Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft
File: rrc9JyyxdKRjjbIVZ44-57kin_o.mft (raw, json)
Hash identifier: mqjN+aTftlyzLKQ43a+VxmLkqtq3oCeXI5MW0MiyEUw=
Subject key identifier: 82:CC:9A:67:54:14:0A:38:C5:1C:86:D3:E9:CE:77:3D:5C:FC:DB:96
Authority key identifier: AE:B7:3D:27:2C:B1:74:A4:63:8D:B2:15:67:8E:3E:E7:B9:22:9F:FA
Certificate issuer: /CN=aeb73d272cb174a4638db215678e3ee7b9229ffa
Certificate serial: 019A72258D830B5C0791D6AFD579A22F82E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:00:54 +0000
Manifest this update: Tue 11 Nov 2025 09:00:54 +0000
Manifest next update: Wed 12 Nov 2025 09:00:54 +0000
Files and hashes: 1: rrc9JyyxdKRjjbIVZ44-57kin_o.crl (hash: RnmP6+nSzclSuvPk/ScPaVS+EvSoVuX7UNFmmJ2xhC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8d:83:0b:5c:07:91:d6:af:d5:79:a2:2f:82:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb73d272cb174a4638db215678e3ee7b9229ffa
Validity
Not Before: Nov 11 09:00:54 2025 GMT
Not After : Nov 12 09:00:54 2025 GMT
Subject: CN=82cc9a6754140a38c51c86d3e9ce773d5cfcdb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:bd:1f:9a:75:7d:fb:55:78:a6:ff:28:b3:
2e:d3:6e:f3:8e:98:b6:0f:ed:9a:dc:7f:f0:28:2e:
2f:05:f3:31:e5:82:7e:c0:7b:c8:73:5f:1b:68:06:
61:37:e8:7a:ab:64:9b:50:19:ae:6a:fc:94:e1:75:
04:01:9c:43:54:28:a3:d2:12:5e:42:27:7b:ba:b4:
17:d4:d4:fb:51:06:b1:b0:72:56:66:21:5e:b6:34:
07:78:aa:97:f8:98:0f:04:c8:54:af:a4:c5:d1:20:
ec:29:b3:8c:88:81:6b:ff:fa:02:2a:c6:3f:9a:64:
fb:0b:d0:53:9b:bf:1d:aa:36:5e:90:e5:68:c8:32:
db:c2:a1:8e:a6:91:2a:5f:04:0d:fa:22:01:8c:63:
c0:11:ed:72:c1:d8:b8:2d:4c:96:6a:17:22:fc:73:
ee:b4:77:01:17:f6:a0:54:bf:bc:0b:bd:84:f0:c6:
c5:e6:e3:e4:12:58:f3:73:4b:e7:d3:0c:a6:ee:ee:
ca:28:15:47:3a:3c:12:e6:ae:c8:82:13:a5:9d:a2:
aa:f2:ee:37:b1:39:d7:fe:eb:2c:fa:e3:de:1d:50:
25:57:b8:9b:d2:cb:ef:82:ce:45:af:9b:86:35:6e:
8f:c7:d0:d0:42:b3:93:07:9a:70:dc:45:ec:5d:f5:
21:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CC:9A:67:54:14:0A:38:C5:1C:86:D3:E9:CE:77:3D:5C:FC:DB:96
X509v3 Authority Key Identifier:
keyid:AE:B7:3D:27:2C:B1:74:A4:63:8D:B2:15:67:8E:3E:E7:B9:22:9F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2d:40:22:f0:2d:f5:81:b9:23:c1:0a:c0:38:99:15:cc:58:
5d:d9:35:dd:ae:1f:76:36:94:6d:96:cc:00:09:c0:00:eb:ab:
f1:41:85:fe:71:f4:34:cf:f4:c8:3d:68:53:30:6c:55:d6:9a:
29:d5:af:56:c7:ce:f0:21:9e:84:20:76:d2:2d:fb:61:cc:dd:
d7:69:2d:e9:38:ce:ba:c3:32:d0:f6:a1:f6:ae:6c:b6:4a:c8:
5e:73:60:8e:1b:6b:77:e2:51:0f:b1:bc:64:ad:4d:ec:32:6c:
f5:e7:dd:2f:e7:f8:7e:ee:95:db:8e:2a:d6:26:96:dd:99:b2:
fa:d2:62:b0:08:70:96:a8:d3:04:f4:7f:83:97:e3:4b:8b:32:
93:bc:71:e8:40:9d:71:de:10:d8:f7:16:eb:c7:a3:98:e2:c7:
e4:c4:39:10:d9:77:09:b1:4d:c8:b6:82:81:1c:68:87:b7:91:
92:b5:c9:0c:13:97:26:34:3d:aa:9f:e2:80:30:69:f8:46:75:
34:8b:3e:ed:d3:95:a4:4f:d5:e2:8e:74:ca:8b:0b:18:38:98:
57:68:ea:cd:28:ba:e0:87:a1:ef:61:d3:c8:19:05:98:44:c4:
55:9c:dd:02:00:27:92:be:9a:8c:d6:b9:84:d1:e7:24:ec:6d:
fd:35:81:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:22 2025 by rpki-client