Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
File: V9minRgOgZpHgvtsbqFtOn0ykQA.mft (raw, json)
Hash identifier: qNGGoTE5bp75TJPQw9claGUujijPkKNAo1imknTcEjE=
Subject key identifier: 4C:FE:24:0D:77:2D:66:DF:14:38:A4:FD:B0:91:70:4E:C4:CA:2C:A2
Authority key identifier: 57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00
Certificate issuer: /CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
Certificate serial: 019A71B85758545DD11030986BFF5746350A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
Manifest number: 0934
Signing time: Tue 11 Nov 2025 07:01:37 +0000
Manifest this update: Tue 11 Nov 2025 07:01:37 +0000
Manifest next update: Wed 12 Nov 2025 07:01:37 +0000
Files and hashes: 1: V9minRgOgZpHgvtsbqFtOn0ykQA.crl (hash: b9yvQOmlKahrZ76cxF8ZQKX269HME53UuVpewuKhHgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:57:58:54:5d:d1:10:30:98:6b:ff:57:46:35:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
Validity
Not Before: Nov 11 07:01:37 2025 GMT
Not After : Nov 12 07:01:37 2025 GMT
Subject: CN=4cfe240d772d66df1438a4fdb091704ec4ca2ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d7:8d:31:a4:fe:78:2a:20:8a:76:c2:54:03:
51:a8:2f:97:90:7a:f2:ec:dc:8d:af:8e:bd:95:35:
bb:83:93:b5:ba:0c:ed:6e:37:7f:4b:90:66:f2:81:
3d:bb:bb:0c:97:d2:1c:54:fd:59:76:70:45:ca:fb:
53:98:02:08:61:c7:a2:f6:95:af:b2:1e:8e:b5:46:
49:7e:0b:83:d4:5c:21:bb:66:80:ec:f2:af:bc:59:
d6:af:5c:e2:32:19:8f:56:07:bf:10:d1:98:15:52:
59:14:cd:f4:a8:b4:4b:47:48:0a:47:4f:7c:63:94:
0f:51:10:aa:32:dc:29:b7:67:bc:a9:af:a8:c9:c2:
74:8b:e9:76:e5:00:0e:9b:65:59:fa:9d:ad:ae:8e:
2a:1c:7e:7a:b9:62:bb:73:3b:d9:b6:5f:04:00:21:
2a:d9:4c:65:dd:0c:57:90:11:db:07:c4:0e:d9:e5:
19:96:27:02:15:51:31:33:27:2c:e9:79:2d:84:c1:
cb:27:49:87:02:58:53:cf:ef:ec:37:0a:ae:0c:b5:
80:25:95:5e:39:18:e1:2d:7e:92:0f:b6:7a:c4:9c:
5e:ce:62:5b:83:e6:95:46:28:25:60:fc:c7:ef:72:
43:e4:0f:ba:c9:ae:09:e2:b9:93:39:c7:d8:38:48:
0e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FE:24:0D:77:2D:66:DF:14:38:A4:FD:B0:91:70:4E:C4:CA:2C:A2
X509v3 Authority Key Identifier:
keyid:57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d9:93:4f:64:8d:3d:8d:e4:e1:b0:e0:ac:9c:0a:30:07:c9:
c1:f6:be:db:3b:d4:48:c7:e8:64:61:a8:80:5f:0f:e0:10:56:
97:e4:de:10:e6:ac:a9:1c:c9:64:c9:78:62:ca:6a:a8:48:d0:
5d:ef:e7:2e:eb:68:d1:32:06:83:b7:73:db:8c:64:0d:74:fc:
c1:a4:ac:e8:ec:20:c2:bc:7a:7e:02:b9:f9:d1:a9:17:39:3d:
dc:d5:19:d5:89:06:dc:e5:b6:c9:4a:b9:58:6e:47:65:75:ac:
ff:d2:ea:a7:97:64:e2:fa:30:12:d7:8b:a6:8f:aa:3f:fc:82:
f9:55:23:43:80:6f:e9:ed:f4:d8:b3:2b:b8:68:d8:0b:77:9a:
70:a6:0c:75:64:65:88:7a:2f:13:8f:c4:19:ac:fb:5a:21:6c:
2b:4a:0b:57:ed:b7:bf:9b:59:86:4f:8d:40:51:55:76:f6:a5:
e8:a8:c3:f1:c6:bc:4e:e9:a4:5d:3f:a6:20:0d:af:60:50:15:
41:da:9d:01:38:55:7d:88:ba:5e:50:e3:9c:5e:07:e0:23:a2:
5e:dd:4d:58:e7:3a:6b:ee:c4:a3:92:f7:4b:3c:23:7d:b4:c5:
f4:e0:29:6e:17:0f:0b:f7:2e:37:36:c7:61:15:7a:30:7e:4d:
ec:84:1e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:51 2025 by rpki-client