Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
File: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft (raw, json)
Hash identifier: dqPVR5ZtambzWSHCDVyy4GCeuI+flS5ceMTIRRouqHk=
Subject key identifier: F9:A7:A1:B1:65:36:72:3B:3A:D2:EF:C7:2F:3E:B6:EF:97:B6:97:39
Authority key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
Certificate issuer: /CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Certificate serial: 019A7112EEF7633B8AEA6310E84C0D9ADB60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 04:00:57 +0000
Manifest this update: Tue 11 Nov 2025 04:00:57 +0000
Manifest next update: Wed 12 Nov 2025 04:00:57 +0000
Files and hashes: 1: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl (hash: H+CtcCX8DvBBvqbGKAQcKdmvsWpR7YhkcQZKueli4jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ee:f7:63:3b:8a:ea:63:10:e8:4c:0d:9a:db:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Validity
Not Before: Nov 11 04:00:57 2025 GMT
Not After : Nov 12 04:00:57 2025 GMT
Subject: CN=f9a7a1b16536723b3ad2efc72f3eb6ef97b69739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:be:fd:a4:7c:61:f4:74:07:76:56:61:15:
20:99:d1:3f:91:e6:34:11:8b:52:63:e6:bb:a2:c5:
17:09:38:ec:ff:a5:bc:96:9f:cc:0d:81:1d:79:de:
42:6b:be:8c:a2:b2:c0:c7:7e:0f:2d:18:a9:22:8a:
e5:ee:e8:a5:a7:e7:26:dd:d7:97:c3:56:fe:0f:50:
dd:81:44:15:20:1b:36:3c:8e:a8:2f:cc:64:77:97:
90:0f:ed:15:94:86:5b:c9:69:34:15:1d:95:d1:31:
d5:45:2e:14:91:63:ea:59:91:90:2d:6c:0b:98:f2:
c2:fe:84:d7:7e:fa:82:f3:ae:1d:b2:3b:9a:ea:78:
c9:36:27:bd:a9:f0:e1:62:e7:51:e7:56:e5:f0:16:
65:74:29:fa:f3:06:f2:2d:8c:aa:51:53:36:d9:bf:
9e:74:63:9e:5d:5a:ec:bd:ef:08:36:8a:30:5a:8e:
e9:27:4f:42:4e:28:20:2a:b8:ee:7a:62:91:6c:dc:
6c:a9:8f:57:99:e9:c5:2b:67:42:ee:74:46:45:6a:
fe:89:80:19:71:f2:86:ef:3d:6f:80:47:36:7a:ca:
3e:e4:17:ba:85:34:ab:b4:e2:be:fb:48:2b:14:41:
58:c2:2e:26:69:b9:53:6a:1c:fc:8e:12:18:16:af:
d3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A7:A1:B1:65:36:72:3B:3A:D2:EF:C7:2F:3E:B6:EF:97:B6:97:39
X509v3 Authority Key Identifier:
keyid:F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:8f:9d:44:22:f7:f8:34:4d:9c:a0:21:ac:04:7d:88:45:67:
d9:e1:9c:72:b8:52:3e:f4:f4:a4:7d:6a:db:5e:23:fc:17:ca:
68:16:b8:59:9e:fa:b6:9b:d9:7f:fd:0d:89:ce:05:f2:3c:59:
b9:ec:46:78:88:80:e8:79:1e:5e:a4:7d:87:0d:9f:a8:75:87:
08:ac:7a:96:32:44:cf:4b:ab:fc:74:a7:67:6d:76:e7:be:c3:
c9:d6:93:02:9d:2d:b9:4e:0a:11:ed:99:01:3d:8f:8f:dc:3e:
3a:e2:f3:c7:2a:c3:64:52:1f:43:14:a2:24:52:4b:22:d1:28:
2d:52:64:c2:d0:3b:2d:1d:08:f5:89:74:9b:52:9f:df:f2:32:
0a:28:84:ee:e9:29:f7:6d:a7:03:f7:f9:a1:46:df:0d:36:e6:
e4:7a:ab:cf:94:51:ac:87:4f:8a:cf:9c:82:ae:af:33:2b:4b:
3d:c3:e9:48:05:07:85:94:b2:39:b1:11:63:26:6d:06:bd:4b:
73:b1:48:89:fc:80:01:35:dd:1e:12:33:49:67:d6:07:db:c5:
06:c2:f2:33:0c:bd:db:ea:cf:64:9e:58:5d:d9:fb:52:eb:ae:
0a:13:65:6d:6b:50:98:62:d7:c8:37:06:3f:1e:69:6b:f1:01:
5b:11:0a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:33 2025 by rpki-client