Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
File: 9h0r7udUOkGpCKGgHs_AqHJqOuI.mft (raw, json)
Hash identifier: 2aLH9fJ/HfhfuaJAvdD2IVyr3TNIW5TAwDy0T2xGn3A=
Subject key identifier: 39:D9:C2:66:EA:8C:99:CA:FD:A7:72:3D:A3:86:11:2D:2A:23:9B:2E
Authority key identifier: F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
Certificate issuer: /CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Certificate serial: 019A72CA836EBCFD93A696209287CE972C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
Manifest number: 0BC1
Signing time: Tue 11 Nov 2025 12:01:05 +0000
Manifest this update: Tue 11 Nov 2025 12:01:05 +0000
Manifest next update: Wed 12 Nov 2025 12:01:05 +0000
Files and hashes: 1: 9h0r7udUOkGpCKGgHs_AqHJqOuI.crl (hash: AwrSV89INBqGNnynPZQOfwnhLzrtP4N+6nCgFaq6bLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:83:6e:bc:fd:93:a6:96:20:92:87:ce:97:2c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Validity
Not Before: Nov 11 12:01:05 2025 GMT
Not After : Nov 12 12:01:05 2025 GMT
Subject: CN=39d9c266ea8c99cafda7723da386112d2a239b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d2:fe:61:9b:90:dd:33:fd:03:86:00:3b:21:
98:e5:ac:15:4e:89:41:23:4e:fe:86:4d:2c:4d:68:
f2:e0:88:3c:4b:81:4f:7b:48:5b:74:89:cb:c6:11:
33:a9:b5:40:e1:fe:b5:c4:a5:26:d7:14:25:90:10:
42:9f:4e:e1:22:75:78:7f:aa:c8:40:a4:22:fb:f1:
29:bf:7b:60:dd:53:fa:5f:e1:11:e1:8a:90:4b:fc:
8c:0a:d6:b4:b6:40:cc:a6:28:b4:2b:87:bf:fe:eb:
f8:30:5c:a8:aa:da:76:fc:e2:9f:97:c5:58:82:cf:
ce:ee:38:95:d4:f7:6b:8e:d5:83:f8:17:60:df:fe:
98:06:af:82:a3:b6:0e:ca:cc:1d:8a:2f:a4:fe:20:
b9:e6:83:47:51:10:82:60:42:ff:54:6f:5e:27:ce:
dc:c6:d1:a4:9a:f9:16:6b:38:d4:62:ee:7d:1a:f5:
af:c3:09:7f:ea:3e:ad:3f:83:2c:50:b7:48:19:f4:
20:77:a1:76:dc:5c:6f:85:d7:76:1c:a2:bc:d9:af:
97:a9:ec:80:c2:8f:c7:1d:5d:d8:4b:03:aa:ac:76:
ff:54:4a:eb:11:f0:87:30:8a:35:55:71:92:dc:f0:
7c:de:cb:56:14:73:33:0d:0b:0e:de:15:5a:06:5b:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D9:C2:66:EA:8C:99:CA:FD:A7:72:3D:A3:86:11:2D:2A:23:9B:2E
X509v3 Authority Key Identifier:
keyid:F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5f:b5:a6:9c:b9:67:e0:6a:f8:ab:49:ec:63:4b:68:cc:1c:
39:da:07:9c:6e:8f:7f:0e:43:c3:7e:ce:d8:f6:4c:82:e6:f2:
4a:21:48:23:e0:83:67:ee:f6:c5:9d:63:82:96:d7:05:74:df:
1c:9c:52:77:9b:59:6f:cf:5c:cb:15:35:d0:9b:59:b0:b7:1b:
47:1b:38:11:d5:36:e3:3b:83:b9:88:a4:a0:be:b5:8e:a8:39:
f6:9a:e3:27:7e:cc:14:49:d9:60:6c:b0:ae:65:38:bd:fb:ce:
81:7e:1d:d7:b0:73:02:81:d3:51:1b:05:e7:62:5b:77:b8:33:
ba:53:cb:f4:4e:bf:d6:6a:d5:e2:7e:5b:75:12:62:df:36:0b:
8d:1d:95:4c:0e:ce:cc:85:75:35:8b:a5:94:90:f0:ba:92:47:
56:e5:c2:30:f9:02:5b:e6:ca:0e:42:3a:8a:c5:ee:78:39:81:
5e:0c:b6:f2:ea:3c:81:38:eb:e3:98:55:d7:86:ca:52:2c:a4:
d8:06:11:a0:26:68:6c:07:59:b0:49:9a:da:e6:67:77:46:40:
71:f6:71:49:73:0c:22:26:de:93:fb:fa:2a:3c:65:9e:3d:04:
e2:85:ab:52:24:4e:75:ed:db:1d:35:47:3d:df:7a:bd:94:9a:
3e:a7:59:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:54:53 2025 by rpki-client