Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
File: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json)
Hash identifier: mjei9Y6IAeTJIuOdfx4XCK1nie0uildbrnvrOOsZ4FA=
Subject key identifier: A8:F4:E4:DB:A3:67:BF:EF:6A:A1:25:79:AA:06:B0:B9:34:58:6B:9E
Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
Certificate issuer: /CN=f4272ac0423fb097583c6872567d84cae410c89b
Certificate serial: 019A70A4CD56DEFCE8CA37EE0DBE13B4660D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
Manifest number: 0A35
Signing time: Tue 11 Nov 2025 02:00:39 +0000
Manifest this update: Tue 11 Nov 2025 02:00:39 +0000
Manifest next update: Wed 12 Nov 2025 02:00:39 +0000
Files and hashes: 1: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: N9NrLkC/1j512w1lsxQM9SQAMcoXy/MbR+MeW9GhOdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:cd:56:de:fc:e8:ca:37:ee:0d:be:13:b4:66:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b
Validity
Not Before: Nov 11 02:00:39 2025 GMT
Not After : Nov 12 02:00:39 2025 GMT
Subject: CN=a8f4e4dba367bfef6aa12579aa06b0b934586b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:06:da:ea:20:ce:d2:d9:af:07:64:15:1d:57:
8f:71:45:ab:9f:4a:27:01:f6:ec:21:ba:00:e1:93:
fb:ff:f1:55:ed:19:81:3e:73:d0:21:5c:01:eb:20:
9a:09:b1:99:df:b2:3e:99:fa:d5:36:88:ed:ee:e6:
3b:88:fe:ec:25:a9:af:9f:8f:7e:3c:aa:64:f7:72:
4f:9f:07:a5:be:4e:39:c3:4e:b5:84:be:b8:29:85:
fb:b2:6f:4a:80:9b:72:e0:7b:28:18:ea:e4:aa:8b:
ff:7d:60:72:45:e2:4f:39:00:ee:e7:11:0e:03:3c:
44:16:dc:d1:6f:46:54:ba:2a:46:12:fe:95:b8:b3:
e8:53:84:8b:7f:8f:35:a6:c0:cc:57:4d:b0:55:2b:
ff:e5:35:d5:fc:a1:31:19:cf:32:48:32:49:9d:0f:
ef:bc:b5:31:a6:68:0c:d0:66:20:13:f9:d5:0c:0e:
96:12:50:68:ed:70:72:5f:ee:3f:fb:91:8e:79:72:
bc:a2:32:6a:16:8f:02:a4:1f:d1:a8:c1:90:4f:f7:
78:5d:90:17:fd:8c:b8:5b:1d:1c:72:ce:03:0a:4c:
ee:52:7c:cd:6c:40:3b:92:2f:79:82:52:a7:68:c2:
af:db:04:59:ae:2d:1a:8e:23:f6:0d:d4:3b:b8:c6:
55:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F4:E4:DB:A3:67:BF:EF:6A:A1:25:79:AA:06:B0:B9:34:58:6B:9E
X509v3 Authority Key Identifier:
keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c7:0e:e7:1d:8e:0b:33:db:3e:65:ee:44:81:5f:99:0f:4a:
32:5b:b1:8f:d6:ba:1e:f2:90:ca:d0:86:c5:44:49:64:d1:4d:
5a:43:80:3b:a8:d3:af:a2:54:80:87:80:79:30:fd:1e:a4:89:
f2:8f:d7:ac:f7:1f:8c:36:6e:a7:6d:1b:cf:10:00:91:7e:3a:
4c:55:32:e0:00:44:5e:45:2a:38:aa:6f:4f:0f:c5:89:22:1d:
a4:c1:e3:a9:32:71:b5:66:6b:57:f9:de:13:4f:a9:74:58:b5:
d9:ad:cf:8d:ab:81:db:14:a7:3c:52:b5:b1:6e:ee:e9:27:de:
03:f7:81:25:49:c2:ce:f3:90:4f:85:7a:f3:03:80:9e:0c:d0:
a5:92:cc:ce:fd:61:7f:55:19:af:8d:1d:33:bf:4a:96:0f:1a:
16:95:c1:0b:33:e5:84:10:2b:7f:bf:63:60:79:ee:9b:67:13:
1a:69:81:7e:5b:b2:e1:b2:2d:9c:22:dd:d4:7e:38:8b:a7:70:
fc:96:e9:cc:55:87:32:25:82:54:f1:a8:80:44:b2:27:00:0d:
0c:35:48:fa:35:97:9b:ac:90:38:88:79:46:c4:d3:b0:a0:74:
b2:0f:6f:d4:ae:3f:02:cd:84:2a:5c:e3:80:cc:f5:0b:0b:7d:
23:cd:1f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:09 2025 by rpki-client