Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
File: 9bdVrRo8ekUCu8PqNMdba85hyUw.mft (raw, json)
Hash identifier: +zoqawrjzVwNWcmeVwobsOWKOtkL/EkhPb2ejwcnivo=
Subject key identifier: C5:2F:64:B8:9B:65:28:33:EE:95:01:F1:F1:8E:CE:58:57:5F:88:1D
Authority key identifier: F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
Certificate issuer: /CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Certificate serial: 019A70A535BD6AB53BF441674A84BD33E915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 02:01:06 +0000
Manifest this update: Tue 11 Nov 2025 02:01:06 +0000
Manifest next update: Wed 12 Nov 2025 02:01:06 +0000
Files and hashes: 1: 9bdVrRo8ekUCu8PqNMdba85hyUw.crl (hash: QekagoyvJm2w4Gsy7nFKDPzYQDGYA+W8mo3PW3x3lC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:35:bd:6a:b5:3b:f4:41:67:4a:84:bd:33:e9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Validity
Not Before: Nov 11 02:01:06 2025 GMT
Not After : Nov 12 02:01:06 2025 GMT
Subject: CN=c52f64b89b652833ee9501f1f18ece58575f881d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:cf:d5:da:f3:40:c7:96:57:00:ed:81:c1:
c6:31:94:d8:be:21:ec:a8:c3:ee:e3:90:3d:55:60:
9c:d6:36:cc:12:7f:4d:31:c4:3c:44:39:2c:ab:a5:
05:85:63:93:2e:eb:1e:7c:b1:2d:09:fc:96:b5:f3:
12:c3:87:2c:a3:be:2f:4a:70:da:ff:f4:c4:12:4a:
f5:8e:20:28:13:36:cf:36:a5:ce:a9:21:96:68:d1:
48:69:03:b3:06:40:ee:87:a6:c2:ce:ef:c0:fb:1d:
0a:d2:f2:58:0b:da:80:6e:6a:37:98:f3:29:3b:f3:
54:1b:e3:c0:c6:97:03:eb:39:8b:0f:be:57:12:11:
96:ef:1a:bb:25:43:ba:7f:39:35:c9:0d:6f:f3:f4:
18:c2:e5:34:04:7a:89:40:44:ba:8e:c3:22:11:c5:
87:a9:77:85:39:7a:be:93:3e:9d:50:40:60:ca:9a:
1c:f4:6e:e9:d1:5a:3a:6b:d4:af:2f:e7:7c:57:6a:
71:85:6e:f0:54:b3:e2:af:1a:4c:04:54:8f:7f:cd:
9f:39:57:59:df:50:45:41:f8:74:98:47:31:08:ac:
8b:83:8c:01:9d:ac:80:66:a2:f5:24:02:fc:10:8a:
13:7d:14:f1:d6:ed:3b:72:b4:0b:f0:ff:35:f7:ca:
b2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2F:64:B8:9B:65:28:33:EE:95:01:F1:F1:8E:CE:58:57:5F:88:1D
X509v3 Authority Key Identifier:
keyid:F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:68:00:49:e7:ba:bd:f9:91:1b:96:aa:9d:a8:54:a4:d9:c4:
45:9f:45:43:4c:ae:4d:19:76:30:06:a1:70:ed:f9:50:84:d4:
d9:65:6a:bd:cd:5e:7c:dd:d4:d4:3c:ee:f2:b3:a2:5d:67:25:
a4:a4:ae:0e:e3:90:2b:ec:39:8a:f7:b1:ed:03:f0:79:1f:6b:
98:02:07:11:12:9d:3d:2d:8e:58:76:57:eb:9f:ba:29:ae:74:
2c:d0:4c:90:14:73:09:ad:db:3b:8e:3f:d2:a5:fd:1c:6b:d1:
e4:76:ff:a6:5d:54:10:97:6f:8b:af:90:2c:4e:e6:d1:c7:26:
0b:00:df:43:aa:86:46:86:bf:8a:4c:c5:e2:53:b1:50:07:a0:
4c:8a:a0:97:8b:32:ab:46:55:d8:d5:a4:4c:a9:a1:a8:fa:28:
61:45:21:51:31:13:85:dd:a9:6a:a6:c5:d1:20:17:a3:3e:a7:
52:fb:2a:75:ed:4e:cf:1e:59:08:1d:35:a6:15:11:af:9d:8b:
f6:1a:02:07:99:c4:b1:b7:71:79:5b:60:cd:a0:e2:ca:24:5e:
f4:17:9b:64:3c:19:80:d6:d1:8c:3a:b1:15:78:1b:5d:d8:cf:
2e:50:8f:8b:40:6b:ed:ed:bf:ff:90:35:d6:11:e4:b4:61:0a:
d4:87:c4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:41 2025 by rpki-client