Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft
File: rNbwonJnY07OGVnN2gPOvc5Yp70.mft (raw, json)
Hash identifier: 2tW4TjB8X+LsXvUYoNmqXJ5fr3SW1Msj+typn3YR5C0=
Subject key identifier: C9:90:1B:52:04:85:CD:73:06:60:51:72:9C:02:5A:3C:54:74:CB:9F
Authority key identifier: AC:D6:F0:A2:72:67:63:4E:CE:19:59:CD:DA:03:CE:BD:CE:58:A7:BD
Certificate issuer: /CN=acd6f0a27267634ece1959cdda03cebdce58a7bd
Certificate serial: 019A71130BFE75D20C53BB1F2922A1321D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNbwonJnY07OGVnN2gPOvc5Yp70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft
Manifest number: 01A5
Signing time: Tue 11 Nov 2025 04:01:04 +0000
Manifest this update: Tue 11 Nov 2025 04:01:04 +0000
Manifest next update: Wed 12 Nov 2025 04:01:04 +0000
Files and hashes: 1: rNbwonJnY07OGVnN2gPOvc5Yp70.crl (hash: RZ7sUkbRarrKM1LLOJf1mETo8++9vFlUapWDdbsvbxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft
rsync://rpki.ripe.net/repository/DEFAULT/rNbwonJnY07OGVnN2gPOvc5Yp70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:0b:fe:75:d2:0c:53:bb:1f:29:22:a1:32:1d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd6f0a27267634ece1959cdda03cebdce58a7bd
Validity
Not Before: Nov 11 04:01:04 2025 GMT
Not After : Nov 12 04:01:04 2025 GMT
Subject: CN=c9901b520485cd73066051729c025a3c5474cb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:36:f9:c8:f9:51:3a:fc:64:13:fa:a0:b8:
db:f3:cb:8b:42:1c:5b:aa:32:34:d6:c1:b4:a4:ef:
8f:8b:c8:c7:b6:0d:d8:58:4d:4e:0d:ef:a5:1a:51:
76:d3:eb:16:fe:3e:8c:11:8e:78:59:03:5d:33:de:
23:5e:f5:6c:96:fe:36:54:c1:44:f3:f2:bd:b3:d9:
95:02:91:ce:1a:6a:29:10:ef:85:ff:dc:ad:9a:a7:
af:f9:fc:de:78:ad:6c:42:13:ca:0a:e1:f0:fb:c0:
89:b5:fe:77:f7:cd:e2:87:44:97:46:b4:c0:e5:fd:
42:76:84:10:35:8f:c1:6c:94:08:19:8b:90:77:3d:
7b:68:e2:47:ad:46:66:49:5e:43:ad:99:8e:74:e0:
8b:f7:48:32:e1:b4:bd:f8:26:dd:59:5a:6c:47:79:
af:6d:e5:cd:7d:a9:80:b1:34:dc:23:8f:13:eb:89:
3c:f4:18:a9:74:6d:fb:8e:8a:33:c4:f0:29:1b:3f:
9e:d4:47:0b:88:61:6d:da:da:cc:56:6f:90:5e:95:
89:f9:92:95:23:3f:f3:7b:b6:8c:ca:cf:9b:b9:f9:
09:0f:4b:5b:d2:18:02:8f:2e:ea:7b:50:13:22:8f:
2d:17:47:70:7a:93:3d:eb:ce:10:82:a0:59:da:80:
8d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:90:1B:52:04:85:CD:73:06:60:51:72:9C:02:5A:3C:54:74:CB:9F
X509v3 Authority Key Identifier:
keyid:AC:D6:F0:A2:72:67:63:4E:CE:19:59:CD:DA:03:CE:BD:CE:58:A7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNbwonJnY07OGVnN2gPOvc5Yp70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8d:21:13:9b:d5:9d:ab:69:95:99:88:08:38:a8:21:68:7b:
50:e2:1e:41:8c:99:f0:a9:90:19:a0:a3:bc:25:6e:d9:90:0b:
3a:83:41:45:9d:f8:8f:66:42:ee:95:7c:9e:a6:81:44:41:e7:
99:2b:aa:9e:28:f3:04:4f:0b:a3:3b:e2:4e:06:a0:8f:3d:a4:
30:99:af:25:49:11:8c:93:c5:eb:6a:74:b6:5c:01:65:7e:88:
f9:aa:dc:e7:3a:0c:1e:24:e3:bf:bd:7f:0b:0e:53:42:10:67:
e2:0a:9e:bd:64:b9:b4:e2:00:f2:c4:9a:1f:a8:3c:9e:00:bb:
58:d7:ec:59:da:04:fa:02:e9:6d:02:38:83:8f:d7:54:22:a4:
d5:08:9e:c1:d6:44:a3:37:40:02:91:61:28:78:ec:2d:6c:3c:
60:0f:44:d1:34:a6:bb:6c:9c:61:39:42:27:0d:a0:82:cd:90:
ad:f9:d0:c8:a9:39:4f:b5:d3:0e:0f:e3:15:8b:f1:24:ad:1b:
a6:34:60:00:93:07:db:14:15:e4:1f:bd:9e:e1:f0:79:08:55:
f1:b2:ea:05:19:40:a4:2d:db:06:a2:e6:8e:84:24:18:95:7c:
75:39:8e:e2:d2:b3:91:6c:a3:63:40:ce:60:c0:53:ff:84:1f:
f9:aa:0c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:17 2025 by rpki-client