Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
File: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft (raw, json)
Hash identifier: pT5KIN/3s8O/za3XgQUB02BDunctxdzrAmQq9OLWmd4=
Subject key identifier: AF:AE:FF:03:D5:AD:E0:1E:1A:67:96:BC:77:D3:F9:EA:0F:C4:1E:1A
Authority key identifier: 9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E
Certificate issuer: /CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e
Certificate serial: 019A71B82F09B329808484F06CB6E7D88205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
Manifest number: 0C63
Signing time: Tue 11 Nov 2025 07:01:27 +0000
Manifest this update: Tue 11 Nov 2025 07:01:27 +0000
Manifest next update: Wed 12 Nov 2025 07:01:27 +0000
Files and hashes: 1: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl (hash: URI6HoRGQsF0JVHJwiMe8SBCtzCAtkY26cSFbnQ3jfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:2f:09:b3:29:80:84:84:f0:6c:b6:e7:d8:82:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e
Validity
Not Before: Nov 11 07:01:27 2025 GMT
Not After : Nov 12 07:01:27 2025 GMT
Subject: CN=afaeff03d5ade01e1a6796bc77d3f9ea0fc41e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ee:82:2e:5c:7b:ee:ea:29:a0:42:18:b8:6b:
ad:3b:72:21:de:56:c0:43:a9:51:a7:c7:2f:f8:80:
ef:c1:83:8f:99:8a:bf:67:a8:a3:82:6a:b0:de:da:
10:50:a7:54:a2:07:5b:d6:25:14:10:ce:91:22:54:
6a:ed:cc:7c:de:ba:b8:c0:f0:3d:5a:de:4b:a1:82:
42:7e:52:0f:59:b3:fd:64:4f:8b:f8:17:63:b5:17:
63:ef:81:48:b3:05:9e:cb:26:3c:4a:80:22:6a:cc:
e3:4a:b6:e9:24:9f:e3:ff:76:fe:43:60:17:97:e8:
95:1d:eb:d6:64:ae:14:be:1a:d3:4d:c2:cd:15:02:
f8:c3:c4:a4:d3:6b:35:3a:32:f7:a4:bf:20:6c:44:
9f:e0:3b:2d:5b:0b:0f:bf:f3:3e:cc:f9:20:d1:cb:
e9:e3:01:ce:16:f3:10:d4:c3:26:26:60:0e:ff:39:
5b:45:96:06:41:30:fd:0c:c2:0d:77:27:eb:c9:c0:
ba:52:db:cd:ed:a0:83:52:37:ce:a4:9e:75:a6:a9:
5e:17:56:02:39:77:cb:55:94:13:7d:d7:5c:23:1b:
66:78:f3:e6:00:59:8b:ae:e2:f8:47:59:36:06:31:
9a:cf:21:0e:92:3c:ad:ee:8b:cb:93:eb:87:bd:e2:
c8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AE:FF:03:D5:AD:E0:1E:1A:67:96:BC:77:D3:F9:EA:0F:C4:1E:1A
X509v3 Authority Key Identifier:
keyid:9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:92:95:a6:79:23:16:2f:cb:9a:85:9d:86:98:62:84:89:e6:
db:e2:d1:be:3a:70:1d:6d:51:ca:cc:8b:e9:0c:92:87:54:e9:
13:de:4c:c1:c0:83:9b:d2:da:20:4e:52:56:26:d8:ff:8a:25:
0b:7f:6b:b9:96:6c:3a:bd:98:36:fb:a1:34:01:27:49:06:ac:
ab:61:b9:4b:da:7a:48:29:69:dd:50:ba:81:63:c7:ab:89:0f:
3e:63:40:46:c2:65:73:fd:81:79:b3:36:fe:60:b0:55:01:7a:
a4:8b:9f:b7:37:ba:fa:62:63:9a:7c:2b:7c:73:a8:9d:b1:50:
8e:d5:a5:80:e2:7d:46:a2:f0:0a:d4:a2:9c:aa:fc:bc:95:cb:
ad:a8:29:b8:35:7a:85:24:35:46:19:8e:94:70:80:7e:77:19:
f1:59:dd:1d:f4:81:a5:5f:26:e1:82:c4:71:8a:02:90:47:3e:
e1:7d:1a:1f:b1:88:fc:b6:b8:2d:25:52:f0:61:d0:89:08:2c:
d6:8f:e3:e4:c6:30:ef:4d:d7:4d:58:93:cf:0e:99:64:da:53:
51:66:56:9d:d2:10:8c:9a:5e:04:5d:a2:81:23:93:5e:d9:ea:
a6:f7:73:03:a2:f7:27:4d:08:88:e2:cb:25:e7:6b:a6:c8:7f:
09:5b:37:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuC8JsymAhITwbLbn2IIFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjA3ZjUwOWU5NDdiMjY3Zjg3YmEwYWRlODllYzRkM2Fl
NTZhM2UwHhcNMjUxMTExMDcwMTI3WhcNMjUxMTEyMDcwMTI3WjAzMTEwLwYDVQQD
EyhhZmFlZmYwM2Q1YWRlMDFlMWE2Nzk2YmM3N2QzZjllYTBmYzQxZTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+6CLlx77uopoEIYuGutO3Ih3lbA
Q6lRp8cv+IDvwYOPmYq/Z6ijgmqw3toQUKdUogdb1iUUEM6RIlRq7cx83rq4wPA9
Wt5LoYJCflIPWbP9ZE+L+BdjtRdj74FIswWeyyY8SoAiaszjSrbpJJ/j/3b+Q2AX
l+iVHevWZK4UvhrTTcLNFQL4w8Sk02s1OjL3pL8gbESf4DstWwsPv/M+zPkg0cvp
4wHOFvMQ1MMmJmAO/zlbRZYGQTD9DMINdyfrycC6UtvN7aCDUjfOpJ51pqleF1YC
OXfLVZQTfddcIxtmePPmAFmLruL4R1k2BjGazyEOkjyt7ovLk+uHveLIVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+u/wPVreAeGmeWvHfT+eoPxB4aMB8GA1UdIwQY
MBaAFJ/wf1CelHsmf4e6Ct6J7E065Wo+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9CX1VKNlVleVpfaDdvSzNvbnNUVHJsYWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MTk1M2EtNzliYS00NDAyLWJjZGUt
ODk5OGFhYTdmMzE1LzEvbl9CX1VKNlVleVpfaDdvSzNvbnNUVHJsYWo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS80MTk1M2EtNzliYS00NDAyLWJjZGUtODk5OGFhYTdmMzE1
LzEvbl9CX1VKNlVleVpfaDdvSzNvbnNUVHJsYWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJKVpnkj
Fi/LmoWdhphihInm2+LRvjpwHW1RysyL6QySh1TpE95MwcCDm9LaIE5SVibY/4ol
C39ruZZsOr2YNvuhNAEnSQasq2G5S9p6SClp3VC6gWPHq4kPPmNARsJlc/2BebM2
/mCwVQF6pIuftze6+mJjmnwrfHOonbFQjtWlgOJ9RqLwCtSinKr8vJXLragpuDV6
hSQ1RhmOlHCAfncZ8VndHfSBpV8m4YLEcYoCkEc+4X0aH7GI/La4LSVS8GHQiQgs
1o/j5MYw703XTViTzw6ZZNpTUWZWndIQjJpeBF2igSOTXtnqpvdzA6L3J00IiOLL
Jedrpsh/CVs3Xw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:53 2025 by rpki-client