Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
File: n9e3i11VWv7XZxyRbCbrf_x-LJo.mft (raw, json)
Hash identifier: 7OqWVnlYfAl9arw2oytuAZH48CKtTWnugBtanvv3nQY=
Subject key identifier: 7B:B3:59:82:51:A7:21:28:4F:76:1F:3E:54:B7:6E:0E:C3:EF:69:26
Authority key identifier: 9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A
Certificate issuer: /CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
Certificate serial: 019A7293EAD6667CBF7F39D270DD98770601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
Manifest number: 061B
Signing time: Tue 11 Nov 2025 11:01:27 +0000
Manifest this update: Tue 11 Nov 2025 11:01:27 +0000
Manifest next update: Wed 12 Nov 2025 11:01:27 +0000
Files and hashes: 1: n9e3i11VWv7XZxyRbCbrf_x-LJo.crl (hash: O8GYu7Jl5HwSRBJH/mwpXzRWq3am7H9vnIeqOmJLU0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ea:d6:66:7c:bf:7f:39:d2:70:dd:98:77:06:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
Validity
Not Before: Nov 11 11:01:27 2025 GMT
Not After : Nov 12 11:01:27 2025 GMT
Subject: CN=7bb3598251a721284f761f3e54b76e0ec3ef6926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:6f:f0:d3:01:05:12:69:aa:3f:c2:6b:15:
c1:da:27:e0:63:2a:9b:5b:ac:5a:27:35:bf:1f:c5:
0d:dd:4e:16:df:dc:79:c4:07:d9:27:b5:ac:95:31:
a1:82:cb:0d:28:5f:c8:8c:04:56:66:6c:5a:7f:4b:
7d:4f:80:7e:39:66:cc:67:b4:42:b8:aa:fb:3c:f1:
b9:d2:6f:ae:29:d7:81:93:2e:cf:01:70:fd:00:2c:
c5:19:2a:43:6f:d3:03:99:1f:65:42:b3:24:6e:5a:
f0:64:dd:a8:78:3e:b1:ae:73:0a:59:f1:35:ce:5f:
44:b2:f2:22:34:4c:a3:82:92:de:51:7e:c3:0b:ab:
b7:86:fe:02:08:03:20:de:a5:06:ec:86:01:69:db:
fc:4c:f2:31:48:1b:a6:b5:ff:32:82:b3:e0:9d:75:
f1:12:6f:0c:f0:84:73:91:c3:b0:9e:89:8a:70:81:
08:62:6a:86:74:c4:dc:f8:48:8b:d3:c9:92:a8:74:
93:e1:8d:d7:37:5a:aa:65:d1:8f:94:d0:a1:c3:20:
86:e6:37:fa:e2:d7:91:cb:94:6d:dc:5b:ad:6a:5c:
cd:ab:57:66:1f:8a:dc:d7:74:58:df:14:d7:9f:50:
3a:ea:6f:ec:14:fd:e8:29:91:8b:63:5a:52:cb:aa:
54:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B3:59:82:51:A7:21:28:4F:76:1F:3E:54:B7:6E:0E:C3:EF:69:26
X509v3 Authority Key Identifier:
keyid:9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f5:f5:d1:7d:d1:ad:bb:c0:3d:9c:4e:1f:0b:5f:7c:6c:d1:
94:4b:72:c6:6a:89:ef:cb:4f:bc:30:7b:4e:8b:e0:ef:38:30:
65:4b:40:32:ff:34:37:76:9b:55:c2:c3:a5:74:2a:3a:78:2d:
cc:20:09:38:b3:96:90:67:ea:c0:93:8d:85:77:10:a4:dd:db:
15:39:6d:67:7a:50:6a:99:ff:e7:1a:78:ab:02:0f:6b:0f:76:
96:59:7b:c4:05:7a:e8:15:6d:57:fd:e7:d0:35:73:a7:42:db:
37:b8:a0:7a:25:1a:a6:0b:af:71:5f:f7:fc:0c:bd:83:1d:21:
ce:6d:c5:af:e1:82:0d:f1:0e:f3:66:9b:13:a8:3b:ac:75:70:
32:ad:66:25:48:87:4e:80:bd:fd:48:3b:a1:ca:a8:c8:39:98:
94:00:b4:a2:ae:4d:19:b4:d5:c9:1b:1f:28:00:bc:db:c6:2b:
93:81:9c:7b:44:06:9c:4a:a3:59:95:7e:f3:80:b4:76:34:ba:
6e:6f:bc:51:12:0e:0a:6e:d7:17:11:37:73:e2:c5:f2:9f:ea:
56:1e:da:f8:52:cc:aa:ab:c7:78:a2:5f:34:d2:fd:19:b1:38:
c1:35:5e:01:45:d0:36:54:0b:96:6d:46:dd:33:65:98:12:b5:
59:35:10:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:40 2025 by rpki-client