Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
File: 0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft (raw, json)
Hash identifier: 8yvdrWPCT/qhXYtZE/cHJIP47djPvMHhFb76yqT6fGg=
Subject key identifier: 88:93:1C:8B:03:D1:6E:7E:A4:6A:5A:E4:2C:C2:A0:01:41:08:A7:B2
Authority key identifier: D1:C7:73:C2:0A:C8:E4:09:3D:F6:2B:BB:87:2C:AF:CD:B6:8B:55:DC
Certificate issuer: /CN=d1c773c20ac8e4093df62bbb872cafcdb68b55dc
Certificate serial: 019A722639FEBECF972A8FF8A0F51BB6CE36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
Manifest number: 0969
Signing time: Tue 11 Nov 2025 09:01:38 +0000
Manifest this update: Tue 11 Nov 2025 09:01:38 +0000
Manifest next update: Wed 12 Nov 2025 09:01:38 +0000
Files and hashes: 1: 0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl (hash: VwRgwaiVedg1aKp2WDXSy4nic2CeF4AIlC0yrIARLc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:39:fe:be:cf:97:2a:8f:f8:a0:f5:1b:b6:ce:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c773c20ac8e4093df62bbb872cafcdb68b55dc
Validity
Not Before: Nov 11 09:01:38 2025 GMT
Not After : Nov 12 09:01:38 2025 GMT
Subject: CN=88931c8b03d16e7ea46a5ae42cc2a0014108a7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:fa:a6:96:d8:d2:86:5d:5d:1b:9a:13:0d:
4b:78:c3:e6:2e:e1:c5:4b:df:7c:65:42:be:31:2e:
f2:43:41:eb:39:2b:85:cc:d7:77:e6:27:d7:81:ea:
46:53:9f:31:90:51:4b:98:23:09:6e:ae:18:40:0e:
fa:0a:53:e2:8d:b8:ca:4b:3a:e7:3e:d5:37:4b:6d:
c7:d4:81:1b:02:8b:4f:14:b3:1c:eb:1c:a9:e2:f7:
9e:e0:c1:51:5f:ce:38:b3:5c:69:27:83:e3:28:7a:
ab:0f:4a:1d:34:6d:64:fb:7b:19:bf:ba:d3:a3:bb:
20:93:c4:27:2b:4a:9b:e4:d0:5e:cb:1d:5d:8a:b5:
d3:18:cc:36:8e:37:1e:aa:9f:fc:80:3a:8a:e0:4f:
6d:c5:11:36:3f:e6:89:a0:0f:e4:52:2a:d0:ce:21:
85:f2:19:1c:63:6e:14:cb:5b:90:41:8b:03:6b:1b:
60:8f:00:c9:4a:59:15:3e:eb:7b:0f:f5:5f:f3:d7:
63:e4:0a:9b:c4:f4:0e:e0:32:7b:42:84:f4:4e:c8:
96:86:a8:6d:0a:13:ad:4d:f2:26:43:0b:f4:d0:67:
f8:5c:fb:5c:6e:ca:bb:7c:22:f7:4f:f8:ca:86:47:
6c:eb:32:37:8e:d9:67:40:c6:d1:c6:60:11:ec:f4:
99:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:93:1C:8B:03:D1:6E:7E:A4:6A:5A:E4:2C:C2:A0:01:41:08:A7:B2
X509v3 Authority Key Identifier:
keyid:D1:C7:73:C2:0A:C8:E4:09:3D:F6:2B:BB:87:2C:AF:CD:B6:8B:55:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a5:e8:65:d9:32:57:13:b0:47:a7:45:7b:76:8f:75:d8:e7:
e0:8b:f8:13:17:67:e3:b4:cf:aa:5b:22:dc:81:65:ef:00:85:
cf:fc:cb:fb:24:99:03:8f:93:bc:2c:e6:5c:b6:df:85:fe:3a:
56:e6:d6:46:87:d4:17:7c:d2:f8:03:b1:01:c7:c6:01:fa:c5:
52:35:23:03:e6:9f:a0:a6:94:33:29:dc:ba:f4:d8:3f:d6:ee:
95:d7:08:36:ca:95:c9:ef:00:4c:88:8c:a7:38:05:26:b9:b7:
cb:8a:13:3c:88:18:c6:a5:15:2e:c4:02:02:8e:ba:2b:a0:7c:
91:ba:73:f7:1d:e1:b6:a2:0e:26:f6:f1:d7:a5:59:0e:50:09:
52:3e:8c:6d:38:a6:35:3f:da:f5:a8:48:fd:fc:b2:ed:98:00:
5a:5c:30:80:ff:a3:cb:ae:90:58:52:ec:d0:be:ef:e7:11:07:
d4:7c:f5:17:e3:ca:27:ad:b3:37:f1:8f:2c:e5:84:31:fc:9c:
45:58:3a:66:3d:0c:fe:35:ab:38:fb:75:6b:79:e1:53:07:17:
92:c8:31:85:3f:c4:e6:15:82:98:c1:b7:c5:0c:c4:dd:91:00:
7f:85:c0:36:2c:a2:7a:de:2a:f4:3e:cf:0d:84:26:d1:29:6e:
bf:60:e2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:46 2025 by rpki-client