Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
File: 9WFTxQuIFb0o37sA4j5vJjIDFy4.mft (raw, json)
Hash identifier: 7iGOxI6FZchZOEd5tITdx3jMempokU8PTOgOOzIicQo=
Subject key identifier: AA:3C:5A:C0:C4:A3:D9:CF:AB:31:17:AC:79:AD:7C:07:40:A1:51:AA
Authority key identifier: F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
Certificate issuer: /CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Certificate serial: 019A7293F7E0D806F95353BCD2B0D1685AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
Manifest number: 0C02
Signing time: Tue 11 Nov 2025 11:01:31 +0000
Manifest this update: Tue 11 Nov 2025 11:01:31 +0000
Manifest next update: Wed 12 Nov 2025 11:01:31 +0000
Files and hashes: 1: 9WFTxQuIFb0o37sA4j5vJjIDFy4.crl (hash: ihqzfGsPFptmI93otNoennJ5dq6/XxD6ETyDkinLe5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:f7:e0:d8:06:f9:53:53:bc:d2:b0:d1:68:5a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Validity
Not Before: Nov 11 11:01:31 2025 GMT
Not After : Nov 12 11:01:31 2025 GMT
Subject: CN=aa3c5ac0c4a3d9cfab3117ac79ad7c0740a151aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ed:28:65:3f:a3:e8:77:9d:68:55:16:1b:f2:
84:11:fd:fd:91:37:6c:d2:42:ee:fb:24:ac:6c:6c:
19:7b:b8:00:7b:d0:15:94:c5:f9:16:66:18:1a:56:
e5:7d:81:9a:7d:28:af:92:f3:50:4c:b9:7c:71:86:
da:ec:43:bc:33:6b:0d:11:89:5d:94:c4:34:88:f6:
84:92:09:21:4d:ea:9c:27:9f:49:c6:ea:4a:d9:e1:
27:7a:a8:19:89:d2:25:eb:bb:ee:5c:1f:77:13:34:
fd:7f:c7:c2:00:5d:8f:0f:f3:87:39:52:6c:b5:4d:
b6:33:0f:67:c3:a4:1b:e1:2d:97:5d:bc:fc:01:1a:
cc:82:7f:ed:7f:c9:60:df:89:81:86:1a:db:62:a5:
8a:30:a6:39:c2:bb:d7:6b:75:62:a6:73:50:8a:e3:
63:5e:73:d3:52:3d:43:c6:b4:2e:de:ef:03:dc:11:
fe:6f:25:c0:55:2c:26:43:e3:14:fd:63:b6:19:35:
da:e0:1b:7a:46:17:51:b5:9d:02:2d:8f:fd:61:1f:
19:34:ba:21:5c:2e:24:c4:44:05:71:73:2f:38:3b:
a0:97:07:28:3f:19:61:7b:ae:0e:a5:cf:c5:ed:a6:
78:ba:ee:bd:b0:da:3c:57:36:f5:6c:ca:69:09:d7:
b1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3C:5A:C0:C4:A3:D9:CF:AB:31:17:AC:79:AD:7C:07:40:A1:51:AA
X509v3 Authority Key Identifier:
keyid:F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:70:61:7b:4e:be:1d:ad:57:4f:f9:e3:7d:64:92:28:37:bb:
4f:1b:7e:89:3d:2d:14:48:d3:eb:04:89:27:da:7e:55:ca:13:
d7:8f:37:1d:69:29:b1:c0:a5:fa:a3:3a:b1:9a:0c:af:4b:30:
fc:44:53:b3:5e:33:fc:13:35:fb:ea:d9:bd:9d:aa:6f:32:e3:
f2:95:ef:df:02:18:64:fc:12:f0:8b:08:9e:8c:a1:11:92:fd:
1e:98:65:1b:ff:bb:b3:4b:c6:22:3c:be:e6:32:32:af:b7:03:
2a:9a:f4:ed:5e:f5:01:16:e4:a1:dc:03:9d:ed:4f:99:96:c9:
5b:1b:50:9c:f7:1b:61:14:6a:e1:ff:41:a4:00:7b:d4:ce:3c:
96:9a:ee:58:b1:03:8c:ff:4a:9f:d4:6b:34:b3:37:c7:c6:63:
75:ce:68:4c:86:72:4e:87:ac:c1:3f:e7:fb:4a:26:dc:f3:ec:
1b:00:c1:9c:34:7b:91:5e:a3:b4:a5:b3:b3:e5:49:ab:f4:6a:
4f:dd:cb:b9:47:2a:71:c9:ef:ce:2f:80:a0:22:a4:60:06:b2:
1c:85:7c:e0:67:27:fc:c7:37:a3:fc:76:60:92:c4:33:94:e9:
cb:0d:2c:2f:03:cf:52:7c:f5:b7:4f:5f:4b:ec:e1:a5:0b:03:
07:14:27:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:26:51 2025 by rpki-client