Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
File: 1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft (raw, json)
Hash identifier: Q7e8Bh7TJOrFFgp8yY3Ek3zgdrLTsDV6QaR7PJhE0rk=
Subject key identifier: 2B:E8:4E:E8:8B:10:9A:57:5F:E3:15:DC:6C:13:82:54:31:CE:01:19
Authority key identifier: FB:0F:7E:BD:25:F6:AF:46:37:82:2E:FF:48:B2:78:B1:8C:70:6F:82
Certificate issuer: /CN=fb0f7ebd25f6af4637822eff48b278b18c706f82
Certificate serial: 019A7293791A21E14CF4C9458259109D1752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
Manifest number: 16AE
Signing time: Tue 11 Nov 2025 11:00:58 +0000
Manifest this update: Tue 11 Nov 2025 11:00:58 +0000
Manifest next update: Wed 12 Nov 2025 11:00:58 +0000
Files and hashes: 1: 1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl (hash: 59mYPAXJ6ROVuH/tnkDUiyd+cBxFXz6z5u8TVCgr1aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:79:1a:21:e1:4c:f4:c9:45:82:59:10:9d:17:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb0f7ebd25f6af4637822eff48b278b18c706f82
Validity
Not Before: Nov 11 11:00:58 2025 GMT
Not After : Nov 12 11:00:58 2025 GMT
Subject: CN=2be84ee88b109a575fe315dc6c13825431ce0119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:d2:23:49:be:e0:ca:a3:8e:ef:97:22:c0:
8e:cd:e9:23:29:09:90:06:7e:a7:d0:e6:f8:f4:7d:
1e:00:77:67:3f:40:1a:83:ba:c7:ac:3b:53:aa:b4:
dd:bb:fc:df:48:01:57:9c:0d:30:ca:e3:c6:18:48:
9d:51:59:ac:40:4c:29:ca:b6:e0:44:6a:6f:eb:95:
b5:7f:bd:4e:f9:a7:54:c5:81:59:e0:4b:32:b4:9c:
c1:32:08:0a:10:17:f4:b7:59:15:cc:21:90:95:0c:
27:8b:e3:7a:c2:c5:a7:88:36:92:6e:3a:c9:91:c5:
f5:c7:de:28:27:88:2d:63:01:34:87:58:eb:38:aa:
81:07:55:b3:ad:9f:0e:7a:2d:4e:86:d9:04:4f:c8:
99:71:35:14:e8:d9:0c:d5:6e:97:37:0a:76:a7:c6:
da:a2:a3:37:65:7c:94:0c:2b:dd:c6:0c:b6:e5:d6:
4e:5b:ca:bd:9a:6c:bd:0d:45:c2:e2:8c:d0:3f:ef:
01:92:b3:09:03:c2:c2:91:7c:04:22:a0:ed:71:47:
50:19:39:62:5e:7f:4c:d3:1a:d8:19:43:d5:f5:59:
9f:d5:c8:82:72:f6:dc:0d:74:93:ae:93:d4:88:f3:
d6:f9:17:0a:9d:05:b4:75:68:68:1d:f4:36:57:e2:
63:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E8:4E:E8:8B:10:9A:57:5F:E3:15:DC:6C:13:82:54:31:CE:01:19
X509v3 Authority Key Identifier:
keyid:FB:0F:7E:BD:25:F6:AF:46:37:82:2E:FF:48:B2:78:B1:8C:70:6F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:29:a1:a9:2a:30:55:1c:6a:d9:37:16:83:06:13:bf:13:d4:
c2:5c:fa:be:f4:ad:fd:9f:cf:51:5e:d8:e1:66:bd:38:44:9c:
57:64:14:b8:f8:86:3b:12:f7:e0:63:23:bd:22:c8:66:2d:02:
e5:7c:ec:43:5b:63:26:1b:6e:8f:48:d9:3b:f9:84:6b:18:ab:
b6:ba:08:06:a9:7b:1a:a4:72:c8:45:48:c1:77:4b:18:78:22:
22:f4:ff:a0:3d:50:d0:5d:f8:d6:7e:b9:96:37:c0:13:d8:45:
15:4b:f8:a7:08:b9:ae:b2:b3:96:6e:54:94:24:8c:73:1e:dd:
e7:97:f0:c0:87:21:dc:c1:e1:f4:b2:ae:86:27:50:06:61:1f:
2e:57:19:0a:18:5e:15:27:93:a2:9e:18:9b:8f:54:aa:df:4f:
b3:44:9f:31:19:a2:8d:9d:40:68:f0:8a:05:38:a8:c9:83:fd:
ee:dc:b7:99:1e:1c:06:2c:83:56:0f:b8:b9:16:49:cf:8f:7a:
5c:cf:df:a6:90:a8:0d:d1:e4:01:26:6b:aa:b8:22:d6:04:16:
19:ab:38:06:24:11:05:d0:73:cb:3b:5d:c9:20:62:f2:82:96:
25:bf:59:87:24:aa:3c:ab:20:0f:b1:d6:be:81:6d:72:76:06:
00:dc:89:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:28 2025 by rpki-client