Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
File: x9CAN66dCrMNEA0U2WFLeNY5Srw.mft (raw, json)
Hash identifier: YnZwwAEntiKvyBzwGgCptqO5fT2ifwTujqdkWbjocAY=
Subject key identifier: 08:6F:E0:44:21:3E:7F:A8:44:BB:42:FD:0C:63:96:EA:83:30:29:BD
Authority key identifier: C7:D0:80:37:AE:9D:0A:B3:0D:10:0D:14:D9:61:4B:78:D6:39:4A:BC
Certificate issuer: /CN=c7d08037ae9d0ab30d100d14d9614b78d6394abc
Certificate serial: 019A7301772C68DECF19EA219ECEEA4B757D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
Manifest number: 02CE
Signing time: Tue 11 Nov 2025 13:01:06 +0000
Manifest this update: Tue 11 Nov 2025 13:01:06 +0000
Manifest next update: Wed 12 Nov 2025 13:01:06 +0000
Files and hashes: 1: x9CAN66dCrMNEA0U2WFLeNY5Srw.crl (hash: /m5/S00NZv58Ynrg0eobiVvq2BT9mEK8fHMEKFez3Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:77:2c:68:de:cf:19:ea:21:9e:ce:ea:4b:75:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d08037ae9d0ab30d100d14d9614b78d6394abc
Validity
Not Before: Nov 11 13:01:06 2025 GMT
Not After : Nov 12 13:01:06 2025 GMT
Subject: CN=086fe044213e7fa844bb42fd0c6396ea833029bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ef:9a:e8:4e:64:99:2f:a6:13:3a:dc:a7:85:
28:f4:79:0e:02:4d:06:4c:50:df:16:66:20:a6:b4:
ca:90:76:c5:af:a5:e1:48:a1:d8:58:b5:8c:4d:eb:
62:0e:2b:89:b6:4e:75:c0:56:a7:c8:20:81:b3:bf:
42:47:e3:49:78:d6:12:c8:94:62:ca:c4:25:51:05:
ef:fc:27:22:88:85:fb:3c:b3:1d:a3:3f:16:98:17:
f6:e6:f7:33:32:f6:f1:86:2b:04:a6:8a:51:67:65:
82:c2:47:a2:22:71:05:7e:df:60:59:87:ae:47:81:
0f:64:20:a0:56:11:55:f7:e5:39:e5:1a:58:0d:a5:
59:8b:5f:6f:12:a9:ff:25:5f:c1:72:99:00:55:44:
5b:32:63:cc:f4:aa:b7:c6:8d:d6:2f:47:43:c0:ef:
55:a6:0f:31:7f:b9:71:21:8a:0b:82:b2:91:49:10:
14:92:aa:4b:b7:80:13:05:9f:aa:6e:ad:de:5c:46:
d5:69:ba:aa:0d:b7:1f:db:ce:e4:26:a5:af:f7:3c:
3a:a3:00:a6:79:8b:ec:e6:b4:a9:e4:d1:10:2e:85:
17:65:03:83:f2:07:9a:47:d6:f2:cd:cb:3f:24:b9:
b8:e3:8c:50:18:46:b7:bf:7a:10:46:1f:f5:a4:9f:
8e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6F:E0:44:21:3E:7F:A8:44:BB:42:FD:0C:63:96:EA:83:30:29:BD
X509v3 Authority Key Identifier:
keyid:C7:D0:80:37:AE:9D:0A:B3:0D:10:0D:14:D9:61:4B:78:D6:39:4A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:bd:13:dc:ac:80:7d:f5:fc:c4:6c:ae:d8:1b:3d:c6:b1:14:
77:51:0c:3f:e2:3d:6e:72:11:ee:6a:92:70:20:14:0c:9c:6f:
3d:87:15:13:c8:34:d1:35:a8:97:76:a3:89:95:b3:ac:78:db:
a5:3c:0b:e3:f6:fe:8b:73:ed:63:d5:5b:aa:29:84:59:0b:fb:
62:74:14:eb:ab:5e:7a:d7:03:c1:6a:e4:3a:e5:6d:b3:7c:76:
bd:aa:52:17:20:5c:dd:c7:83:55:61:b0:37:24:d9:b2:17:95:
ca:b2:ce:08:5b:37:e2:39:63:56:d1:5e:d2:30:ac:46:78:d4:
e8:1e:2f:4f:b8:9c:bb:ff:fd:d0:9e:9b:28:c5:a3:46:b3:55:
91:3b:e9:5f:57:d1:78:8d:ae:a0:eb:7b:e4:66:5b:1b:2a:fd:
c9:b7:2e:f4:df:ce:63:68:9c:72:6e:83:97:b8:41:93:57:72:
2d:68:45:bf:3d:ae:e8:63:17:1f:4e:0c:cd:75:74:0f:5e:30:
8f:c6:f0:cc:e1:41:1a:dd:b0:c9:bb:7e:52:2f:a3:82:dd:c7:
43:4c:d8:dc:d1:fb:8e:2b:a1:41:9e:93:1d:f6:c7:b4:0c:13:
89:78:a3:d9:3d:3c:19:f7:ac:d8:7f:2f:82:a8:1a:36:3a:1e:
f0:5c:7e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:31 2025 by rpki-client