Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
File: 83MAhqFPMbJWQMFC7f0XvJMyDFo.mft (raw, json)
Hash identifier: Rx1ibobUVfcmfyjOvirhpaFGdusrtl0FBA+1F+82cpo=
Subject key identifier: 9A:A9:02:59:F5:36:66:89:2B:A5:67:65:CC:83:66:B5:16:7B:25:3D
Authority key identifier: F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A
Certificate issuer: /CN=f3730086a14f31b25640c142edfd17bc93320c5a
Certificate serial: 019A7293305A7BA20F159D8725629C2BC339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
Manifest number: 0FC6
Signing time: Tue 11 Nov 2025 11:00:39 +0000
Manifest this update: Tue 11 Nov 2025 11:00:39 +0000
Manifest next update: Wed 12 Nov 2025 11:00:39 +0000
Files and hashes: 1: 83MAhqFPMbJWQMFC7f0XvJMyDFo.crl (hash: gTBnzCJ64YN7PTy/xzrQ+Y22O203ZX5ELP0N3aaN0ZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:30:5a:7b:a2:0f:15:9d:87:25:62:9c:2b:c3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3730086a14f31b25640c142edfd17bc93320c5a
Validity
Not Before: Nov 11 11:00:39 2025 GMT
Not After : Nov 12 11:00:39 2025 GMT
Subject: CN=9aa90259f53666892ba56765cc8366b5167b253d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:55:0a:fe:f8:c8:35:0a:59:02:81:dd:9a:
56:f1:7a:8e:a3:ab:99:e2:d1:6f:c4:b6:ae:37:da:
2c:1f:b9:46:f7:e4:5b:be:92:74:c7:59:29:8f:e3:
61:66:56:8b:4b:90:a1:ef:1d:e6:9c:cc:3a:f6:4b:
58:5e:c6:f9:0e:a4:59:8a:47:85:aa:43:5f:81:8a:
cc:b2:42:59:a5:62:f9:f4:90:87:13:81:6c:b6:01:
0a:7e:60:7a:93:0b:13:f7:8e:fd:cb:b9:1f:d9:3e:
3a:3f:73:62:93:49:5b:6e:11:0c:2e:e4:c1:2c:63:
95:e9:54:f0:ba:32:79:09:22:7f:32:f1:66:c5:be:
4f:14:8f:98:be:83:f1:fc:79:89:b3:84:2d:f2:08:
0f:a1:f7:f3:8f:1c:c2:3c:aa:57:a2:d2:e8:97:3a:
9d:2f:44:71:75:cd:ad:06:30:5b:f4:6e:1e:f3:57:
88:51:8f:91:b4:b7:19:45:92:4f:af:97:b7:cf:fc:
a3:ce:76:08:14:cf:e6:77:8f:26:79:3c:d2:0d:66:
a6:15:2e:8d:77:72:68:49:72:14:18:3b:7a:39:7f:
ed:56:26:9e:ad:08:c7:13:20:be:f4:25:b2:fb:df:
22:d2:43:75:cb:1f:a0:c5:05:56:f5:67:96:de:ab:
bb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A9:02:59:F5:36:66:89:2B:A5:67:65:CC:83:66:B5:16:7B:25:3D
X509v3 Authority Key Identifier:
keyid:F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ad:98:bb:a2:f3:7a:7c:85:25:52:59:15:91:d8:9c:b0:38:
09:f2:e4:4e:d9:33:e1:8c:a1:e3:73:98:52:85:96:9f:1c:08:
5d:bf:03:fb:42:b4:a8:8c:59:03:d5:3f:a9:71:c4:c4:58:1a:
ee:53:fc:60:e3:6f:26:26:52:b3:46:51:3e:8c:a1:41:fd:fb:
32:ad:d1:d6:2c:47:8c:b4:e9:c1:07:8a:14:df:c6:c8:98:da:
de:44:be:1b:66:e7:56:36:c4:93:36:db:90:79:0f:dd:d5:47:
a8:09:80:b7:4f:c0:1f:f2:d2:55:02:8a:25:f5:d1:a0:1e:d7:
32:78:02:ed:0c:0b:4f:62:c8:99:ac:d4:7a:2e:8c:d5:74:ba:
e4:30:3b:eb:ea:4a:23:90:a7:69:17:bc:0c:5b:c5:1a:16:5a:
34:d4:38:d0:7c:e7:b5:39:5d:6a:56:72:37:db:20:8a:fa:ce:
70:f3:c4:b8:09:be:ff:bf:a0:78:20:35:4e:ff:ea:3c:97:6c:
a4:29:84:92:5c:46:7a:b3:ea:0c:12:31:ec:59:8f:78:1e:b5:
9c:a3:cf:37:09:04:9b:8a:93:62:fc:73:8b:36:62:5b:63:e5:
28:76:a4:31:c6:73:d1:fe:1c:73:f1:45:0a:56:72:63:d4:23:
b4:e6:13:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:03 2025 by rpki-client