Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft
File: 1-ff4bGznPV12NAP0mO6zL3DEdK4.mft (raw, json)
Hash identifier: 9td6e4etXXdPaHQtri/kl4iCXyVai9drh2I6hFdFErY=
Subject key identifier: 8D:3B:7D:2F:72:78:51:79:3C:9D:F3:0F:28:C8:01:CB:21:B2:68:5A
Authority key identifier: F9:F7:F8:6C:6C:E7:3D:5D:76:34:03:F4:98:EE:B3:2F:70:C4:74:AE
Certificate issuer: /CN=f9f7f86c6ce73d5d763403f498eeb32f70c474ae
Certificate serial: 019A70DC5BD259ABEB6003AC600A81488854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ff4bGznPV12NAP0mO6zL3DEdK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft
Manifest number: 6F
Signing time: Tue 11 Nov 2025 03:01:20 +0000
Manifest this update: Tue 11 Nov 2025 03:01:20 +0000
Manifest next update: Wed 12 Nov 2025 03:01:20 +0000
Files and hashes: 1: 1-ff4bGznPV12NAP0mO6zL3DEdK4.crl (hash: H1O4ViRjfXSrDB214jqY5/qR4Hy5qUzQSY6qXxxzDKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ff4bGznPV12NAP0mO6zL3DEdK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:5b:d2:59:ab:eb:60:03:ac:60:0a:81:48:88:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9f7f86c6ce73d5d763403f498eeb32f70c474ae
Validity
Not Before: Nov 11 03:01:20 2025 GMT
Not After : Nov 12 03:01:20 2025 GMT
Subject: CN=8d3b7d2f727851793c9df30f28c801cb21b2685a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:76:d7:d9:cd:4a:e9:db:67:58:fe:4d:3e:fe:
1c:8b:59:27:f2:88:a4:4e:d1:cd:80:8b:79:4b:0b:
2b:d2:b7:49:7b:a1:ef:cf:03:b6:63:f9:4f:35:87:
ca:10:ba:18:44:05:a1:47:eb:c1:24:6c:86:8e:d2:
3e:57:cf:3e:d8:ec:b6:9c:18:82:8b:20:0c:fd:e0:
aa:7e:df:8a:96:91:5c:c2:6c:a3:db:79:34:21:d3:
b8:14:c6:ab:5b:fc:0a:f8:24:13:64:2c:f9:2a:37:
a7:4e:ec:8c:a2:3a:44:dd:61:5c:19:d7:48:66:60:
2f:05:ce:79:8a:06:87:18:8b:67:13:57:60:1b:00:
33:6c:4f:b2:29:24:88:0b:04:07:83:2b:77:d2:c1:
e0:ee:bc:e2:7a:8d:62:5f:c6:76:9b:8c:28:a4:64:
23:e1:79:7b:3f:77:12:b9:ff:21:9b:ff:1f:00:81:
9c:ec:2e:dc:6b:63:77:1a:e3:45:d6:3b:de:5d:35:
cb:c4:da:f4:19:b6:cd:05:93:3c:bd:83:c4:f7:99:
79:09:f1:9e:42:c1:14:3c:7b:89:2e:5b:be:b6:38:
0b:b1:52:39:33:bf:b5:55:1e:32:6f:47:23:5d:1c:
b0:57:33:73:87:ba:d2:9b:1e:ee:74:5d:4c:7d:a6:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3B:7D:2F:72:78:51:79:3C:9D:F3:0F:28:C8:01:CB:21:B2:68:5A
X509v3 Authority Key Identifier:
keyid:F9:F7:F8:6C:6C:E7:3D:5D:76:34:03:F4:98:EE:B3:2F:70:C4:74:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ff4bGznPV12NAP0mO6zL3DEdK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1e:89:ed:f1:c5:18:44:a7:43:12:f7:36:a9:e2:b7:bc:47:
62:74:ab:e8:6b:26:87:3c:b8:b9:49:1d:26:d4:cd:c9:fa:ad:
de:ae:72:38:d3:6b:a0:32:0c:d6:53:bc:c7:84:25:1d:b6:d5:
8c:8b:17:f4:56:4c:d4:cf:22:5a:2f:3c:5b:4c:7b:ea:f3:f0:
bc:55:9e:8b:48:76:19:79:82:a5:29:88:52:cb:71:bb:29:04:
28:d9:db:73:51:fe:dc:5c:69:3a:14:c3:81:46:e7:7c:d5:10:
b6:a8:91:41:81:42:ea:e8:39:aa:1d:90:0f:a0:b8:b7:b2:b7:
00:f6:b5:ee:24:2c:ce:fb:6f:f8:c8:fe:9f:28:55:7f:9d:0b:
96:88:72:be:1d:cc:31:e0:93:af:0f:2b:58:7e:87:60:de:f8:
c2:92:09:f9:bf:cc:63:21:1a:c0:38:4a:c9:bb:f5:66:65:8a:
15:49:fe:5d:e9:e9:cb:af:0d:01:90:94:e1:60:fc:9e:99:90:
ec:d0:72:5f:ea:7e:07:89:b9:74:29:c0:40:3e:ea:2b:11:5e:
50:4f:20:60:2e:eb:dd:63:69:7b:4c:41:0b:63:6f:54:db:b1:
0a:d0:7e:71:19:ce:a8:cc:7f:e2:97:61:9a:23:44:6f:02:42:
f9:be:5a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:20 2025 by rpki-client