Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/momArWm4s3dOSrL3BbUlO0CT2rk.mft
File: momArWm4s3dOSrL3BbUlO0CT2rk.mft (raw, json)
Hash identifier: 0zlm0RIybQQ2WvTYfaYiaKLBoZtDJQfbS48S0Tnfim0=
Subject key identifier: 8C:F2:9C:59:9A:5C:4A:7F:58:AF:D8:4F:D2:54:F3:31:1C:AA:00:69
Authority key identifier: 9A:89:80:AD:69:B8:B3:77:4E:4A:B2:F7:05:B5:25:3B:40:93:DA:B9
Certificate issuer: /CN=9a8980ad69b8b3774e4ab2f705b5253b4093dab9
Certificate serial: 019A714A004731DF0C480F91AC25AEB24676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/momArWm4s3dOSrL3BbUlO0CT2rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/momArWm4s3dOSrL3BbUlO0CT2rk.mft
Manifest number: 1D
Signing time: Tue 11 Nov 2025 05:01:06 +0000
Manifest this update: Tue 11 Nov 2025 05:01:06 +0000
Manifest next update: Wed 12 Nov 2025 05:01:06 +0000
Files and hashes: 1: momArWm4s3dOSrL3BbUlO0CT2rk.crl (hash: zbOaHRBWe3p662q/KdBgkYrt+0x+AuLaFm60swxU4Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/momArWm4s3dOSrL3BbUlO0CT2rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/momArWm4s3dOSrL3BbUlO0CT2rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/momArWm4s3dOSrL3BbUlO0CT2rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:00:47:31:df:0c:48:0f:91:ac:25:ae:b2:46:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8980ad69b8b3774e4ab2f705b5253b4093dab9
Validity
Not Before: Nov 11 05:01:06 2025 GMT
Not After : Nov 12 05:01:06 2025 GMT
Subject: CN=8cf29c599a5c4a7f58afd84fd254f3311caa0069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ad:6b:02:a8:1e:5d:06:6e:f3:10:ff:07:5b:
7e:ac:4d:d6:9d:dc:21:f5:9f:bb:b9:3c:63:7c:58:
5b:d6:df:de:cd:f0:2d:5b:b6:d0:f8:73:6f:3a:01:
e7:27:7b:40:68:c7:49:07:9c:83:8b:48:7d:8e:15:
70:b5:d9:9b:15:ab:6c:95:8f:8d:ff:50:d3:44:f3:
f5:8c:2f:36:dc:57:68:0d:b2:55:7f:4a:11:18:37:
4a:b4:a3:eb:43:9d:69:63:f9:58:ff:cb:10:5f:42:
fd:1a:fc:a2:26:71:c3:13:4f:0d:22:d3:48:64:64:
20:06:da:fe:dc:5d:0f:4b:c1:ee:56:0a:b6:61:0d:
32:97:60:a2:1d:d2:d2:54:76:a9:51:e1:bf:b0:fd:
c5:d3:fb:47:a7:fe:11:3b:05:63:e9:25:7d:df:af:
73:0f:d8:a8:08:10:f2:df:bf:a2:a1:6c:55:37:b9:
9a:3d:72:03:19:c9:86:bd:89:d9:3d:d7:1f:bb:81:
ec:0d:b4:89:56:f9:ab:61:90:c8:70:f8:9c:2e:b5:
a3:bc:7a:09:38:d9:da:a4:c1:b6:de:60:18:1f:c1:
15:71:5c:27:4c:b1:c2:69:91:ef:27:d6:c5:73:d6:
6a:6c:f5:90:9a:b9:86:f9:fe:06:3b:8e:93:6f:5b:
ff:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F2:9C:59:9A:5C:4A:7F:58:AF:D8:4F:D2:54:F3:31:1C:AA:00:69
X509v3 Authority Key Identifier:
keyid:9A:89:80:AD:69:B8:B3:77:4E:4A:B2:F7:05:B5:25:3B:40:93:DA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/momArWm4s3dOSrL3BbUlO0CT2rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/momArWm4s3dOSrL3BbUlO0CT2rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/momArWm4s3dOSrL3BbUlO0CT2rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cc:9c:08:f7:40:6c:d1:53:fd:66:ff:58:cb:e1:21:66:08:
e3:aa:ce:ef:47:2d:c9:a4:18:c5:37:f6:39:c0:2b:10:78:5a:
b6:d8:6e:5b:ec:52:0c:68:68:9a:81:ae:e8:22:ef:ca:78:0e:
c6:3b:36:3d:1c:bd:94:c7:62:e6:cd:33:64:8b:86:1a:d9:d7:
dc:6a:52:de:65:0d:b6:b7:f0:48:42:8d:af:0e:47:f9:bd:11:
39:4e:0d:ab:23:30:51:ac:c4:e4:6c:f0:a5:63:94:55:0d:06:
c8:f6:b3:e8:85:e1:56:bc:a9:b3:9d:9b:84:57:b0:0f:9d:1c:
5d:22:05:de:73:b3:7f:68:df:29:20:1f:a8:ff:38:e7:b7:e3:
f7:72:61:27:ad:92:fe:a1:bc:ce:ca:2f:cb:cc:f4:83:2c:69:
6b:c9:41:93:ea:b5:84:fb:c4:ae:3a:0a:89:db:30:88:32:b3:
dd:f1:75:7d:e0:43:f6:6f:52:f9:54:0f:1a:f2:ce:10:f5:b6:
e6:84:90:50:c2:54:84:87:af:12:07:69:6a:b4:70:08:37:c9:
c2:cc:6c:29:b4:78:82:d3:da:90:01:cf:c2:06:d2:bb:07:d1:
d9:c0:6a:89:2e:b5:7e:96:b6:5a:41:25:b5:61:31:4e:a5:c1:
d1:c8:90:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:24 2025 by rpki-client