Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
File: 9LXIjF7ZSvHJnVAboClfQENyUcQ.mft (raw, json)
Hash identifier: TYCp/HE/BaOBeRB1KCS4VHk5hFLxrcdIIY3qGkmldi8=
Subject key identifier: 33:CA:E9:2A:01:40:06:DD:6D:EF:AD:FF:7B:A4:C7:A8:A7:99:DB:DA
Authority key identifier: F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
Certificate issuer: /CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Certificate serial: 019A72260E2ADF2F559B57369636CA440471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
Manifest number: 1635
Signing time: Tue 11 Nov 2025 09:01:27 +0000
Manifest this update: Tue 11 Nov 2025 09:01:27 +0000
Manifest next update: Wed 12 Nov 2025 09:01:27 +0000
Files and hashes: 1: 9LXIjF7ZSvHJnVAboClfQENyUcQ.crl (hash: 0gAzLZbWDTYm4h+s7jvdU6bErTgCjfpGctmDum8IFb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:0e:2a:df:2f:55:9b:57:36:96:36:ca:44:04:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Validity
Not Before: Nov 11 09:01:27 2025 GMT
Not After : Nov 12 09:01:27 2025 GMT
Subject: CN=33cae92a014006dd6defadff7ba4c7a8a799dbda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fc:b7:b1:a1:19:f7:86:5d:8b:0e:15:d6:aa:
c4:5e:3d:55:4d:a2:a3:2f:b1:18:92:86:2f:5e:d9:
57:be:df:1c:9f:aa:46:3d:74:c5:13:b3:64:c8:e7:
64:c2:37:95:96:2b:63:6c:51:db:33:bd:22:2c:57:
26:86:21:f3:36:fd:0d:8c:45:56:0d:60:db:ed:e4:
b8:32:75:b1:f1:7b:ac:6e:5c:6f:4c:58:d5:5a:19:
26:de:ba:fe:ee:62:06:09:ab:f9:7f:70:50:a8:fb:
67:d7:62:42:53:9f:cc:ef:a3:22:a7:cf:f5:04:82:
76:8e:90:2d:3a:3b:e4:da:d4:4c:2b:a6:a1:28:84:
87:69:c5:c5:3f:ae:f7:68:e1:a9:0a:29:ca:80:61:
f6:d0:f1:a7:7b:1c:aa:04:64:f1:57:6b:ba:28:5c:
20:e5:67:5a:9e:57:7b:b8:63:de:38:37:e3:80:eb:
6c:5a:f2:e3:ff:a5:79:67:cd:2a:f2:50:1d:1f:c1:
07:68:72:0f:c4:f0:ed:eb:47:eb:ee:ee:0d:b9:ab:
f2:e6:d9:c3:f3:b1:57:14:5a:fa:ac:58:95:a5:f7:
f7:cc:72:77:68:a3:a0:52:12:e9:e8:32:bb:76:41:
06:f9:dd:e6:8c:1c:75:56:62:57:cb:4f:0d:2d:54:
73:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CA:E9:2A:01:40:06:DD:6D:EF:AD:FF:7B:A4:C7:A8:A7:99:DB:DA
X509v3 Authority Key Identifier:
keyid:F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:84:02:b0:62:9d:24:17:1b:b2:44:0e:c8:cb:80:84:cb:cf:
95:08:48:45:ee:57:65:24:2f:a3:37:f5:7c:26:48:c1:aa:fe:
e6:d6:7e:c7:21:14:f5:23:c6:e4:92:10:2f:be:f8:26:fe:bb:
59:e4:fa:ae:24:7d:e6:30:b1:a5:8f:f7:a9:68:e2:d8:34:5a:
2c:12:b1:15:56:27:c5:40:c6:cb:7d:fc:e9:4b:e0:5a:10:23:
d9:6f:e2:dc:bd:e3:77:8c:36:63:b1:9b:d8:60:66:3d:0c:ba:
f3:e8:35:81:71:3a:a4:69:ee:3e:ec:1a:e6:15:69:6f:f2:88:
97:96:54:7e:d7:96:4b:2f:71:e6:82:4a:f0:aa:45:84:3a:2f:
72:32:f3:ca:a9:7f:77:78:20:77:5d:47:d4:b3:58:0a:ec:13:
3a:d4:48:f9:04:f7:39:60:af:96:a4:68:c0:b9:f2:45:0b:34:
aa:9b:a7:7e:c3:85:ff:3c:ab:a7:12:b3:1f:76:8a:77:43:49:
f1:91:40:fa:c2:94:e5:21:19:92:1b:99:5c:59:cf:ea:c3:9d:
c6:66:cc:66:3f:e5:7e:72:bd:cd:30:bd:6f:42:1c:18:97:69:
63:ef:68:e4:7a:69:c2:c1:ed:6e:a0:8c:8c:4a:e9:78:8f:00:
cb:f0:98:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:20 2025 by rpki-client