Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
File: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json)
Hash identifier: o20F5XF145JX7jtjQvAnZqJduhx2tlyUdUv4twErxi0=
Subject key identifier: 99:0A:A2:A8:C9:70:94:79:74:CB:4F:29:EA:4C:E4:A1:65:5C:F9:AD
Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
Certificate issuer: /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Certificate serial: 019A71B81A18C2F2F51A1B7D4D7E8A89E154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:21 +0000
Manifest this update: Tue 11 Nov 2025 07:01:21 +0000
Manifest next update: Wed 12 Nov 2025 07:01:21 +0000
Files and hashes: 1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: ddQFhOqzT3aZIXK4k8vhqqqyNHfCpDhB6M5XdOp6xdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1a:18:c2:f2:f5:1a:1b:7d:4d:7e:8a:89:e1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Validity
Not Before: Nov 11 07:01:21 2025 GMT
Not After : Nov 12 07:01:21 2025 GMT
Subject: CN=990aa2a8c970947974cb4f29ea4ce4a1655cf9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2e:07:a7:83:78:e0:3c:9d:bd:7f:f0:4d:c3:
da:63:73:fe:1e:1e:ca:6a:56:22:61:29:47:ee:aa:
60:ee:52:26:fb:0f:ec:76:e5:bc:0d:11:63:31:55:
7d:6a:bf:7a:e8:17:6a:fd:fc:dc:3f:16:6f:5d:61:
39:f5:5b:96:91:2b:74:23:c7:f2:4e:1d:15:4a:08:
86:82:79:30:44:b5:64:dd:15:aa:64:51:21:ab:d9:
09:e5:52:28:53:a4:d6:93:4b:f2:0b:3e:71:01:d2:
1c:98:08:4e:1a:1c:ba:d7:58:1b:cd:5c:01:3a:cd:
b3:e8:cd:bd:20:ba:2b:0e:92:02:4b:d0:a6:7c:c3:
3d:fd:11:87:d2:13:82:c1:de:6b:57:a8:c2:6d:2d:
38:72:53:e7:23:6e:6b:c2:1d:80:8c:41:a8:14:96:
58:70:aa:4e:84:26:e6:76:2e:95:dd:90:35:54:c4:
15:a3:2e:73:b1:02:3c:a7:83:1e:cb:ee:5d:19:c6:
f7:49:5c:c2:0c:1d:2f:1c:ab:c7:15:fb:2b:7c:98:
a2:fb:2a:9a:1d:65:a4:8f:c8:f2:59:ab:e0:c6:11:
b0:69:28:e6:b3:1a:68:56:47:b8:8f:96:49:95:a1:
0d:3f:1f:e7:ee:fc:63:d0:20:61:0e:11:c9:56:5f:
fc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0A:A2:A8:C9:70:94:79:74:CB:4F:29:EA:4C:E4:A1:65:5C:F9:AD
X509v3 Authority Key Identifier:
keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6b:20:62:3e:28:ac:07:b4:1b:8a:2c:e0:d2:2a:b0:34:59:
2b:4f:ab:4e:d9:77:e5:0f:bc:43:89:c8:26:e1:d1:d7:8b:48:
c8:7f:e6:f7:98:90:b9:9e:1a:5d:25:15:fa:d5:fc:15:f6:f9:
9e:60:10:d8:9d:5b:a0:5f:7e:41:92:9d:be:ea:22:15:d9:38:
ba:26:3d:ad:c2:48:e0:d0:cc:bc:3a:18:f7:9d:78:50:d1:31:
2f:ab:8c:df:62:e9:61:ee:3c:6b:1b:1c:ea:65:91:d2:fc:a7:
47:6a:5e:fc:5b:57:66:45:1e:83:b9:a9:49:5b:ba:c7:62:ff:
20:81:ef:c3:18:34:c4:70:a5:96:1f:83:f5:37:99:98:a6:4a:
45:66:ba:e8:db:70:b5:f8:b0:10:ac:16:e5:e6:1b:76:a3:18:
6b:09:41:16:8a:8b:50:4c:57:33:69:41:c5:88:b8:b5:3c:e4:
5b:01:54:a3:48:3e:c8:d1:e3:1c:64:2b:76:f9:c3:2c:08:11:
16:8a:12:54:e6:07:16:76:3a:39:e9:d4:a4:87:91:de:ed:b1:
b0:6e:53:6b:2f:73:fa:51:17:f0:ea:85:0d:33:ac:66:c8:fb:
ce:ba:fe:b0:5d:a8:46:65:2c:37:8b:36:1e:1f:bd:a6:05:05:
ec:de:be:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:14 2025 by rpki-client