Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
File: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft (raw, json)
Hash identifier: iJVI34bvflDP4vkZrAktQEchtoJ1Ar+9gEgCAK8Uve8=
Subject key identifier: AF:EE:C5:84:79:72:56:7E:B6:D2:DD:B4:BD:7B:2B:B4:10:BF:C4:18
Authority key identifier: 08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
Certificate issuer: /CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Certificate serial: 019A7113705FDCE9B88120906ABC140C1052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 04:01:30 +0000
Manifest this update: Tue 11 Nov 2025 04:01:30 +0000
Manifest next update: Wed 12 Nov 2025 04:01:30 +0000
Files and hashes: 1: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl (hash: +B2iNJEs7f2YR2FDsQb3tFoy3z5Ud9OndGZGF8zcXhA=)
2: QBvaKUProLFwUadr8JLWlBh2UrE.roa (hash: xpxsGWmbgKM4U5yVDwdEgOHu1jns29KEhnZ49U4Y2OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:70:5f:dc:e9:b8:81:20:90:6a:bc:14:0c:10:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Validity
Not Before: Nov 11 04:01:30 2025 GMT
Not After : Nov 12 04:01:30 2025 GMT
Subject: CN=afeec5847972567eb6d2ddb4bd7b2bb410bfc418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:f5:b4:cd:b0:c0:e9:51:17:9d:2a:b6:6b:
a4:36:49:5e:35:cb:28:2e:4d:27:7b:26:52:55:f1:
2c:43:43:3f:2c:6b:90:e9:0d:a3:df:fd:70:18:07:
d7:48:ad:f1:fb:cc:13:4c:00:d0:0d:b3:9b:6d:18:
81:51:7d:42:d9:f6:10:33:4d:75:5b:68:8a:57:73:
80:b6:ad:de:29:26:fd:2e:b8:a6:a3:48:b7:8b:63:
12:00:8c:96:dd:60:6c:6c:ed:65:f2:1d:a9:ea:30:
47:ee:ed:e8:88:dc:ec:2c:f7:6b:8e:da:13:ae:11:
6a:0c:35:6b:92:19:12:1e:3c:e6:83:d7:9b:0b:e1:
9f:2b:3d:f6:13:63:fa:0a:63:34:96:4a:df:9b:aa:
ec:1f:ab:0f:98:b2:21:70:38:b7:e1:12:ff:88:85:
57:fc:ed:23:3d:05:c6:43:c5:cd:0d:84:cf:d2:c9:
bb:fe:2a:aa:be:e9:3f:69:ce:87:bf:53:ef:45:fa:
d1:fc:c8:40:08:3f:c2:fa:db:66:94:7f:e9:2e:ee:
8c:a0:eb:19:48:8b:19:83:ae:36:96:69:04:b2:1b:
c6:59:e9:f8:a5:b6:09:35:53:7a:b0:88:d1:9d:76:
72:8a:04:36:50:85:e9:ef:b0:8d:9f:cc:26:c1:92:
d8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EE:C5:84:79:72:56:7E:B6:D2:DD:B4:BD:7B:2B:B4:10:BF:C4:18
X509v3 Authority Key Identifier:
keyid:08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:13:a5:d6:67:6f:20:cc:f2:ff:da:16:6b:15:be:62:bd:a9:
23:c0:1a:bc:c9:47:6a:2c:e7:d9:f6:30:b9:fa:0f:7a:e3:c0:
41:b1:68:2d:9a:ee:2e:20:ee:58:10:16:e0:b7:83:dc:0a:1d:
95:ea:b3:91:d7:7d:8a:00:32:29:5d:bc:e3:3b:a4:b4:c8:22:
a0:28:98:6e:dc:dd:c2:73:b4:11:0d:40:b6:f4:ed:94:c9:ed:
b7:db:ef:8c:29:d3:7b:b7:ed:fe:19:f5:17:4f:86:c1:8d:20:
62:3a:6c:cc:4b:4c:0c:f7:3c:bc:be:71:33:7f:ca:6a:ef:b8:
f7:00:a2:34:5f:30:a8:bf:e2:92:bc:28:d5:c9:f8:e7:bb:8a:
ea:b3:17:34:8c:85:79:e8:3f:c4:ff:cb:40:ec:09:39:14:7f:
57:33:77:55:f6:29:5f:20:99:9b:ee:90:6c:17:b2:b5:14:ce:
9c:74:47:67:09:41:38:fc:15:d3:fa:3d:77:fe:cc:27:a2:55:
d3:e3:cd:76:45:44:40:ea:c9:c0:e2:e8:da:5d:37:09:94:0b:
65:2a:dd:c9:95:b2:ab:e6:55:b3:2b:7a:fc:6c:56:4b:fc:c4:
62:18:26:b5:27:2d:d8:f6:b8:c7:d4:e1:67:91:35:b8:c7:4b:
06:5f:ab:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:20 2025 by rpki-client