Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
File: o9KLNY1BezfsyLKRv5nBUVvOj3I.mft (raw, json)
Hash identifier: rY1C/bf+CVsLcCXMVVoa3otFU63Hme6jSsoeYqgjPFc=
Subject key identifier: 2E:CF:9E:BA:37:BA:37:D4:EE:B4:0E:E9:A3:9E:A0:A1:DF:AF:79:EF
Authority key identifier: A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
Certificate issuer: /CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Certificate serial: 019A71B82DA9EEB8198DD7BA0218D5CEA3DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
Manifest number: 129D
Signing time: Tue 11 Nov 2025 07:01:26 +0000
Manifest this update: Tue 11 Nov 2025 07:01:26 +0000
Manifest next update: Wed 12 Nov 2025 07:01:26 +0000
Files and hashes: 1: o9KLNY1BezfsyLKRv5nBUVvOj3I.crl (hash: nSTKzp5cQEVke7vRsXxhy2v46MK3vMV/t66wJMaXIV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:2d:a9:ee:b8:19:8d:d7:ba:02:18:d5:ce:a3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Validity
Not Before: Nov 11 07:01:26 2025 GMT
Not After : Nov 12 07:01:26 2025 GMT
Subject: CN=2ecf9eba37ba37d4eeb40ee9a39ea0a1dfaf79ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:82:ba:81:b1:9b:c4:9a:2d:58:fe:97:2e:
39:43:ef:b2:fe:48:fc:16:df:b2:dd:ca:b8:e4:95:
40:0b:f7:1e:53:8c:68:12:3b:f9:19:3f:d5:5b:e1:
e4:8b:2c:8c:6e:7f:fd:aa:4a:e2:88:6d:ae:53:06:
47:0c:03:0f:36:23:51:b4:54:15:ca:cc:a9:43:f5:
08:63:9a:88:5b:9b:60:16:cf:3c:63:9e:71:4b:f4:
1e:5c:ee:7e:3c:40:23:3e:dd:96:8f:d4:1c:46:97:
12:bc:7e:47:d7:62:e3:f5:72:1d:b7:e5:b5:e1:99:
69:c6:50:e4:d6:58:df:d6:4a:52:a9:b9:d8:e8:84:
18:cd:3b:77:42:d2:b7:aa:e9:b9:bf:20:d4:d9:cb:
0a:0a:3b:3e:42:ca:a2:99:30:98:3c:44:77:e3:63:
46:c4:ad:19:53:5a:3f:35:d2:6e:8e:5e:90:36:57:
a4:b2:10:89:8e:91:c0:6e:ff:a6:5a:1c:00:88:57:
19:6e:a7:a7:d9:5a:64:6c:90:79:5a:1b:ff:7b:49:
83:c8:d1:1d:d1:dc:80:16:e7:3c:35:20:b1:ad:23:
1f:0a:3c:0f:c2:4b:43:6b:74:27:39:31:3d:45:0b:
b7:9a:e0:c8:d1:bd:de:91:4d:cd:0f:37:29:d0:c3:
39:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CF:9E:BA:37:BA:37:D4:EE:B4:0E:E9:A3:9E:A0:A1:DF:AF:79:EF
X509v3 Authority Key Identifier:
keyid:A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:00:f7:5f:28:30:1b:08:db:08:c5:22:b3:cc:da:03:48:2f:
58:d9:af:30:f3:44:a2:fd:ad:07:c0:54:97:c4:f8:e3:a4:37:
c1:13:93:fd:6f:60:a9:56:a3:15:a3:3e:0d:23:7c:10:b5:f8:
88:a1:bb:6f:3e:13:d2:f9:40:00:d3:ce:34:97:06:1f:d5:c4:
64:7f:26:76:0a:c1:94:75:9c:3f:45:a0:2a:8e:d0:aa:3a:74:
df:da:eb:62:6b:d5:04:0b:b3:02:10:f3:7c:83:02:7d:97:b0:
b1:4e:00:fd:44:2e:28:be:9e:c1:c7:50:a5:29:f1:47:41:f4:
90:c3:89:6c:a7:3f:f9:7b:e0:a3:d3:60:89:0d:4d:e2:8c:8b:
de:58:22:8a:6e:84:84:be:2e:a5:60:78:a8:47:c9:ed:3f:c0:
46:bf:21:a3:a0:0c:2c:6a:53:8b:f4:84:d3:d7:44:86:09:5d:
b1:12:47:20:83:5f:c5:30:59:b5:f8:0b:74:a6:6b:1a:b1:98:
eb:e5:d0:09:3f:6e:18:71:97:a5:cf:75:3e:8d:a1:c6:be:d4:
98:ee:0b:33:6a:ff:c0:28:b8:63:0e:65:a4:ff:87:ea:01:06:
30:0e:f4:0b:b6:b6:c0:c5:b8:9f:a1:d7:94:07:27:2f:4e:79:
5f:7d:c3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:13:54 2025 by rpki-client