Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
File: 9vqbUoZNztDV7ON-dDciSyVCJIs.mft (raw, json)
Hash identifier: bCXOv4WrjZmqwy8+nfwS693SQYzdZgDAlHn+d8WHQ6g=
Subject key identifier: C6:D3:4C:FE:D0:EA:E5:0F:5C:D4:9C:7B:40:E9:F1:E2:04:3F:62:B8
Authority key identifier: F6:FA:9B:52:86:4D:CE:D0:D5:EC:E3:7E:74:37:22:4B:25:42:24:8B
Certificate issuer: /CN=f6fa9b52864dced0d5ece37e7437224b2542248b
Certificate serial: 019A71EE92FFF8E94AED2DF2B68861D0E0F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
Manifest number: 7B
Signing time: Tue 11 Nov 2025 08:00:51 +0000
Manifest this update: Tue 11 Nov 2025 08:00:51 +0000
Manifest next update: Wed 12 Nov 2025 08:00:51 +0000
Files and hashes: 1: 9vqbUoZNztDV7ON-dDciSyVCJIs.crl (hash: 5jQh0teFN1/FumgtG7l1hYoyyhPyXEOEqwnTiEH7npw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:92:ff:f8:e9:4a:ed:2d:f2:b6:88:61:d0:e0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6fa9b52864dced0d5ece37e7437224b2542248b
Validity
Not Before: Nov 11 08:00:51 2025 GMT
Not After : Nov 12 08:00:51 2025 GMT
Subject: CN=c6d34cfed0eae50f5cd49c7b40e9f1e2043f62b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:57:7b:e6:6f:dd:a5:00:be:eb:2e:79:d1:51:
9f:f1:0a:fa:81:f3:cc:4d:ae:21:b0:a8:c9:75:e0:
ab:ea:f1:9c:91:d0:c6:db:17:f5:a2:04:17:e8:fd:
80:08:c6:55:6c:2b:3b:5e:57:6c:15:e0:3a:84:7f:
95:a7:05:b7:27:2c:20:1e:38:90:52:47:55:4d:1c:
90:19:33:b5:68:45:e3:7f:5f:1c:95:be:8c:8c:71:
0a:6a:0a:c6:47:e1:3a:da:4a:dd:86:25:ef:70:0d:
e0:70:41:4d:b7:5e:fe:2e:cf:b2:15:7d:4e:09:66:
63:40:8c:c5:7c:23:88:72:d4:c9:95:16:62:41:e7:
1e:e9:70:84:5c:c5:84:75:56:bd:58:be:8a:0c:61:
7d:fa:25:87:16:63:ee:c8:3e:24:c7:87:86:c0:bb:
65:ef:ac:20:31:e6:ee:79:43:f7:2f:a0:23:3f:4f:
c4:10:d8:5f:9d:ae:b5:f9:95:90:f4:66:88:f8:65:
d1:e4:50:5b:34:54:9a:d7:40:9d:fe:64:66:91:e4:
8a:20:e2:48:9d:a0:2d:a7:6c:d5:ee:8e:1d:01:3d:
4e:98:cf:41:65:5b:f0:b2:5c:c0:cf:42:ad:45:4a:
f9:04:b4:50:22:db:22:54:db:88:60:a6:e5:06:b6:
cb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D3:4C:FE:D0:EA:E5:0F:5C:D4:9C:7B:40:E9:F1:E2:04:3F:62:B8
X509v3 Authority Key Identifier:
keyid:F6:FA:9B:52:86:4D:CE:D0:D5:EC:E3:7E:74:37:22:4B:25:42:24:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d6:b9:54:af:ad:c8:82:6b:d2:83:50:79:3c:06:e2:71:64:
25:ad:d2:02:81:92:74:47:8a:6c:42:1e:84:9c:85:3e:4d:94:
f2:3b:c5:4b:3f:4e:b1:71:35:3d:cf:fd:8a:1a:62:c6:0b:ef:
1f:96:da:ca:65:87:dc:5a:3e:23:44:46:64:80:41:12:1b:02:
d0:0f:d4:87:ba:66:2e:90:38:10:02:2b:a0:f4:95:6e:c5:b7:
4f:34:a0:1b:25:f9:69:85:b2:94:46:cc:a3:aa:6a:a5:67:9c:
9b:44:57:3a:9d:a8:f3:6c:bd:82:e4:92:1c:af:44:73:08:2e:
93:0d:ed:37:80:19:17:04:a2:31:f5:75:6b:2a:00:82:c4:e5:
9f:2f:a2:d7:10:80:a6:f1:ad:c1:ae:dc:7d:b0:9f:35:aa:79:
4d:e7:66:8c:f2:c3:b9:65:34:90:e5:5f:52:e7:9a:41:2b:a0:
b2:1c:70:59:42:1b:5d:6e:9a:36:1a:bb:81:e9:6d:91:c7:78:
d4:0e:73:ed:0b:04:b1:b5:cb:60:85:0f:88:c5:72:26:41:d0:
22:7b:0d:5e:36:e8:2b:6d:bf:8d:fc:8d:9c:60:bd:2a:ba:95:
c6:d8:e6:5b:79:b2:05:eb:53:6f:80:67:c7:77:88:b7:55:7a:
19:65:91:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:01 2025 by rpki-client