
d0:56:e1:2e:3e:f8:13:28:65:42:bd:c2:cb:d4:74:
73:bd:7c:f8:da:0c:62:ef:46:fb:21:ae:33:f2:8d:
d0:39:fd:36:f8:00:e3:cb:68:79:f4:5e:66:bc:6f:
a0:9f:fa:d4:fa:3d:16:0c:71:87:8d:b5:8a:95:5d:
15:62:f6:c1:e2:44:17:b5:63:28:36:37:bb:44:4b:
55:3e:3e:d4:3a:d0:a1:c3:5e:38:66:a1:b0:d4:ca:
03:ba:03:69:3b:a3:81:e3:8b:8b:2c:12:11:c1:2e:
ab:75:4c:97:fb:4c:d0:cc:d9:a2:9a:25:57:5e:05:
16:5e:bb:af:ee:21:18:95:28:1f:4b:9f:f0:f6:0d:
2a:27:0c:2e:91:8b:dc:7a:39:3b:e0:1b:a9:20:27:
a4:c0:62:d2:1a:5e:1f:36:78:8a:4b:45:a0:42:3d:
a6:08:7f:8c:f3:a8:6e:1e:2a:50:6a:bb:4a:49:e2:
b1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1F:32:B1:9D:3F:9A:F5:06:E3:FD:A0:4D:43:C7:24:9D:50:DC:A9
X509v3 Authority Key Identifier:
keyid:E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0f:4c:c2:20:86:7b:4f:c2:4a:fb:02:8e:0b:b8:eb:7f:95:
38:97:e3:46:1c:7f:a7:7d:2d:d1:60:84:db:c3:92:84:2c:4d:
43:2b:a2:2c:6a:9c:02:f1:54:e5:8b:c1:6b:e0:64:9c:7c:93:
0c:dd:a9:6b:5f:3d:98:31:6f:a6:e0:c5:10:cd:33:28:a8:e6:
26:21:11:ed:49:99:7f:07:cb:e3:84:12:87:88:91:7d:ae:c7:
95:70:cd:e1:c6:66:60:12:15:a6:59:76:ca:03:84:aa:8c:94:
32:08:ca:bd:21:ca:d7:21:24:96:33:82:e0:c2:b9:6c:b1:ad:
32:73:a5:d4:7d:a9:96:ad:8a:6c:89:dd:dc:8f:1d:0b:fe:dd:
fa:b2:76:df:69:a1:af:d1:65:32:4b:23:9b:cb:9f:0c:c0:cd:
d5:33:52:21:9e:57:29:10:5b:ba:00:7f:3f:31:ce:c6:be:73:
da:2e:f1:64:d0:be:d4:4d:8b:0e:45:81:d6:e3:ba:a7:bb:f5:
3e:c7:b0:0f:5f:74:57:c0:37:90:e4:b8:59:c2:be:6e:6f:ed:
f9:77:de:e6:9c:e8:d7:a8:53:0a:06:d7:42:1b:c6:2e:59:31:
7f:3c:c2:67:2c:98:1d:f7:47:7d:72:e1:59:9d:37:47:f4:64:
cf:19:a4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:35 2025 by rpki-client