Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
File: 9keQtSf6QLqj8ts_oqFL-UzSgv8.mft (raw, json)
Hash identifier: N1M2B9uOh9mcEdAxQL10JSLTkHTu34sZ0LmEWd8MCnI=
Subject key identifier: A7:FD:6D:D3:42:8B:4F:DF:16:FC:8B:CA:C5:0D:1D:1C:C3:05:D0:08
Authority key identifier: F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF
Certificate issuer: /CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
Certificate serial: 019A7293398DAB37C271B8CFD1D60680AE4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
Manifest number: 0448
Signing time: Tue 11 Nov 2025 11:00:42 +0000
Manifest this update: Tue 11 Nov 2025 11:00:42 +0000
Manifest next update: Wed 12 Nov 2025 11:00:42 +0000
Files and hashes: 1: 9keQtSf6QLqj8ts_oqFL-UzSgv8.crl (hash: bv/MrN+LflyX+3P2Dr1mYvScLN4S3uDk6Q05HMldjKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:39:8d:ab:37:c2:71:b8:cf:d1:d6:06:80:ae:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
Validity
Not Before: Nov 11 11:00:42 2025 GMT
Not After : Nov 12 11:00:42 2025 GMT
Subject: CN=a7fd6dd3428b4fdf16fc8bcac50d1d1cc305d008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5c:c8:88:0b:d0:b0:1b:26:d4:90:55:d4:62:
9e:31:af:99:ce:c9:42:70:c9:0e:a7:e8:32:7a:9b:
a6:77:0d:b0:73:f1:ad:92:b0:8c:b0:6b:37:28:d9:
fc:2a:d1:a8:61:8a:e7:72:48:1c:cf:78:3c:8f:07:
23:fe:b7:04:e9:bd:43:9e:d8:91:de:8d:90:89:8a:
60:a9:12:48:43:82:c7:44:a1:60:db:64:db:ac:b6:
d0:72:d7:5f:d2:ff:45:ea:4f:85:c3:24:9d:e1:e4:
f9:c8:f9:b5:84:9f:9e:b5:72:70:df:18:3e:59:dc:
2a:80:2d:f0:74:5e:d1:9b:5c:32:82:72:13:c4:5d:
f9:93:5d:31:ef:04:59:8b:bd:a2:cc:a8:6b:08:ce:
ce:04:71:63:9d:eb:fc:eb:85:c4:7c:1e:4f:e3:d9:
46:88:bd:9c:0c:90:ce:f8:5c:53:4f:9b:d3:b5:35:
e4:ae:4a:d2:cf:fd:9b:f0:01:0b:43:b5:2b:b4:b6:
42:01:86:f1:77:e8:ff:ce:14:ce:f0:3a:10:bb:b6:
74:9d:48:25:59:62:38:ce:49:52:7a:b0:0a:f2:44:
75:5d:da:a4:a8:a5:16:02:5e:dc:1f:62:20:81:df:
17:bd:86:5a:e4:7d:48:d7:6d:6d:e7:3e:59:b2:18:
d4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FD:6D:D3:42:8B:4F:DF:16:FC:8B:CA:C5:0D:1D:1C:C3:05:D0:08
X509v3 Authority Key Identifier:
keyid:F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:80:72:22:76:d4:ac:27:07:5d:7b:76:08:79:77:26:18:5f:
eb:6e:fd:c5:18:77:90:79:23:87:5b:00:24:ad:76:e2:45:b1:
d3:f7:f4:77:f5:fa:f4:74:25:8c:9d:d9:32:0c:6d:02:e3:7e:
5f:12:13:54:d4:34:18:69:43:ca:24:35:14:49:0e:8b:c1:dc:
7b:18:54:80:8a:18:d9:c2:48:59:22:99:fc:8c:92:8f:07:ac:
96:fc:99:e0:6c:2e:37:0c:b7:9c:23:70:a1:ff:f9:5b:80:8d:
d4:49:cd:f0:41:3f:0a:f8:4a:dc:a0:6c:f7:21:46:cb:01:1e:
96:4e:bd:20:4f:16:7d:1d:b8:de:cc:cc:6a:b7:a1:a4:1d:86:
72:63:4e:2f:5d:b8:3d:b0:aa:59:70:80:2a:5c:a0:42:ed:d1:
51:4c:2f:c6:6c:f8:2d:67:2d:b2:fb:db:d6:da:f5:c5:8d:42:
91:4c:60:e8:7f:6e:41:50:09:08:76:ed:c1:66:4d:ca:3b:b8:
05:4c:5f:fd:4e:75:d1:09:da:00:8c:1f:ed:19:d7:a5:ae:11:
ce:97:fe:c3:e7:39:56:68:9a:b8:2a:24:a0:85:d6:d7:f1:00:
e8:49:93:29:d0:88:fd:b8:fb:bd:ed:bf:2c:de:e6:00:4a:ab:
08:a6:6b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:19 2025 by rpki-client