Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
File: V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft (raw, json)
Hash identifier: seTu3cRapJ6oOWEe6F01roxfHZizWPTV6lxSDuXc2+E=
Subject key identifier: BC:94:2F:0F:62:89:BD:9A:29:7C:DD:39:33:AD:CF:1D:FA:B6:8B:CD
Authority key identifier: 57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93
Certificate issuer: /CN=57d011b577f90aa7e8e0cc5229e1f29983824593
Certificate serial: 019A71EE77DE3E035BD8B491E9E1372EB3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 08:00:44 +0000
Manifest this update: Tue 11 Nov 2025 08:00:44 +0000
Manifest next update: Wed 12 Nov 2025 08:00:44 +0000
Files and hashes: 1: V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl (hash: T00B2KFhngyr4rKJzPLgZ15z4pxqwMqPFGSpSZYJF4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:77:de:3e:03:5b:d8:b4:91:e9:e1:37:2e:b3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d011b577f90aa7e8e0cc5229e1f29983824593
Validity
Not Before: Nov 11 08:00:44 2025 GMT
Not After : Nov 12 08:00:44 2025 GMT
Subject: CN=bc942f0f6289bd9a297cdd3933adcf1dfab68bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:ad:d5:ea:98:27:67:f5:4c:56:87:c3:56:
33:c7:7f:ba:e5:72:cf:9e:c6:1f:6e:f3:24:91:43:
5e:16:d7:fa:7a:09:2e:1e:4c:6b:3a:20:c2:9e:90:
e8:12:b0:9f:bd:5f:48:53:a0:9c:c2:5f:96:b1:aa:
db:8c:90:a6:91:c9:37:1c:39:cd:8f:3b:3f:2d:f5:
e3:a8:06:e5:ab:4a:ac:a0:1b:95:30:9f:62:9e:e3:
3b:a1:a1:5e:9f:33:98:1d:52:ca:fc:c8:80:81:54:
e4:fd:9f:6f:52:92:90:34:69:fe:77:32:9b:10:06:
dd:ba:8f:22:35:f2:8e:40:e1:ea:97:ff:e9:36:bd:
d2:c6:46:9b:79:95:51:1c:c7:98:9d:d3:c0:da:ee:
2e:23:6b:5d:87:04:22:be:90:08:f7:a6:af:23:33:
33:b4:64:62:bd:16:b4:29:b8:38:34:c0:20:3a:68:
c0:fd:2a:a6:7f:1b:a1:31:d6:9d:bd:8b:00:76:80:
eb:39:ff:cf:fc:dd:12:e1:56:84:1c:be:25:71:02:
09:34:8c:f3:54:78:84:db:75:ac:9f:25:00:c2:b2:
b2:d0:60:81:ce:9b:e4:87:7b:39:48:d7:07:4b:2e:
a5:3c:7e:b7:3e:07:e1:89:db:5b:95:63:62:16:06:
79:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:94:2F:0F:62:89:BD:9A:29:7C:DD:39:33:AD:CF:1D:FA:B6:8B:CD
X509v3 Authority Key Identifier:
keyid:57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:82:93:1a:3a:63:83:30:ba:22:76:14:d3:e8:de:59:ad:fe:
d4:cb:e9:79:ff:68:9f:9d:50:4b:26:4e:b7:0c:50:59:6e:5d:
bd:fb:65:13:7e:49:08:85:2d:cf:51:46:08:c8:2a:95:8d:ab:
eb:ff:43:ed:2d:33:04:ae:22:39:d0:39:b2:eb:f8:9a:9e:1e:
80:9d:6d:65:54:49:73:2e:41:f7:0c:32:c8:4b:80:46:c5:69:
b7:81:a0:15:a3:51:bc:99:c5:83:7a:48:c1:bc:25:04:ee:72:
f6:bd:b6:07:74:35:c2:cd:74:05:ef:73:7d:91:7d:55:e6:55:
49:5b:2a:06:47:5f:62:c4:57:09:c6:15:1d:54:df:03:52:98:
8a:90:10:0f:5a:5f:36:98:b0:47:98:37:be:9e:39:98:39:e9:
a5:b6:65:4e:c7:e6:11:9c:1b:eb:bf:e7:cc:fa:bb:af:4f:c7:
99:63:54:df:96:23:27:a8:84:00:98:16:b3:15:75:06:37:46:
c5:22:c1:1c:7e:a4:9d:4f:fb:5f:72:81:cc:2a:25:c1:e3:b3:
08:cb:cc:a1:ef:e1:60:2a:3d:d8:c0:9b:c9:d6:e8:d2:a2:02:
e5:80:40:61:04:66:0c:80:2f:b7:af:6b:4a:d9:71:73:4d:59:
80:82:ca:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:45:50 2025 by rpki-client