Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
File: iD9pgz7Edx87C85PAJNleTVG9qg.mft (raw, json)
Hash identifier: GRR7OTV3fTXnRctCu/T5GyL9QrCP9pJlLtKGIliOvQA=
Subject key identifier: F3:7E:0B:AE:F0:E4:43:84:14:EA:02:FA:82:1D:8B:E9:21:E4:39:D3
Authority key identifier: 88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
Certificate issuer: /CN=883f69833ec4771f3b0bce4f009365793546f6a8
Certificate serial: 019A71B7A1D902F517C0D5A0A848911B021A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
Manifest number: 075B
Signing time: Tue 11 Nov 2025 07:00:51 +0000
Manifest this update: Tue 11 Nov 2025 07:00:51 +0000
Manifest next update: Wed 12 Nov 2025 07:00:51 +0000
Files and hashes: 1: iD9pgz7Edx87C85PAJNleTVG9qg.crl (hash: q7iV36fJy77kZVLzJEPoEeDh+hK3FUMJmwbRVQC+lec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a1:d9:02:f5:17:c0:d5:a0:a8:48:91:1b:02:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f69833ec4771f3b0bce4f009365793546f6a8
Validity
Not Before: Nov 11 07:00:51 2025 GMT
Not After : Nov 12 07:00:51 2025 GMT
Subject: CN=f37e0baef0e4438414ea02fa821d8be921e439d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:75:f4:6e:95:f5:ec:cf:34:ef:75:c3:b2:3f:
40:57:88:f4:28:6f:5b:15:94:33:31:e3:f1:49:4f:
72:a3:22:46:86:2d:13:d4:f6:08:ed:b8:df:ce:07:
6a:f9:84:63:43:a1:10:ee:5c:45:78:49:f2:40:72:
90:fc:13:c2:02:05:7b:43:34:8d:dc:ec:9a:9f:80:
fd:68:8d:db:45:06:94:0f:ce:32:c3:6a:e0:8e:77:
9b:50:a6:72:81:3a:f6:88:43:8d:23:76:8c:cc:9b:
ae:53:0e:8d:5d:af:7f:fa:fb:2c:9a:07:67:35:51:
55:75:09:0f:04:18:f1:d8:10:24:09:c8:e0:14:9c:
b3:c9:fc:15:02:d8:eb:51:6b:f1:a8:33:7a:dd:ef:
b9:34:6f:91:b1:25:78:1d:f2:e5:26:0a:80:01:6b:
27:b8:80:67:38:a3:99:99:31:24:b7:fd:2d:78:72:
74:59:bb:cf:62:c4:93:c9:73:af:c5:74:53:c0:3b:
24:f2:16:7b:7d:8b:f5:10:ca:b7:c6:8c:ab:ee:9d:
3d:14:30:3b:22:d5:b3:4d:60:cd:e4:67:6e:5c:71:
f4:81:19:96:4f:d8:72:ff:ac:17:a4:ff:fd:f2:8d:
e7:b7:d1:1c:c9:ce:f5:54:81:22:54:10:dc:e2:a7:
3e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7E:0B:AE:F0:E4:43:84:14:EA:02:FA:82:1D:8B:E9:21:E4:39:D3
X509v3 Authority Key Identifier:
keyid:88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c3:c3:15:e9:c7:97:17:54:13:57:bd:f6:a7:f2:b9:7f:32:
a7:9a:e1:49:20:bf:11:bc:51:1a:ee:3f:37:ed:c7:d9:f1:8f:
f6:41:c8:3a:44:89:6f:58:a6:19:ac:12:0d:23:18:41:ad:a1:
ab:8a:5b:ea:64:dd:85:0f:8b:e8:9c:5a:f4:50:98:25:bd:de:
63:ba:94:2d:92:99:eb:2f:7a:e6:77:83:d6:21:70:27:75:f8:
1c:6c:86:1a:c9:71:87:23:ba:1b:73:e4:45:e7:38:88:a4:a6:
45:a1:d8:f7:28:03:d3:9d:49:42:cb:61:ca:d6:97:93:4b:56:
b4:2a:60:f1:1f:48:4b:d7:76:b8:9b:97:8c:ea:0d:7b:3a:03:
63:f1:41:fd:08:fb:19:d2:7d:bc:3a:3b:24:d9:96:f3:75:a4:
b4:58:d4:52:73:2a:3b:10:eb:bb:da:8e:0e:a5:90:8a:85:3f:
b4:72:a0:32:14:2c:a6:77:cc:e3:af:02:a7:79:06:7c:ce:35:
ac:9e:70:c6:87:41:7a:f6:df:f4:54:b1:47:ef:83:a1:2c:2e:
f6:aa:f3:c5:f1:89:21:4d:d4:2b:40:f1:b4:03:ed:d3:ca:e8:
22:15:04:aa:44:8b:8a:82:c5:a0:0f:5a:95:a0:75:75:cf:52:
0b:8e:9b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:33 2025 by rpki-client