Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
File: 9rES1L7bpvNYUoqDcUG3SwkphZM.mft (raw, json)
Hash identifier: Y9H2/ExE7XwDgVmNRF99wS+hxr0li6d3zxB+xLQUoDI=
Subject key identifier: DE:50:D9:13:AE:92:53:A8:93:A8:F8:AF:C9:59:94:7F:B8:50:7D:1D
Authority key identifier: F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
Certificate issuer: /CN=f6b112d4bedba6f358528a837141b74b09298593
Certificate serial: 019A711373A09A351133CA5C8B27293799A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
Manifest number: 166E
Signing time: Tue 11 Nov 2025 04:01:31 +0000
Manifest this update: Tue 11 Nov 2025 04:01:31 +0000
Manifest next update: Wed 12 Nov 2025 04:01:31 +0000
Files and hashes: 1: 9rES1L7bpvNYUoqDcUG3SwkphZM.crl (hash: SZfdyrznDsJ7hnwGMktUGkuxN0HgTbQpxmqLJ+/5cCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:73:a0:9a:35:11:33:ca:5c:8b:27:29:37:99:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b112d4bedba6f358528a837141b74b09298593
Validity
Not Before: Nov 11 04:01:31 2025 GMT
Not After : Nov 12 04:01:31 2025 GMT
Subject: CN=de50d913ae9253a893a8f8afc959947fb8507d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:73:a2:d3:8f:5e:e8:e0:cf:00:6a:04:5c:
29:09:12:b0:17:48:f7:c5:d3:53:dc:82:bc:05:2e:
d8:14:26:fc:27:90:36:c2:6d:f9:aa:68:66:e7:de:
ce:d5:2d:2e:3e:d0:21:f9:e7:4d:ac:e3:73:6e:f1:
4d:a8:47:01:ec:fb:43:cc:cb:6b:82:71:7b:60:15:
a1:89:0a:ad:48:c2:ee:d6:e2:c1:1f:b8:4b:62:29:
66:1a:3b:58:19:c0:23:67:e2:f1:56:3f:93:50:8c:
9f:58:d3:9a:0f:a4:f7:e2:76:ad:74:6f:3b:55:71:
60:ca:3d:0c:ca:06:e5:1e:fd:90:79:d1:95:3d:e1:
a3:ca:77:df:10:a6:3a:78:92:ef:09:ee:be:6b:99:
23:bb:80:3b:b1:41:66:f5:c7:3d:26:44:ff:e1:3f:
49:e2:8b:3c:d4:28:5d:11:47:58:70:cd:2b:06:0b:
fb:e3:c4:7a:e3:be:0b:9e:d2:fe:fe:ca:40:cb:0e:
07:03:c2:ff:7d:c1:10:91:b3:b3:6b:19:d7:24:2e:
91:43:58:3c:c2:2f:57:70:1a:c6:6e:f8:b1:e9:7b:
16:37:7f:cc:fd:a3:23:a3:8f:c8:3a:ef:b6:bd:cb:
f1:09:be:04:5d:46:92:0f:66:7a:81:5c:40:ae:45:
0c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:50:D9:13:AE:92:53:A8:93:A8:F8:AF:C9:59:94:7F:B8:50:7D:1D
X509v3 Authority Key Identifier:
keyid:F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ed:f8:8b:c2:72:4a:94:be:e5:c0:81:d8:70:3b:ac:b1:b1:
f7:b2:b5:a0:84:8c:c1:de:52:bb:2b:a1:08:9b:b9:59:b2:69:
51:c9:a7:28:ac:42:e8:c5:8b:c0:ff:9e:55:f8:d0:7d:b5:2e:
01:af:91:78:99:d9:4c:55:b3:54:64:fd:4f:99:ae:7a:7d:5e:
47:86:6d:7f:b2:6c:c9:cf:9e:2b:66:79:27:c1:b7:3a:60:dd:
6e:dd:d3:e9:62:68:21:7f:5c:18:3f:d9:ed:e3:28:30:c2:bf:
a2:3b:3d:3c:d3:cb:9a:fa:f6:3d:8a:1a:1c:3e:c2:36:2a:16:
5a:b6:c4:02:86:c7:8f:d5:6c:29:83:af:a9:13:50:3a:e7:7e:
ae:90:8d:4f:c8:aa:a9:21:25:57:2e:29:05:44:79:13:2f:fc:
c4:af:87:45:02:b6:2a:96:3b:c8:64:3f:e5:8b:46:9b:b3:42:
0b:37:cd:20:c2:3f:0d:84:09:e8:c1:4e:30:e8:59:cb:b9:99:
de:45:b7:7f:80:a7:ad:ee:b9:82:80:d7:10:ab:51:1f:1f:85:
c7:91:75:5c:b1:96:28:af:82:db:73:a6:d5:c9:cc:c6:f4:e2:
99:ec:d5:1a:6b:f1:dd:02:4e:ce:47:21:64:50:50:81:be:0a:
b8:54:55:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:28:40 2025 by rpki-client