Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
File: 9lO0wxURtUguuEJaORN51D_W1FU.mft (raw, json)
Hash identifier: FWp6b2ukI7kvj/qNRSS2W6wE5tMlAubgGZGjlIZjJNs=
Subject key identifier: 98:F6:B4:D2:0C:A8:6A:A0:7B:F0:54:63:B3:D8:55:A1:BD:AD:FB:8F
Authority key identifier: F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
Certificate issuer: /CN=f653b4c31511b5482eb8425a391379d43fd6d455
Certificate serial: 019A7225AD5690E8014A4F0024D133B0ABC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:01:03 +0000
Manifest this update: Tue 11 Nov 2025 09:01:03 +0000
Manifest next update: Wed 12 Nov 2025 09:01:03 +0000
Files and hashes: 1: 9lO0wxURtUguuEJaORN51D_W1FU.crl (hash: r5yzSDedjkJ0OQ3l1GGcwBRhdXeR+gsus1qf+RS1iF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ad:56:90:e8:01:4a:4f:00:24:d1:33:b0:ab:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f653b4c31511b5482eb8425a391379d43fd6d455
Validity
Not Before: Nov 11 09:01:03 2025 GMT
Not After : Nov 12 09:01:03 2025 GMT
Subject: CN=98f6b4d20ca86aa07bf05463b3d855a1bdadfb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:08:be:7c:74:fb:a9:13:ca:52:94:f7:6c:df:
2f:71:4e:17:c2:d5:34:bd:a5:9d:4b:9a:15:26:23:
e5:cb:35:8d:8f:67:32:ce:b4:f0:d9:73:20:9d:92:
1a:90:c1:0b:a8:28:15:62:60:19:30:fb:5b:cf:aa:
ea:5b:11:27:04:c3:6b:0b:65:84:9d:2f:c9:1d:5b:
2b:23:95:22:c2:f2:f2:a1:e2:4e:03:cc:6e:4c:37:
24:4e:cb:22:b9:e3:17:59:e1:4e:40:6b:cb:6d:e5:
b3:88:8d:46:c0:4b:7b:57:69:b2:16:2d:6b:8f:5c:
81:5e:db:ac:5b:c4:b3:5a:59:94:3a:20:4f:fb:fb:
37:9e:96:4e:3f:87:f1:4b:00:50:08:05:83:6d:5b:
3f:b0:0b:70:ae:64:17:24:2e:d7:e2:76:69:41:af:
83:a6:17:57:db:f9:91:fc:db:07:6f:6b:81:52:93:
80:68:29:db:0d:af:21:fc:87:b6:8b:9b:f9:67:f0:
57:6b:83:ad:e9:da:16:17:7a:b2:db:a0:23:af:92:
52:81:07:42:b1:ed:cd:9e:d5:e9:73:39:e4:16:0b:
e1:3c:93:ce:4f:5d:bb:9f:3d:11:02:d7:34:6c:c1:
32:0d:74:30:5c:77:74:c8:22:d0:c2:d9:df:25:fd:
13:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F6:B4:D2:0C:A8:6A:A0:7B:F0:54:63:B3:D8:55:A1:BD:AD:FB:8F
X509v3 Authority Key Identifier:
keyid:F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:0b:f0:09:6a:8d:de:f2:3e:11:24:0e:df:c7:83:a1:42:f2:
4d:5e:a5:67:7c:10:6e:5a:64:b9:50:d4:87:0c:aa:af:ee:0d:
11:70:b3:fe:dc:2d:3f:a5:b0:10:7a:27:19:c1:7e:2e:a7:f0:
e5:2b:b0:9a:f1:92:86:1e:5e:b8:eb:5c:98:c0:ee:9e:f5:58:
33:93:05:9f:4e:15:29:b3:91:7b:23:14:b6:7a:8f:87:63:47:
41:26:c0:a9:0c:14:d4:cf:e2:73:83:83:e5:76:62:d7:ae:06:
75:8d:bd:fc:db:31:33:a8:0f:18:68:41:b0:90:e8:e2:35:6d:
4b:00:50:7a:85:e1:1c:d1:f9:a2:2d:1b:63:3d:08:fa:2e:c8:
11:78:b3:33:94:b5:ed:51:ba:5d:3a:14:0d:3b:dc:45:97:88:
5f:77:42:34:3d:8f:ec:d8:34:62:72:65:ba:01:2c:a5:d3:a0:
35:7d:bb:86:9f:f8:45:1a:bc:8e:e1:18:f5:3e:02:81:e5:7b:
c6:2b:3b:37:fa:82:d6:d7:98:0a:6f:a8:77:ef:40:b7:73:8d:
fb:be:94:db:db:ae:5f:58:f1:cf:c4:2f:8e:8f:1a:41:35:a6:
ce:61:73:24:dc:ca:89:8c:2d:9e:86:a6:4e:e7:ca:82:36:c7:
de:1f:bb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:28 2025 by rpki-client