Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
File: _c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft (raw, json)
Hash identifier: DqBK8DfAcFu8YxSpaK+7YKGY4q4omkMTgB5WVjsOe4g=
Subject key identifier: FB:6B:5C:4F:38:4D:9B:37:85:9C:C6:BB:C9:26:ED:A2:A0:90:73:0F
Authority key identifier: FD:CF:72:BB:6C:86:87:50:86:28:9D:D2:51:8F:B0:3F:88:22:EE:9D
Certificate issuer: /CN=fdcf72bb6c86875086289dd2518fb03f8822ee9d
Certificate serial: 019A7113386556BAF6AF540AC90F45997D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
Manifest number: 0E27
Signing time: Tue 11 Nov 2025 04:01:16 +0000
Manifest this update: Tue 11 Nov 2025 04:01:16 +0000
Manifest next update: Wed 12 Nov 2025 04:01:16 +0000
Files and hashes: 1: _c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl (hash: tGQcoxXe14sQ/Tk68JBUYvbiG0W+/SA0J6iJy40QDbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:38:65:56:ba:f6:af:54:0a:c9:0f:45:99:7d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcf72bb6c86875086289dd2518fb03f8822ee9d
Validity
Not Before: Nov 11 04:01:16 2025 GMT
Not After : Nov 12 04:01:16 2025 GMT
Subject: CN=fb6b5c4f384d9b37859cc6bbc926eda2a090730f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9a:c7:0f:51:cf:0a:e8:ea:6e:88:69:48:d2:
fc:f1:6f:68:64:29:c4:67:57:83:50:62:aa:8f:6f:
74:5c:43:d1:3b:49:54:85:83:f9:6b:85:70:54:5a:
14:5e:bf:9b:90:2d:25:29:67:f6:ae:c1:f3:fd:52:
29:d0:2e:f7:4c:03:54:29:01:c7:24:6e:ce:7f:27:
c2:93:ea:bb:25:01:c1:db:37:fa:2b:b1:d7:13:27:
b3:14:1a:4d:7c:3a:89:fa:84:d4:1e:ee:8f:4a:91:
66:a4:d1:73:77:89:4c:1c:84:66:26:2d:a7:16:cf:
84:4a:d8:ff:5b:e9:fa:14:54:3b:a5:90:8c:15:d6:
cf:49:d6:ed:1f:5f:52:b3:5e:3a:9d:ad:42:3c:cb:
10:4e:e8:b2:f8:35:5a:0f:44:dc:7c:35:6d:a9:c4:
a3:8c:ce:f4:52:d5:21:0c:9a:e1:95:de:7f:91:f5:
d5:c0:41:2c:78:4c:82:c2:e1:17:d3:c8:22:93:6e:
6c:1e:47:b2:54:a9:4e:6c:82:fc:dc:f6:3c:e5:56:
fe:14:b5:6e:57:31:f5:2e:d8:7a:1f:1a:8f:96:5e:
7f:4d:b2:61:79:33:13:64:ec:2b:06:a5:4f:d0:5e:
15:c1:7b:85:f8:f5:b1:aa:79:37:bc:ce:64:4d:8e:
3c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6B:5C:4F:38:4D:9B:37:85:9C:C6:BB:C9:26:ED:A2:A0:90:73:0F
X509v3 Authority Key Identifier:
keyid:FD:CF:72:BB:6C:86:87:50:86:28:9D:D2:51:8F:B0:3F:88:22:EE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2a:02:1a:b0:bd:d7:d3:f0:de:e6:56:54:62:be:be:37:23:
7c:2b:23:90:67:42:7a:e4:c3:e5:7d:c7:ff:14:7d:bb:6a:33:
10:a0:58:75:03:7b:40:0f:0a:ac:a6:b0:6d:e7:cc:0c:4b:c9:
45:e3:6f:f1:8e:35:98:24:4c:57:a6:f7:ad:e4:f9:dc:7f:ec:
cc:e5:72:0e:fb:a2:c1:82:1e:bf:9a:e4:20:ec:fe:b9:1a:aa:
45:ca:45:1e:ac:29:b1:bf:9e:ea:ea:59:89:8a:09:08:cc:12:
25:87:66:c9:f9:82:60:f1:2c:23:ed:cc:c7:14:1e:5e:a4:6c:
42:98:8f:27:3f:4d:89:5d:91:6f:9a:c1:1c:21:d2:38:bc:69:
2d:f3:03:be:12:26:b7:2a:60:0f:a7:21:4e:a4:22:fe:ca:93:
0b:cd:e9:8f:fb:15:7f:2f:89:f0:2f:5d:8c:15:04:7a:be:97:
06:41:7d:06:4b:14:28:04:f1:3c:be:92:d9:ef:54:80:24:65:
7f:bb:0c:5e:6c:df:95:0e:16:bb:2e:41:c1:65:d4:ba:6c:75:
1f:15:e7:a3:74:7d:13:1f:69:8d:60:1d:1f:14:32:66:35:18:
e2:58:39:ec:60:bd:b9:fb:ee:df:e1:fa:31:d6:13:6c:59:bb:
7a:ce:40:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:14 2025 by rpki-client