Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft
File: 9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft (raw, json)
Hash identifier: iwRPzGjJ8yzuagqKVPuDMdzWE1GTm/xpGp8NmqSPgig=
Subject key identifier: 5B:10:64:D2:B8:DC:10:B9:54:80:6A:6C:A5:06:D1:73:3B:FD:7F:1F
Authority key identifier: F6:6C:6A:3F:A3:17:0C:25:16:E1:1E:E9:10:4F:ED:32:69:99:7D:D6
Certificate issuer: /CN=f66c6a3fa3170c2516e11ee9104fed3269997dd6
Certificate serial: 019A7225CAAEAD32FA8B4E4E7595318747E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9mxqP6MXDCUW4R7pEE_tMmmZfdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft
Manifest number: 0DD6
Signing time: Tue 11 Nov 2025 09:01:10 +0000
Manifest this update: Tue 11 Nov 2025 09:01:10 +0000
Manifest next update: Wed 12 Nov 2025 09:01:10 +0000
Files and hashes: 1: 9mxqP6MXDCUW4R7pEE_tMmmZfdY.crl (hash: bd77oqwUjBzFH7lPbBM7Jks0IskfJ1HcvpNiRHYl4iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9mxqP6MXDCUW4R7pEE_tMmmZfdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ca:ae:ad:32:fa:8b:4e:4e:75:95:31:87:47:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f66c6a3fa3170c2516e11ee9104fed3269997dd6
Validity
Not Before: Nov 11 09:01:10 2025 GMT
Not After : Nov 12 09:01:10 2025 GMT
Subject: CN=5b1064d2b8dc10b954806a6ca506d1733bfd7f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d7:03:d5:a4:e8:54:24:19:31:93:69:f6:99:
ce:98:2b:0c:d4:45:87:4d:c9:7b:f3:79:e3:1c:2a:
c9:29:56:d9:b2:e0:49:37:db:00:6f:f3:3b:e7:73:
be:1a:e0:09:cb:a3:83:41:b9:c1:4a:dd:a2:79:eb:
0f:88:6b:c8:2b:21:6b:45:1d:3e:37:ed:ac:43:38:
67:6b:60:29:58:f5:d8:df:3b:d0:ba:9e:59:a4:03:
90:62:98:8d:3f:52:c7:9a:5b:a5:1e:63:56:e9:5f:
4f:fb:1b:a3:2c:1c:4a:73:ae:0e:c4:60:d0:1f:39:
3a:96:53:12:33:ba:8a:99:fe:75:d8:8e:b6:9d:3f:
77:ab:8d:26:d3:79:fd:b1:fe:c9:dd:87:e8:30:3f:
8d:b4:1a:4a:89:d2:d4:f7:40:a7:c0:a2:1e:7f:a8:
4b:72:f4:b2:36:d2:9f:73:d5:26:68:82:c8:07:1b:
e7:81:f6:bc:56:42:86:d7:43:ac:76:79:6e:47:05:
1a:e5:c4:85:3a:ce:92:1c:72:ce:ac:b5:0d:c7:ba:
1f:c7:33:0b:9b:ea:63:e3:91:44:82:60:89:c5:44:
5c:a3:a4:ea:30:35:ee:35:ad:50:64:35:f6:84:43:
a9:12:25:76:ad:f4:11:e3:48:62:92:30:a7:0c:17:
e8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:10:64:D2:B8:DC:10:B9:54:80:6A:6C:A5:06:D1:73:3B:FD:7F:1F
X509v3 Authority Key Identifier:
keyid:F6:6C:6A:3F:A3:17:0C:25:16:E1:1E:E9:10:4F:ED:32:69:99:7D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9mxqP6MXDCUW4R7pEE_tMmmZfdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:0b:21:f2:a6:f0:30:d6:28:e0:ff:e5:33:dd:a6:c7:bf:b4:
cf:e0:90:a4:90:cf:99:55:7f:d6:64:10:13:83:3f:14:09:5a:
da:80:65:bb:b1:e2:25:8f:39:1f:b9:4c:3c:36:63:7d:e0:5d:
10:dc:d5:22:65:c1:18:2f:07:ef:57:70:61:ff:c2:7d:58:62:
4b:f6:f2:14:14:db:2b:68:61:78:2b:c5:7a:aa:9d:0f:77:45:
12:48:76:f5:eb:53:5c:25:45:17:7f:0b:2a:18:42:c4:d0:d2:
c1:ab:db:50:37:fa:18:1c:7d:3e:49:2e:60:cf:51:ce:d3:57:
3c:a8:c6:ff:aa:72:14:5f:c5:5c:46:a8:77:44:b6:51:38:d2:
07:ff:a5:b3:e6:d5:d5:9a:5d:5c:ef:10:48:7f:50:44:3b:9f:
88:6d:70:02:77:63:9a:44:f4:04:f6:0b:1f:c9:50:48:3a:50:
9f:51:dd:46:81:f8:f9:a1:81:8a:a1:f9:d3:98:13:c6:2c:50:
c3:be:25:6e:3c:0c:06:07:71:59:64:d7:83:c4:e4:bc:17:ad:
21:28:20:e1:49:79:56:d4:eb:fd:b3:a3:c2:b0:9c:17:9c:1a:
9f:04:a4:82:52:0d:25:76:f5:b7:aa:0b:15:d7:28:06:1e:e2:
da:a9:85:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:48 2025 by rpki-client