Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
File: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft (raw, json)
Hash identifier: ZjIyaT/e1AJVz+VnmTmXenoIbczoOfvRt4hHtBC0imc=
Subject key identifier: 2C:58:AA:22:52:2A:C7:DB:1C:95:72:77:74:C8:5A:9C:CA:A9:8D:0E
Authority key identifier: F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
Certificate issuer: /CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Certificate serial: 019A72CA5865BD00992B00EDAFD9F6434736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
Manifest number: 06A1
Signing time: Tue 11 Nov 2025 12:00:54 +0000
Manifest this update: Tue 11 Nov 2025 12:00:54 +0000
Manifest next update: Wed 12 Nov 2025 12:00:54 +0000
Files and hashes: 1: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl (hash: LfFPaSTc/3ndEQt/o4tu3RWPfncdtIg6+EcpKiroGV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:58:65:bd:00:99:2b:00:ed:af:d9:f6:43:47:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Validity
Not Before: Nov 11 12:00:54 2025 GMT
Not After : Nov 12 12:00:54 2025 GMT
Subject: CN=2c58aa22522ac7db1c95727774c85a9ccaa98d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:d5:7b:61:aa:15:bc:bd:32:5d:e1:14:25:
84:f1:5a:39:71:20:53:ae:17:e8:91:94:73:84:72:
17:3b:3c:4b:9c:8d:92:1c:bf:f4:f4:54:b5:d0:36:
d1:b2:48:dc:ce:cd:15:5e:42:5a:5a:78:cb:c9:fe:
82:94:6c:c7:25:2f:ce:d9:3d:e6:d1:b2:97:0c:a9:
e8:b5:e8:e7:57:12:16:9b:6d:55:bd:96:b0:27:03:
64:cc:81:6f:45:6b:36:04:52:fc:ec:30:a6:48:ea:
02:68:72:33:a3:6b:4e:ce:ae:f7:28:2b:6d:e8:07:
28:1e:1c:65:9c:62:84:59:23:ca:24:ba:8c:cb:a5:
07:2b:b8:59:2a:f1:05:47:fc:5e:90:6f:83:e0:44:
38:dd:9a:3a:0b:fc:99:9e:de:82:d5:d0:57:70:aa:
eb:0c:11:5f:66:08:e6:ce:79:c7:c7:3b:16:e1:3c:
ca:91:f6:77:9a:e5:41:48:36:6f:2a:8f:84:b8:fd:
4c:89:b3:b0:dc:c0:29:2a:ba:23:ec:a4:19:26:38:
a1:7d:e0:d0:16:c0:fb:46:7f:8b:8e:f4:df:cb:fa:
e3:78:73:c1:a1:d7:5a:5c:9f:5b:fb:d3:26:94:90:
e5:c3:91:e4:c1:72:17:94:3b:96:d2:72:e7:a2:72:
a8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:58:AA:22:52:2A:C7:DB:1C:95:72:77:74:C8:5A:9C:CA:A9:8D:0E
X509v3 Authority Key Identifier:
keyid:F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d4:01:c2:45:f4:66:70:76:68:24:b6:a0:12:92:9d:6f:7f:
ba:28:b4:a4:ad:fa:7e:00:1a:87:be:02:17:fb:8c:35:76:3e:
5c:4f:16:61:56:0a:03:bd:a0:cc:f7:cf:d9:cd:52:89:42:7a:
2a:ff:d4:86:89:5c:04:aa:75:4e:40:6d:7e:d6:8b:1e:56:70:
da:fb:76:a8:8d:7e:6e:8c:c3:e1:67:2f:ca:ff:30:80:f3:ee:
09:44:12:22:2b:f8:47:2a:58:06:6e:55:53:4d:2e:02:5f:d4:
54:31:6d:4d:cd:61:88:79:bb:1f:64:42:71:3a:99:4c:85:7a:
04:bf:35:18:ed:a8:8b:f1:d3:65:41:5e:0c:71:ef:06:f4:f5:
e7:70:5f:e1:81:f7:94:37:db:59:ae:4c:75:a1:f0:f2:e1:6b:
90:72:45:33:5d:fa:0c:de:ef:2f:3e:5b:6d:a4:32:69:ef:86:
6d:95:92:4c:07:cc:bd:af:c7:19:7d:89:25:26:9e:ac:85:b1:
90:0f:04:11:50:3a:08:f6:6a:5d:0d:cc:b3:41:7b:b6:d7:7f:
93:81:b1:c3:f0:45:cc:04:fc:7e:8f:da:9a:19:7c:40:93:5d:
35:5a:aa:eb:17:ab:0e:57:f6:f5:ff:a3:26:4f:38:de:8a:a9:
10:5f:2a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:22 2025 by rpki-client