Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
File: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft (raw, json)
Hash identifier: mEM7K0XSaPZw091CY93pwHpctHMmjGZ9G1TpsUCxt8g=
Subject key identifier: 16:AD:D1:09:D5:20:F8:C2:0D:05:D5:63:24:A2:63:AC:07:08:D0:D7
Authority key identifier: 73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
Certificate issuer: /CN=73d85f8438d73b5668e89cc692646f9487965fa9
Certificate serial: 019A71B8D262B454B5470B475F6E86067C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
Manifest number: 02E2
Signing time: Tue 11 Nov 2025 07:02:09 +0000
Manifest this update: Tue 11 Nov 2025 07:02:09 +0000
Manifest next update: Wed 12 Nov 2025 07:02:09 +0000
Files and hashes: 1: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl (hash: N25BHWpOL79zyQzcGss7dDqXdZOIT9QVu7BErffeQfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d2:62:b4:54:b5:47:0b:47:5f:6e:86:06:7c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d85f8438d73b5668e89cc692646f9487965fa9
Validity
Not Before: Nov 11 07:02:09 2025 GMT
Not After : Nov 12 07:02:09 2025 GMT
Subject: CN=16add109d520f8c20d05d56324a263ac0708d0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:87:82:d8:44:a6:df:9c:b3:a2:cd:9c:9c:
a1:fb:e4:fe:57:91:6e:f2:53:4a:51:30:16:a8:25:
00:71:83:48:2c:d8:19:2e:f8:67:10:af:64:c3:6d:
d4:36:fb:65:99:3a:7d:b5:f1:7b:00:5c:7c:68:dc:
07:0a:f7:a9:9d:d9:cc:7e:c0:1d:6f:81:f7:d0:03:
7a:eb:a5:05:11:58:3e:da:df:c7:16:0f:12:88:e4:
dc:55:cf:72:9c:d2:b4:22:9a:09:04:2e:ce:40:a9:
8b:6b:35:56:b5:d2:8a:57:c5:8c:93:3e:ab:ee:f1:
4d:77:da:07:a3:17:1b:cc:e9:52:6e:d0:85:5a:50:
39:9e:bf:d2:70:cc:40:41:6f:2b:32:b5:a6:de:89:
1c:88:45:6b:c4:03:26:69:08:fd:ae:54:77:fe:64:
43:da:6d:c5:36:e3:b0:ea:c6:f8:c9:48:4d:54:13:
77:21:f1:09:85:02:23:da:80:fc:71:75:2e:28:05:
21:89:c2:e9:f6:be:21:82:d2:14:05:0f:ee:e3:7b:
cb:5e:00:85:7b:af:bd:13:18:56:01:75:ff:21:94:
86:6c:5e:23:da:93:39:34:47:e3:43:35:6d:95:30:
a3:7c:18:25:30:c7:7e:a4:05:e1:3c:60:2d:d7:40:
07:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AD:D1:09:D5:20:F8:C2:0D:05:D5:63:24:A2:63:AC:07:08:D0:D7
X509v3 Authority Key Identifier:
keyid:73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:34:c1:cf:1b:ef:9c:1b:99:21:3b:d8:aa:11:81:e2:e2:be:
16:35:32:d2:ca:1b:49:71:d9:cd:cf:c9:df:de:44:95:77:ca:
17:ab:37:5a:3f:84:0e:43:56:13:f7:23:74:cc:10:3e:27:51:
b0:bb:cb:96:bf:bd:6f:1b:de:02:61:11:85:53:63:d3:db:10:
16:72:ad:54:57:e4:9d:62:ce:1d:18:8a:bc:6d:36:4d:66:ec:
48:3b:05:54:12:a2:1b:13:b5:b6:3b:d5:04:b2:bf:02:f1:f3:
17:b9:43:55:20:74:82:62:d9:0b:14:7f:26:7a:69:96:82:80:
f9:4f:17:e1:44:be:fa:c3:75:13:76:f0:99:3b:7c:95:bc:17:
62:a8:5a:34:28:07:c7:5e:00:bf:de:2a:86:43:7e:ab:e0:9d:
f0:42:d1:28:17:3e:4b:cc:03:9a:ef:fb:31:42:d9:12:d4:5e:
8b:44:d0:ab:44:97:28:b6:08:41:09:db:55:3b:a5:99:91:f4:
6c:37:8b:ad:5b:af:17:72:05:ad:88:ab:20:c0:5b:6a:41:bb:
e9:0d:bf:73:0b:8c:07:56:4f:7e:e2:fb:9d:b4:b8:7c:45:cb:
56:01:ea:c9:20:86:62:7d:b3:b7:de:87:43:44:27:2a:18:74:
44:15:06:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:23 2025 by rpki-client