Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
File: 9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft (raw, json)
Hash identifier: bFeYuAYMF+rnmDOCMZP28BEiYLHU608mXQvDBj6GISU=
Subject key identifier: B6:3F:77:C0:A5:80:A1:53:C7:2D:DE:88:2E:C6:43:EA:73:DB:E8:E6
Authority key identifier: F6:38:7E:90:C4:FE:56:EE:1B:63:94:6F:E4:D4:63:1C:60:87:E7:ED
Certificate issuer: /CN=f6387e90c4fe56ee1b63946fe4d4631c6087e7ed
Certificate serial: 019A7112E330B3C9675F8FB2BD2876FE2CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
Manifest number: 07E3
Signing time: Tue 11 Nov 2025 04:00:54 +0000
Manifest this update: Tue 11 Nov 2025 04:00:54 +0000
Manifest next update: Wed 12 Nov 2025 04:00:54 +0000
Files and hashes: 1: 9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl (hash: 7fNvmBVzFbSGmISmBFw1MGWhUwnEnx6oVKDGW2khhiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:e3:30:b3:c9:67:5f:8f:b2:bd:28:76:fe:2c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6387e90c4fe56ee1b63946fe4d4631c6087e7ed
Validity
Not Before: Nov 11 04:00:54 2025 GMT
Not After : Nov 12 04:00:54 2025 GMT
Subject: CN=b63f77c0a580a153c72dde882ec643ea73dbe8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:62:7b:7a:cf:84:36:48:52:e5:11:80:52:2a:
d8:cb:a6:19:63:5a:c9:bb:c1:7a:13:42:e4:ff:39:
0c:57:cf:a4:52:d2:4c:e6:cf:39:71:3a:a1:f7:e5:
19:1d:49:8f:9a:19:11:50:8f:f6:d2:f3:39:94:38:
c1:2e:32:d2:85:3d:a7:06:ec:1c:e1:21:42:1c:18:
1a:70:37:84:71:a5:0d:40:69:12:dd:d9:ed:5d:5f:
12:d3:e2:6c:37:8c:2a:60:f6:b5:46:80:26:93:ea:
25:a0:8a:5e:77:82:6e:49:89:7f:e5:d5:4b:2e:6b:
bb:72:69:47:f4:d6:dd:01:d6:b4:c5:be:be:4e:b3:
c4:b1:8e:84:50:0e:74:c1:cf:b2:2a:f8:95:68:15:
cf:57:e0:0d:bf:4a:ce:91:9f:24:02:47:eb:aa:9c:
95:c5:c6:97:2c:60:e0:78:f9:fc:c4:9a:df:65:68:
3d:c3:ef:e0:66:4c:2f:29:4f:65:e1:02:fc:bc:b6:
15:23:c9:36:6e:7a:66:8c:0a:9c:09:77:9a:28:84:
0a:b2:64:43:c6:8f:24:dc:2c:41:3d:6b:8d:07:58:
79:58:0a:27:ff:3a:69:0c:d0:bd:d6:03:84:cd:0d:
57:a2:00:f0:b0:dd:39:17:36:11:aa:0e:f1:07:6f:
6b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3F:77:C0:A5:80:A1:53:C7:2D:DE:88:2E:C6:43:EA:73:DB:E8:E6
X509v3 Authority Key Identifier:
keyid:F6:38:7E:90:C4:FE:56:EE:1B:63:94:6F:E4:D4:63:1C:60:87:E7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b6:bf:bd:f3:9e:e5:d3:a9:41:cb:09:58:35:91:02:34:d5:
4c:c9:75:09:df:04:f6:9e:b7:0f:8a:f1:97:c0:d3:9b:b0:dc:
65:06:54:b4:6d:8e:5b:48:a1:cb:d0:51:78:65:76:67:20:38:
42:e8:7c:58:c4:d9:29:ce:7f:30:73:38:41:39:f3:0e:ee:9f:
b6:0d:93:af:dd:91:ee:62:8c:bb:ae:a2:59:0a:69:ac:cd:e5:
70:8b:ae:48:fd:85:8b:d9:6a:a3:1c:bc:ff:4f:62:6e:0f:aa:
b6:6b:a4:11:b9:14:d9:22:24:25:c4:9b:94:9a:98:75:73:b0:
27:99:55:ea:1f:08:21:0a:a7:fd:70:bb:44:ff:27:19:8d:ec:
3c:8f:24:74:6b:75:55:9a:3d:cb:fd:58:ca:76:a0:97:8f:15:
25:4b:52:55:5a:22:30:ac:78:93:c7:e9:a3:6c:ee:22:85:a1:
8e:5b:9b:c6:b8:46:df:67:d3:81:8e:4c:5f:a9:f7:d3:32:3d:
8c:18:2c:07:d7:55:07:63:5e:5d:33:72:96:1e:0b:98:87:74:
62:d4:fb:c9:ad:fe:79:54:b3:8e:8a:83:01:4d:ad:cc:48:cf:
4e:8f:89:77:dd:be:4c:f5:fd:1b:20:04:50:fa:2e:82:84:b7:
e7:da:8f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:26 2025 by rpki-client