Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
File: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft (raw, json)
Hash identifier: 3DIuq718aDx2LMcAzZWh9EhH4adYgikj6zuoFw8h3cg=
Subject key identifier: 64:0D:CF:78:EE:AC:18:5D:23:5E:DE:C0:59:2E:9D:D2:CD:F0:FC:9A
Authority key identifier: F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7
Certificate issuer: /CN=f6e7d811954993a953b7948dd06765cbc090dcf7
Certificate serial: 019A7293FCA8BD6C3742343703313B26D9F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
Manifest number: 0337
Signing time: Tue 11 Nov 2025 11:01:32 +0000
Manifest this update: Tue 11 Nov 2025 11:01:32 +0000
Manifest next update: Wed 12 Nov 2025 11:01:32 +0000
Files and hashes: 1: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl (hash: PQ0laM4QOW5s4jLUIA7ybZNWi1MjaF/QlEGZ4f5OZdA=)
2: AnWhlH6XKqUu4_GnJM2nKdO071s.roa (hash: /ulEE3dLzdrGEic+8DMTJn8iVbu0rFN7I+VggC4+dZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:fc:a8:bd:6c:37:42:34:37:03:31:3b:26:d9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6e7d811954993a953b7948dd06765cbc090dcf7
Validity
Not Before: Nov 11 11:01:32 2025 GMT
Not After : Nov 12 11:01:32 2025 GMT
Subject: CN=640dcf78eeac185d235edec0592e9dd2cdf0fc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:21:55:cd:f1:14:a8:dd:4a:1d:d0:80:47:
8f:37:73:08:21:12:20:ce:9b:7f:51:bb:0b:27:ce:
27:9a:e3:b4:77:99:56:ec:a8:e7:ae:10:2f:5c:a2:
95:68:b8:da:c1:0d:a7:bd:4d:9e:94:30:45:2a:7f:
3f:ce:64:8b:a4:50:e1:0c:85:42:06:fd:7d:69:b0:
8d:bd:cb:4c:2c:37:c8:47:93:13:28:45:c9:5f:35:
7f:55:27:05:9a:ca:6b:54:27:a8:12:01:fe:c2:de:
ea:95:0e:10:86:c4:88:3b:32:63:46:85:32:5b:88:
0d:e9:64:97:fb:b6:77:43:25:dc:e5:6b:9d:83:c9:
75:1f:c8:3d:19:71:b0:a1:a1:5a:3a:7d:45:e6:76:
27:7f:01:06:71:6d:82:1f:c2:1c:14:d8:a2:6d:a8:
29:44:5f:ad:d8:49:40:01:51:82:dc:22:35:25:15:
2b:a1:6a:9b:2e:37:4d:34:98:ec:9a:1b:33:09:90:
97:03:48:d3:a0:1f:12:d3:9a:f9:c1:ea:d1:85:21:
9a:0c:d3:63:19:06:63:55:1e:5e:99:ad:e0:b7:50:
47:46:eb:07:3f:2f:c6:1b:0d:ed:e9:0c:5f:b7:18:
98:6e:27:09:bf:b0:a7:94:af:74:cf:07:8a:cd:89:
31:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0D:CF:78:EE:AC:18:5D:23:5E:DE:C0:59:2E:9D:D2:CD:F0:FC:9A
X509v3 Authority Key Identifier:
keyid:F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5a:3c:3f:94:27:33:16:99:c3:9e:6c:da:a8:00:86:6b:cc:
c5:96:8d:0d:92:c4:3c:ec:5d:2e:3f:db:cb:e5:b3:88:88:99:
cc:6c:8b:9c:8e:71:9e:14:d0:41:e3:e8:f7:95:5c:ef:39:c1:
08:c3:71:14:a7:38:fe:58:44:10:d7:49:c1:ee:d4:2e:83:f5:
93:c0:9e:30:13:02:9a:1c:ee:e2:38:d2:80:4f:9e:f0:4e:d2:
2c:26:7c:e9:b0:4f:6f:32:c6:ea:79:8c:32:69:e7:08:0d:44:
0c:48:92:ad:50:d0:15:c9:35:1f:9a:cd:d5:03:ce:f8:50:88:
7d:ed:50:e8:30:61:6f:1c:b8:65:f2:04:a6:1f:6a:3b:b9:b5:
c9:87:72:03:cc:09:9e:88:04:aa:3e:7e:4c:2a:b9:5b:e1:f8:
41:22:77:6a:df:2e:6b:bb:5e:d0:87:3f:25:e3:10:59:f4:7f:
4a:e0:05:b7:b9:51:4a:b9:b9:9c:9d:17:59:a0:a1:70:a8:30:
ed:9d:46:76:a1:0e:39:2c:fb:da:23:7a:88:97:9a:13:c9:5d:
e7:f0:c3:72:cf:c3:f1:5b:d0:3f:e4:8a:0f:4a:9f:fd:bc:70:
88:26:f4:15:a3:66:76:87:1b:40:32:c0:61:8e:2d:00:0e:c8:
5d:49:8b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:21:31 2025 by rpki-client