Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
File: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft (raw, json)
Hash identifier: xnhZ3mQ6Rwol2kQdAR8Fz0BBwzmCcY/ptigBm3XwAW8=
Subject key identifier: 37:C3:47:6D:32:E6:84:D4:78:54:E1:84:F2:FD:F0:B8:D9:9D:28:6F
Authority key identifier: D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
Certificate issuer: /CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Certificate serial: 019A71B7A4911123B913B09F1554B559206D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
Manifest number: 13EE
Signing time: Tue 11 Nov 2025 07:00:51 +0000
Manifest this update: Tue 11 Nov 2025 07:00:51 +0000
Manifest next update: Wed 12 Nov 2025 07:00:51 +0000
Files and hashes: 1: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl (hash: NA9Vb5Ox5K0QuZWDVu6FhWcV8K1E3hoswZ6mWhgiRaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a4:91:11:23:b9:13:b0:9f:15:54:b5:59:20:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Validity
Not Before: Nov 11 07:00:51 2025 GMT
Not After : Nov 12 07:00:51 2025 GMT
Subject: CN=37c3476d32e684d47854e184f2fdf0b8d99d286f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:78:e0:e8:a8:45:41:e9:ff:51:e3:ca:9f:
96:86:cf:ad:e1:10:26:10:2b:e2:9e:6b:a2:d8:be:
43:d7:35:e6:57:cb:0f:fb:7b:6c:7e:3d:ac:11:9e:
21:02:d5:d9:f3:47:8f:c6:af:9c:79:3a:96:5c:c4:
4d:c3:40:fd:68:74:1d:d8:c3:ad:2d:43:68:a2:db:
96:31:bb:2a:a2:f8:22:cf:80:a2:d8:82:d2:0e:25:
04:cb:80:28:4a:b0:7b:7b:ea:e4:26:54:38:83:b0:
be:69:9e:78:f9:76:5c:69:d4:49:89:e4:95:3d:c2:
95:e7:ae:ba:af:2a:b7:95:24:e3:cb:75:60:ee:ee:
7d:0b:d2:39:21:df:c0:c4:1e:a1:6c:4c:89:13:11:
d8:80:5b:73:77:1e:37:db:8e:a5:1d:90:fd:56:5d:
20:d7:7e:5f:26:a9:d2:cd:4c:e4:d2:62:5e:bf:5e:
97:84:a9:34:ea:1b:8a:e8:8c:81:ad:9a:f3:19:00:
56:80:da:09:7a:c2:c0:4b:44:a3:37:26:c2:d1:87:
c6:22:64:e9:b5:d1:8c:89:30:6f:e6:a5:52:66:56:
ed:91:e8:52:9b:99:b6:82:18:82:59:99:88:92:37:
8e:4f:82:84:45:8e:d9:f1:e9:4e:b1:c0:cd:30:01:
ad:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C3:47:6D:32:E6:84:D4:78:54:E1:84:F2:FD:F0:B8:D9:9D:28:6F
X509v3 Authority Key Identifier:
keyid:D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a7:68:11:fa:c7:b4:40:d8:eb:8d:e0:cc:7e:eb:3d:6d:1b:
92:e9:4f:6b:68:4c:9e:88:76:3f:1e:8d:b2:53:3c:74:a8:16:
93:8e:92:d2:17:11:f2:4f:cc:67:ba:4d:46:df:2c:e0:be:9f:
84:08:66:df:8e:ca:ed:55:0c:0c:fc:f0:53:20:44:6b:bf:8e:
e3:08:87:cf:f1:69:90:aa:e8:fe:20:2b:2e:bd:72:df:94:1a:
27:e5:a9:77:40:2e:83:8e:06:f4:d0:96:ad:22:79:d2:81:d7:
1e:71:00:e2:78:44:29:da:b8:4e:ff:2b:12:d1:ab:9f:89:3a:
fb:36:10:53:fe:75:b9:d0:8b:3e:5d:89:20:2c:6c:fe:eb:c7:
15:ce:25:18:e6:3b:8a:2e:21:2c:dd:e5:ed:35:c4:b2:e8:e4:
1d:cc:0f:eb:12:ef:94:76:01:66:af:3b:d8:dd:a5:ec:c5:e4:
3e:d9:db:f5:ed:bf:52:2c:75:ed:e9:9a:da:49:bf:3a:55:e6:
90:ca:25:2b:56:c9:36:f0:d4:9e:bc:77:8b:5b:e5:86:e5:90:
93:93:fe:f5:1a:54:5f:5d:d2:80:f6:9e:c6:7d:24:a3:1e:43:
fb:12:4a:9d:0a:ae:1a:d4:77:65:3a:74:30:a5:28:cc:20:2e:
f0:60:39:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:06 2025 by rpki-client