Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft
File: 9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft (raw, json)
Hash identifier: fufaYPZbcOO2XfZwSWqCvmBl8YrZrl8ZLtGaRKCHSH8=
Subject key identifier: 71:63:69:A4:83:64:71:28:2B:6E:1F:79:81:80:D3:3F:18:6B:B0:13
Authority key identifier: F7:14:3E:85:7E:21:54:30:FE:0C:B5:2C:2D:F4:CB:ED:1B:34:73:8D
Certificate issuer: /CN=f7143e857e215430fe0cb52c2df4cbed1b34738d
Certificate serial: 019A733850F92B0B2EB89E1573A18E258305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft
Manifest number: C2
Signing time: Tue 11 Nov 2025 14:01:01 +0000
Manifest this update: Tue 11 Nov 2025 14:01:01 +0000
Manifest next update: Wed 12 Nov 2025 14:01:01 +0000
Files and hashes: 1: 9xQ-hX4hVDD-DLUsLfTL7Rs0c40.crl (hash: +IfOq6uLRueQk+eXivAhPWQskNNf6uTcD1zIq+Oa4b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:50:f9:2b:0b:2e:b8:9e:15:73:a1:8e:25:83:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7143e857e215430fe0cb52c2df4cbed1b34738d
Validity
Not Before: Nov 11 14:01:01 2025 GMT
Not After : Nov 12 14:01:01 2025 GMT
Subject: CN=716369a4836471282b6e1f798180d33f186bb013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:15:2d:ab:e0:ae:ae:08:5c:4d:aa:20:11:
40:b9:ba:44:be:f7:55:f9:f0:0e:1f:b8:33:87:86:
6b:07:65:4a:d6:15:c9:2e:2e:63:ff:57:03:24:d6:
7d:84:90:40:0b:3e:70:5a:34:f9:57:fa:35:c7:fe:
9a:9b:d4:23:fb:dd:8a:d8:05:3d:47:b4:31:57:da:
62:76:e2:1c:be:0b:9f:8f:e8:df:63:e4:d0:ff:26:
27:71:d6:32:2f:73:2a:e1:1a:12:2d:27:59:9b:eb:
d1:31:9d:cb:c1:a9:f0:0c:83:e4:56:ff:12:dc:bc:
a5:14:37:97:40:c0:c3:00:36:31:54:84:a2:92:9b:
c5:54:5d:e8:0d:bd:e0:90:1e:db:17:a7:4c:f9:47:
35:c1:0e:43:f0:6c:3f:39:87:35:18:78:67:04:47:
06:fc:6c:a9:49:47:d4:74:ce:81:0f:0e:fa:9f:3f:
91:b6:16:8b:c7:f6:f5:7a:c2:25:61:41:98:23:6e:
01:45:e5:7a:9a:b1:cc:09:45:35:05:d1:8f:54:0d:
1a:fe:f5:c5:8a:39:e0:96:78:9e:e0:c0:b7:fe:03:
55:76:8a:cb:57:4b:dc:7a:48:c0:7d:5d:9b:55:83:
d7:b3:ca:1b:9b:95:b7:3e:13:a1:b0:aa:97:b1:86:
84:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:63:69:A4:83:64:71:28:2B:6E:1F:79:81:80:D3:3F:18:6B:B0:13
X509v3 Authority Key Identifier:
keyid:F7:14:3E:85:7E:21:54:30:FE:0C:B5:2C:2D:F4:CB:ED:1B:34:73:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:87:25:e9:b2:bc:91:57:9f:9f:50:2c:10:c3:a5:61:f9:c8:
b2:d6:ad:51:fb:71:64:ba:67:f8:ae:5f:65:f0:c6:3c:eb:46:
e5:e4:9d:e0:00:06:e5:f2:a5:ab:20:6d:b7:87:ab:36:b5:83:
8f:43:38:05:e3:30:05:59:0f:51:4f:70:f2:03:3a:f3:c7:0d:
05:72:37:82:b2:1c:32:36:8e:97:cb:f8:40:70:90:a2:7c:8f:
4f:1e:6e:48:98:d7:50:56:3f:99:f3:70:42:3c:d0:dc:3e:a7:
3a:0b:e5:18:b3:bc:3c:80:47:69:3c:1d:79:e5:14:a6:a6:b9:
fc:15:9c:42:87:fb:00:70:47:0e:30:f2:af:c8:f5:6a:a0:3d:
07:dc:d1:ab:f6:50:04:ef:2a:dd:38:e2:d1:75:59:f9:87:a5:
42:cc:76:63:ae:d8:2d:d3:22:41:26:63:f5:7a:3c:bc:a4:f7:
db:da:c3:aa:f4:83:26:f3:81:bd:82:11:56:5a:55:e0:bf:8b:
a0:90:a8:65:0c:bf:7c:41:fa:ec:2c:05:cb:1b:93:59:41:7d:
80:be:c0:c2:f9:40:be:01:2d:ef:6a:7c:e4:d1:05:53:a4:a7:
0e:a8:4f:74:1b:45:23:d9:37:7a:87:60:c8:98:5f:c9:25:67:
09:9a:2d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:56:40 2025 by rpki-client