Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
File: 249r9UNKqjLT5fETsAxbsUAvZ_Y.mft (raw, json)
Hash identifier: 7GUlFpAsVtyUMFTfUI90ki32QjZwWLlNW+/TYpMfzVA=
Subject key identifier: 09:AB:29:75:95:31:D3:21:B4:68:93:45:0D:F7:B5:A4:88:0C:11:31
Authority key identifier: DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6
Certificate issuer: /CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6
Certificate serial: 019A7301901FA31A6D2B3538D1B6BB4A3815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
Manifest number: 0814
Signing time: Tue 11 Nov 2025 13:01:13 +0000
Manifest this update: Tue 11 Nov 2025 13:01:13 +0000
Manifest next update: Wed 12 Nov 2025 13:01:13 +0000
Files and hashes: 1: 249r9UNKqjLT5fETsAxbsUAvZ_Y.crl (hash: +mcXgNa0DiaFZjmClvwCnmtJTy3D61Ws+4QE9NkUT/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:90:1f:a3:1a:6d:2b:35:38:d1:b6:bb:4a:38:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6
Validity
Not Before: Nov 11 13:01:13 2025 GMT
Not After : Nov 12 13:01:13 2025 GMT
Subject: CN=09ab29759531d321b46893450df7b5a4880c1131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:bb:ab:85:e4:37:0d:3d:ba:57:97:45:57:
eb:31:03:85:2f:21:47:bf:7f:63:73:3b:c9:bb:86:
b1:39:f6:1f:79:9d:05:fe:31:a1:f0:b8:1b:eb:6a:
4c:9e:6e:bd:c7:44:29:9b:2b:b8:68:8f:cc:70:b0:
2a:89:26:12:29:77:a5:78:6f:37:4b:49:1e:da:c8:
21:e3:fe:1a:b4:cc:89:0a:91:14:35:33:c1:64:77:
8f:59:db:0d:da:61:c2:53:bb:c6:36:bf:62:1e:2e:
42:f6:92:53:10:ea:6e:65:e5:aa:a4:e4:5c:2f:c7:
a5:b6:ad:8b:d0:21:84:c8:f4:c9:41:4c:94:ca:3f:
65:5c:33:6c:8a:55:0d:0a:46:42:05:d5:4c:6f:83:
e3:f4:db:7e:be:43:8e:f0:18:cd:52:38:c1:14:6c:
8a:29:03:eb:a7:39:33:a8:72:61:d7:83:61:6b:3f:
a1:ec:8b:c9:f5:4f:89:05:5c:bd:13:6b:ae:0b:66:
3e:f1:a5:4b:20:80:27:9d:14:2e:0c:13:89:df:2b:
cf:d3:26:fd:85:3f:ee:12:df:ec:0f:8b:74:d1:ae:
04:b7:d8:a7:a4:2f:d4:ae:01:a4:44:ab:e0:49:90:
9a:e8:7e:47:e5:3b:df:58:a6:87:a0:9b:ff:89:f6:
3a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AB:29:75:95:31:D3:21:B4:68:93:45:0D:F7:B5:A4:88:0C:11:31
X509v3 Authority Key Identifier:
keyid:DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f1:58:d7:36:74:61:e5:34:72:03:03:f8:d5:fa:70:5b:47:
e3:7e:f1:d1:24:80:d0:0b:74:08:da:77:6e:08:4c:8d:e3:88:
ef:9c:a1:fd:9a:0e:09:6f:fd:c0:5a:68:f9:8c:fd:a7:5d:23:
46:10:01:e7:06:d8:5d:8f:ac:24:6b:88:44:e1:db:43:fe:20:
78:15:fd:28:1b:d7:13:6c:e2:3c:4f:82:6f:eb:59:8f:0c:e1:
47:c5:50:b2:d0:12:a0:77:f3:24:f3:51:e6:b3:c2:19:f1:8d:
78:31:5f:16:13:43:be:8d:5c:48:10:5c:08:e8:82:81:0e:f6:
1f:df:e8:c5:c9:e2:93:fd:c9:21:16:68:11:72:72:45:ce:83:
ca:05:dc:e5:01:65:bc:d1:61:aa:66:e6:64:0b:45:8b:7d:d6:
d8:07:86:3d:89:35:90:9b:de:2b:1f:b4:bc:56:1c:83:74:40:
66:57:7f:5e:ef:90:d6:44:60:82:ae:23:28:4c:ff:24:21:bd:
0d:68:84:55:81:3e:eb:52:99:10:c2:48:2c:c5:20:0c:df:78:
ba:c8:b4:bf:ff:c2:54:c9:3e:21:26:12:01:41:4d:00:80:9f:
a7:d4:77:f5:bf:47:42:b9:f3:2e:ff:1a:0d:91:b1:e7:80:e5:
22:49:0d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:25 2025 by rpki-client