Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
File: 9Y-A0jqdiu1P4xH3IiCcldqarUY.mft (raw, json)
Hash identifier: QBkY+JEVmMXToCUoImTv4ZlLtBvugny4Z7vzVFVY8rw=
Subject key identifier: D3:06:EE:FE:D3:9B:8E:48:E5:91:27:30:7B:50:F4:03:EC:9C:7E:AB
Authority key identifier: F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
Certificate issuer: /CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Certificate serial: 019A7112EFC7D41E3EAE3184587ECE01F4BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
Manifest number: 0DFC
Signing time: Tue 11 Nov 2025 04:00:57 +0000
Manifest this update: Tue 11 Nov 2025 04:00:57 +0000
Manifest next update: Wed 12 Nov 2025 04:00:57 +0000
Files and hashes: 1: 9Y-A0jqdiu1P4xH3IiCcldqarUY.crl (hash: 30uQhVOcUImzCRlyYHMEyG9aSGQc/ctUU2wXrnCji6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ef:c7:d4:1e:3e:ae:31:84:58:7e:ce:01:f4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Validity
Not Before: Nov 11 04:00:57 2025 GMT
Not After : Nov 12 04:00:57 2025 GMT
Subject: CN=d306eefed39b8e48e59127307b50f403ec9c7eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3a:ef:e6:f5:50:c3:6d:47:41:35:bd:04:c0:
ae:8f:8e:e0:08:cd:3f:7f:81:c3:f6:74:91:3e:82:
13:f6:be:0e:b3:cd:fc:92:35:2e:9d:45:ec:08:ba:
d0:23:d8:28:19:05:59:90:0a:a2:1a:8e:37:c8:03:
25:0f:3e:ce:c5:30:29:38:e0:59:c2:22:59:9f:5c:
2d:9e:59:93:6f:c5:7d:79:a6:24:64:ca:f0:68:8f:
a9:1f:a2:64:60:0b:2d:1d:1e:95:99:ec:7f:9d:f3:
fb:9a:97:55:53:22:37:ce:da:2e:d8:27:02:69:48:
02:25:15:5d:ed:a6:98:c9:cf:5c:53:a1:2e:8c:05:
a2:be:4a:98:8c:c1:d1:49:72:02:dc:6e:d4:9a:9a:
cf:97:aa:15:e3:d1:a9:94:80:c7:65:38:e7:76:ee:
4b:7d:87:2d:48:d6:73:44:6a:ee:f8:00:6f:43:25:
74:f6:f5:e7:cf:5c:17:69:af:81:35:f8:e2:53:a1:
01:f8:e2:64:48:cd:24:65:a9:5a:1d:1f:00:e1:dd:
2d:74:0f:83:81:16:81:ef:40:e3:ae:ab:5f:43:d4:
14:c5:32:7a:90:9c:15:ef:e0:3c:d9:12:0f:65:bc:
08:15:62:e5:32:16:8a:fa:b5:e3:d0:0e:55:82:43:
ad:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:06:EE:FE:D3:9B:8E:48:E5:91:27:30:7B:50:F4:03:EC:9C:7E:AB
X509v3 Authority Key Identifier:
keyid:F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ab:e4:08:05:93:02:c0:17:ce:01:a5:87:10:71:eb:4c:c4:
f8:4f:df:e7:c1:a4:22:4d:01:79:95:0d:11:b4:79:80:a7:a6:
de:44:ba:2d:d7:39:43:b2:f2:8e:a1:c0:5e:15:aa:89:7d:08:
b9:76:8e:b3:64:5d:1b:76:5b:26:de:48:9a:2d:ad:0d:8b:62:
84:fc:c3:84:84:f7:94:cb:30:f6:ed:34:d6:cd:14:51:d1:6f:
48:76:a8:5f:d1:10:93:a6:9f:47:d1:8f:f6:97:a7:a4:40:17:
d4:d9:ef:75:39:cb:dc:ef:d0:8f:dc:bd:67:9c:76:eb:31:49:
9c:6d:7d:59:a0:74:2a:41:8a:0c:45:7f:45:20:cd:37:82:f3:
1e:e8:6a:79:0e:36:52:27:b0:37:55:7f:50:b9:62:45:51:56:
74:ef:7e:2e:f8:ba:aa:ab:ff:6a:74:2f:5f:7d:ce:90:a5:25:
54:71:bd:fd:74:10:20:8b:58:b8:40:8f:2c:d3:fd:ab:dc:71:
ac:7c:cf:79:42:49:51:ac:6a:5f:0f:ae:3d:67:84:87:87:29:
40:18:2a:1c:17:42:3e:aa:ed:1b:3d:72:5b:72:43:3a:13:7f:
eb:0c:b7:3a:d8:05:bf:4a:8c:64:7b:07:26:32:d7:c4:26:31:
16:e2:71:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:30 2025 by rpki-client