Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
File: 9PpnFz_1YpCIuXCWGuG-dGldxmE.mft (raw, json)
Hash identifier: DF4iFIujRm4NtzVq08s9gDVSQUkB5ApVaX0hS2FHB48=
Subject key identifier: C1:0A:DF:22:3F:91:E8:A9:8D:D8:70:1E:64:44:D6:CD:6A:E1:D6:50
Authority key identifier: F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
Certificate issuer: /CN=f4fa67173ff5629088b970961ae1be74695dc661
Certificate serial: 019A4EF4855B11846EEDB2B77395AF18CA63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:00:39 +0000
Manifest this update: Tue 04 Nov 2025 13:00:39 +0000
Manifest next update: Wed 05 Nov 2025 13:00:39 +0000
Files and hashes: 1: 9PpnFz_1YpCIuXCWGuG-dGldxmE.crl (hash: bCZaDxbC8Lj7oTyHtrSMJwDaPTBspS4eXJjHi5zVzBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:85:5b:11:84:6e:ed:b2:b7:73:95:af:18:ca:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4fa67173ff5629088b970961ae1be74695dc661
Validity
Not Before: Nov 4 13:00:39 2025 GMT
Not After : Nov 5 13:00:39 2025 GMT
Subject: CN=c10adf223f91e8a98dd8701e6444d6cd6ae1d650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:91:a7:be:85:3a:1e:ad:69:2b:24:21:2f:
a1:c5:0c:3f:b9:61:bf:d3:57:fc:6c:2b:2d:e4:38:
0a:3e:4e:21:24:a7:00:d2:8b:9a:90:cc:1d:05:56:
7a:79:8f:a8:55:7f:2a:7d:18:c6:26:5a:a8:1e:b6:
28:7b:4b:da:4d:f2:7f:c8:fb:fc:26:77:df:fe:42:
35:8e:be:54:9f:0b:79:0e:91:2d:d1:b8:3c:80:b0:
a7:ee:fc:0c:ca:78:a4:f6:5e:55:ee:8f:54:59:5e:
61:21:17:21:46:43:db:e1:36:bd:9b:a8:fa:21:38:
08:23:e1:2b:81:0c:2a:9c:66:cf:00:67:46:9d:e3:
31:bc:a6:37:aa:b3:69:2c:bb:0d:61:80:3b:82:72:
fe:41:e6:f0:ae:d6:41:81:ff:b2:db:71:9a:94:d8:
91:97:a5:ec:2b:90:39:80:06:1e:32:6e:69:13:6e:
27:56:c8:73:ec:00:d2:61:df:5a:e5:d9:b0:ee:bc:
14:aa:6e:b7:10:cd:30:91:d6:d9:b2:0b:36:d2:63:
c2:ca:9c:d7:59:0b:a4:d9:0a:71:da:fd:c8:d1:ab:
e4:a5:b2:2a:af:b5:e4:37:90:9c:1b:a4:4c:82:60:
85:ca:3a:e5:53:cb:76:45:c8:b1:ff:5f:db:1c:38:
09:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0A:DF:22:3F:91:E8:A9:8D:D8:70:1E:64:44:D6:CD:6A:E1:D6:50
X509v3 Authority Key Identifier:
keyid:F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7b:f3:47:13:e7:df:9a:c4:6d:5c:34:d8:fe:e7:3a:89:46:
f0:9b:08:08:7b:08:d3:98:9b:70:b2:f7:e7:20:c7:30:e5:c6:
9d:5c:26:45:60:23:48:5f:11:3e:71:48:e4:ad:c0:ba:1a:f7:
ab:dd:f7:f5:c8:d2:54:ee:d4:73:a9:05:ed:16:fa:4a:3a:99:
92:0e:34:0d:ec:82:87:9e:58:c4:d6:b5:95:d8:04:0f:aa:07:
22:dd:e8:db:38:b4:a2:29:b8:94:dd:87:50:09:94:5f:e1:3b:
f7:04:9a:26:1c:91:72:df:b0:52:dc:20:03:d9:a0:79:85:22:
d9:18:14:8b:83:a0:31:f8:0f:86:67:b0:48:62:1a:79:bd:e3:
c4:71:9d:2f:40:03:24:46:ee:ee:b6:3e:93:8a:04:9e:01:ca:
e1:83:01:3b:c7:cd:bf:64:68:8c:78:1a:3f:05:e4:b3:db:0a:
99:37:d6:52:39:09:ff:c9:07:fa:78:a7:88:b4:5c:a1:00:cd:
ec:8b:dd:9e:33:e1:bb:10:ef:b9:14:e2:64:5c:ff:e9:e0:bb:
28:80:03:61:04:98:e4:6b:b2:3b:4f:10:15:58:de:cd:89:58:
50:ee:30:6b:4f:c5:46:9e:c2:a3:0c:33:06:49:4e:d1:2a:85:
30:22:c7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:21 2025 by rpki-client