Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
File: Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft (raw, json)
Hash identifier: Q3OWp0SfVEe42q1hs6uzVvljFxo3kwMw49atI+WrLRU=
Subject key identifier: 57:6E:B7:6F:04:D9:F2:E3:EA:58:B1:65:9A:A8:33:63:93:83:9D:0F
Authority key identifier: 47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
Certificate issuer: /CN=473f498592457859f26fb5a610b7b51ef52413f3
Certificate serial: 019A72CA3CD3B9AEB198E3278E6966407579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
Manifest number: 0893
Signing time: Tue 11 Nov 2025 12:00:47 +0000
Manifest this update: Tue 11 Nov 2025 12:00:47 +0000
Manifest next update: Wed 12 Nov 2025 12:00:47 +0000
Files and hashes: 1: Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl (hash: JUWLEZF0JiPYNdhpxVb96eis8+ejMdPlIufbjYQ2ef0=)
2: gACLFbYoQuKSwULuZch33ylGIws.roa (hash: Y3WJDNbjsbnqFHsgE1qqfoHZxL80KWaLyz825fwkstQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:3c:d3:b9:ae:b1:98:e3:27:8e:69:66:40:75:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473f498592457859f26fb5a610b7b51ef52413f3
Validity
Not Before: Nov 11 12:00:47 2025 GMT
Not After : Nov 12 12:00:47 2025 GMT
Subject: CN=576eb76f04d9f2e3ea58b1659aa8336393839d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:30:8c:9f:e8:1d:86:85:31:4d:00:41:a6:12:
dc:0a:82:83:87:c3:01:a9:5d:53:6e:eb:ba:1e:fd:
56:33:67:53:4c:27:19:b2:2a:6f:ef:0e:7b:91:50:
11:f2:c2:b7:36:0e:26:01:f5:4f:74:96:0a:76:e5:
b6:c4:2f:9f:dd:56:10:68:53:6b:d6:45:88:b3:e1:
f6:11:3b:68:0b:fc:e5:6a:db:fb:9f:5b:88:5c:c3:
23:e2:eb:07:77:76:a2:7d:8a:79:e4:1e:de:46:37:
2b:b2:91:51:cd:e8:a5:40:49:13:dc:62:a8:b5:53:
16:81:4a:ca:1b:87:13:2f:cf:92:e7:ee:0a:3c:93:
b4:3e:50:42:14:40:ba:f6:05:52:41:b3:90:ec:90:
cd:42:98:22:d8:c7:9b:41:c9:e3:b6:29:c7:9e:3f:
ca:fa:a3:8b:1b:5f:9d:b8:75:1a:c7:17:c9:e0:c6:
97:1e:8a:dc:28:b9:78:e4:6d:c5:1a:a4:a9:34:67:
6a:bb:a8:ba:c3:4e:fc:1c:6d:14:da:3b:ee:b5:4e:
83:a8:ba:b5:3e:a8:fd:f6:67:46:de:2a:a8:6e:f6:
d1:91:a1:f4:35:79:d0:01:ae:a6:99:0c:4c:d1:3a:
00:97:5c:c4:fe:ec:aa:01:ca:4c:b3:cc:da:85:eb:
75:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6E:B7:6F:04:D9:F2:E3:EA:58:B1:65:9A:A8:33:63:93:83:9D:0F
X509v3 Authority Key Identifier:
keyid:47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ff:e9:1a:0b:a2:94:19:35:b5:69:b9:02:59:da:52:e9:6a:
a6:db:ac:2e:06:f7:ef:4b:94:b6:73:8f:d6:b2:d7:25:19:da:
ec:ea:d7:12:db:7a:b4:73:75:4e:9f:33:40:e0:9b:40:b8:71:
d3:57:04:f9:37:6f:da:15:f9:c7:dc:19:7a:dd:2d:f4:79:c9:
ea:01:0f:77:fe:00:a8:30:03:7e:99:94:b8:0d:fb:19:fa:15:
1d:e2:7a:fc:e8:69:40:5d:58:9c:61:97:0a:19:50:21:a1:18:
cf:72:83:96:cb:28:8c:35:8d:98:27:90:27:35:3b:85:73:7e:
19:e2:c7:41:11:1c:59:c7:7e:a7:97:7c:d4:43:e2:e5:61:3e:
b7:d7:e4:0c:4e:28:f6:3a:00:14:9f:d7:f7:1a:19:19:b1:d3:
02:f0:f6:1a:61:a0:3b:5b:c2:24:81:c3:d6:1f:b2:62:55:33:
2d:fa:25:40:1e:6f:cb:1e:26:95:88:5f:1c:77:c3:a8:43:24:
18:6c:d8:38:65:d5:cb:f7:10:2f:c7:6b:df:8d:14:aa:6f:cd:
99:f9:c1:06:c1:b8:26:c4:c5:28:d1:d4:33:fd:40:d6:db:c5:
3d:66:ca:02:bb:9f:ad:56:03:0a:2c:f5:21:e0:e3:8d:8f:f5:
59:00:bb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:01 2025 by rpki-client