Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
File: 9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft (raw, json)
Hash identifier: qub+c2y1kZnf5IFeWFTo8r0HopAeg2jBIJolPQaIxhM=
Subject key identifier: CD:73:55:2B:F3:50:FE:78:CA:E3:07:0E:04:99:1A:77:80:E0:9F:CC
Authority key identifier: F6:09:32:C7:B8:94:51:9D:34:62:47:30:2E:B3:65:F5:C4:09:B0:3C
Certificate issuer: /CN=f60932c7b894519d346247302eb365f5c409b03c
Certificate serial: 019A71EE9EB7BFAD345B423CAFE8159FDA7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
Manifest number: 5B
Signing time: Tue 11 Nov 2025 08:00:54 +0000
Manifest this update: Tue 11 Nov 2025 08:00:54 +0000
Manifest next update: Wed 12 Nov 2025 08:00:54 +0000
Files and hashes: 1: 9gkyx7iUUZ00YkcwLrNl9cQJsDw.crl (hash: 9xtFmfR/FBEu+s+bNuByJIa11WnDA/aFmtlLP8hebfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9e:b7:bf:ad:34:5b:42:3c:af:e8:15:9f:da:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60932c7b894519d346247302eb365f5c409b03c
Validity
Not Before: Nov 11 08:00:54 2025 GMT
Not After : Nov 12 08:00:54 2025 GMT
Subject: CN=cd73552bf350fe78cae3070e04991a7780e09fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3a:bd:fc:b0:6a:d4:df:82:e3:a9:65:18:aa:
b2:d2:4f:d3:0c:02:38:a0:55:19:44:58:d5:65:1c:
4f:14:9e:5e:b7:90:12:5e:d8:a4:95:23:1e:ed:4c:
4a:6d:91:b3:55:32:24:c2:03:93:bb:33:1d:c7:94:
6d:1a:2f:d2:4c:6e:14:cb:58:c1:b3:12:52:4e:24:
fc:21:68:e7:26:74:fa:50:92:68:f1:a9:5d:78:32:
10:95:f7:e2:9e:1c:a9:9e:20:ea:3b:80:07:d6:1e:
fa:03:a0:55:c4:6b:1d:c3:d3:48:2f:a6:a5:6d:65:
1c:11:ad:d3:09:d6:9d:4c:86:1d:37:2c:b2:bb:62:
99:b0:f0:ef:c1:e9:0b:b4:14:e1:24:98:74:8b:3d:
37:7d:f2:49:f2:da:b8:19:3c:24:37:fd:05:ab:9d:
1a:ae:23:94:ae:c4:76:9b:47:88:19:04:b9:60:3e:
10:d8:8c:96:b6:81:d0:c2:51:cc:0e:ea:89:da:e0:
51:ef:44:7f:bd:da:f8:ac:64:b2:e0:a4:e4:f1:1b:
62:6c:93:9d:8d:dc:dd:30:3d:c4:72:77:46:53:9f:
14:c9:4f:df:45:55:70:f1:d3:1f:98:77:c1:dc:26:
a4:f5:fb:32:37:18:ed:28:96:bc:5f:bc:4f:32:97:
fb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:73:55:2B:F3:50:FE:78:CA:E3:07:0E:04:99:1A:77:80:E0:9F:CC
X509v3 Authority Key Identifier:
keyid:F6:09:32:C7:B8:94:51:9D:34:62:47:30:2E:B3:65:F5:C4:09:B0:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:62:c4:2d:3b:40:ca:db:e3:c3:f1:94:a2:02:22:66:17:bf:
db:25:ee:35:cb:fe:45:58:34:e8:d0:e2:ca:ad:06:62:9b:5d:
b9:f6:e1:f8:9d:b5:4c:8c:f1:13:3a:cb:1b:5e:44:4d:65:c6:
3e:02:ea:51:7c:73:b1:3f:dc:96:c3:70:27:a2:90:45:ba:bd:
45:81:1a:c0:27:6b:1b:e9:23:d8:30:96:2c:d8:56:c8:2f:4e:
6f:db:24:a3:58:64:02:f2:70:bc:1c:7e:f4:ec:22:fd:93:77:
52:2c:19:15:d1:de:e0:67:69:df:03:1b:2b:bd:30:06:1e:a8:
ac:74:0e:1e:cf:8b:f0:c2:46:07:01:a9:73:9e:c8:cf:92:ef:
4d:5e:3e:70:ae:0b:ba:10:eb:c0:55:65:c9:41:8c:89:08:15:
75:df:0b:8b:80:20:bb:2f:e2:78:cb:7a:38:78:db:05:e3:dc:
a4:24:cb:14:d2:96:6b:04:16:48:f3:df:a2:d5:4f:77:15:1d:
b6:47:71:4b:2e:10:1d:1a:d3:a8:42:87:7d:0d:c9:41:5d:4d:
aa:9e:8e:9b:18:2b:b7:1a:6b:a5:14:3f:93:8d:d8:93:84:17:
ef:96:ac:32:23:e1:5f:f7:7a:e1:54:aa:51:9f:91:a5:4e:bb:
06:a2:38:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:09 2025 by rpki-client