Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
File: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft (raw, json)
Hash identifier: LcqF/O4HaqAUz03az+TyqeKVDX+7jTVfC7M+5e5V16k=
Subject key identifier: C1:60:E4:CD:02:37:13:AA:89:65:3A:1D:85:BB:17:87:AF:21:D9:48
Authority key identifier: F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
Certificate issuer: /CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Certificate serial: 019A7225982A6F60016D84003D4D33BF0D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
Manifest number: 0DFF
Signing time: Tue 11 Nov 2025 09:00:57 +0000
Manifest this update: Tue 11 Nov 2025 09:00:57 +0000
Manifest next update: Wed 12 Nov 2025 09:00:57 +0000
Files and hashes: 1: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl (hash: DRRgznKHCjg/Se3eb8/NKtHYs1Y0ZYXVE/MG7yX4zlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:98:2a:6f:60:01:6d:84:00:3d:4d:33:bf:0d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Validity
Not Before: Nov 11 09:00:57 2025 GMT
Not After : Nov 12 09:00:57 2025 GMT
Subject: CN=c160e4cd023713aa89653a1d85bb1787af21d948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:dc:02:13:f5:1d:9b:a0:a3:cd:9b:4f:3c:
66:3f:7f:c9:19:56:1e:db:b3:48:97:8f:83:16:29:
e2:fc:ac:83:f3:41:c9:e2:f0:8c:2a:17:34:43:f5:
da:fe:e2:15:d7:b5:81:5a:a7:8a:ed:1a:0e:00:1a:
bd:9f:36:63:a6:dd:61:95:f5:85:08:bb:5d:fa:91:
07:78:9c:33:b8:67:7c:2a:07:fc:fe:ae:99:7e:75:
e6:c7:86:0a:ef:3d:c8:1e:66:7d:e5:50:a6:15:8c:
0b:54:ef:1e:57:2f:15:d3:ac:11:7e:0b:3a:47:0c:
be:68:84:ad:89:8b:c3:c9:c4:8a:ae:aa:ca:54:d3:
c9:90:88:f1:31:d7:c5:8c:19:d0:85:28:d8:d3:db:
67:b6:28:07:5b:19:25:58:76:3b:6e:76:01:5f:b3:
87:d1:2c:82:7b:60:e6:b0:8d:a5:60:14:8d:a7:d0:
8a:f0:d1:cb:f1:74:15:9f:43:ba:a4:a8:d8:60:45:
59:17:e7:65:c7:44:25:5d:4f:27:92:12:e7:9e:89:
56:85:21:4e:df:53:4c:44:27:b8:b1:ca:33:82:f8:
bb:7f:a7:d2:c6:2d:60:55:25:ef:86:80:72:e2:7a:
e9:30:ef:54:37:c0:08:94:25:26:a5:12:fc:74:92:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:60:E4:CD:02:37:13:AA:89:65:3A:1D:85:BB:17:87:AF:21:D9:48
X509v3 Authority Key Identifier:
keyid:F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d2:76:01:b1:d2:4f:b9:2c:5c:3e:ae:4a:70:5b:b6:f1:0d:
ae:7b:01:70:ec:11:5c:cf:08:24:7b:5c:d1:39:2e:9a:e2:9a:
92:3d:44:65:0b:22:5a:7a:74:57:96:a7:ad:6a:54:c2:07:d4:
9a:e9:5b:ef:b4:26:38:48:c5:87:8e:48:cd:3e:f2:37:3b:e2:
2a:af:74:04:92:27:bf:58:94:da:2b:f1:0b:73:cc:62:e3:54:
ad:92:10:e1:c2:2a:9a:c6:66:24:1d:c3:01:36:4a:6f:b9:b9:
71:c5:98:4d:a5:40:ba:32:75:8c:7e:d5:f2:b0:10:23:f8:fa:
9c:69:c1:8b:18:32:88:12:3f:46:b0:07:fc:e5:63:9c:1c:bd:
64:37:c4:ea:93:e7:e5:f4:16:f2:b2:f1:9f:d7:13:cd:47:e4:
90:58:48:9b:2d:e7:d6:cd:ee:f5:1b:6a:fb:da:7e:24:45:77:
d2:0b:53:2f:63:e6:68:b4:d6:59:58:25:b9:81:32:4c:f7:5f:
88:09:0e:12:06:fa:ab:d7:27:9a:18:9d:83:9b:b4:7f:79:d5:
15:11:7c:32:6f:44:0b:78:0e:13:b9:f0:d0:fc:05:0b:6b:d2:
77:2f:c5:eb:e8:c4:0a:c3:97:f8:b7:1c:c5:5f:74:76:b6:17:
35:1a:06:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:54 2025 by rpki-client