Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
File: 1-9F4zWAolpi3zZXd17FpF0kLRAc.mft (raw, json)
Hash identifier: YSUkr36qniY4kWB2OasXUCh0ahjVHARtVXN7gRZUmXw=
Subject key identifier: F5:A5:73:C3:CE:BD:5D:DB:80:43:81:9C:ED:E3:83:C8:D6:CD:5A:F6
Authority key identifier: FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
Certificate issuer: /CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Certificate serial: 019A71B8699F0AC352CBF229E62099CDF804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
Manifest number: 0BED
Signing time: Tue 11 Nov 2025 07:01:42 +0000
Manifest this update: Tue 11 Nov 2025 07:01:42 +0000
Manifest next update: Wed 12 Nov 2025 07:01:42 +0000
Files and hashes: 1: 1-9F4zWAolpi3zZXd17FpF0kLRAc.crl (hash: C5AAg9TNB5GRhdIga5KD0/HO/0ivIGBsl/eydZXzqlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:69:9f:0a:c3:52:cb:f2:29:e6:20:99:cd:f8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Validity
Not Before: Nov 11 07:01:42 2025 GMT
Not After : Nov 12 07:01:42 2025 GMT
Subject: CN=f5a573c3cebd5ddb8043819cede383c8d6cd5af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:7a:0e:f0:dd:6f:f0:7e:d5:b9:ab:77:ae:
9b:c7:57:82:e7:07:20:a4:94:ff:61:05:2d:a6:b3:
8b:02:e7:93:43:3d:93:3a:fb:9e:8c:76:2c:1f:7b:
58:4f:08:a7:9b:01:e3:f2:65:6c:61:3a:44:81:06:
fa:44:34:ab:86:2d:70:1f:a0:2d:ff:97:c3:32:1b:
04:ba:d4:39:7b:df:02:29:b1:bb:4d:d1:56:f8:42:
26:c1:2f:21:e1:da:64:7c:f2:d8:de:7f:8d:81:6c:
94:81:cc:ab:ce:05:6d:8f:f7:7a:77:95:1b:95:32:
8d:c1:88:7d:89:c6:0d:d3:41:92:cf:5e:a2:d1:26:
9b:1d:6d:e8:93:ea:10:96:cd:5f:a8:b9:b6:3e:ff:
52:c9:49:13:96:8e:50:9b:c4:e3:16:6e:97:e0:b6:
5a:5f:44:23:04:02:e3:90:9d:2d:20:4a:8b:3c:de:
b6:c8:bd:10:46:cc:9c:2a:ad:c6:36:e4:8d:12:e5:
e0:6f:85:90:34:72:e3:7a:ce:ce:c0:fb:ee:3c:fd:
a9:36:de:eb:e5:17:ca:62:db:22:67:e8:56:3d:54:
42:12:1f:85:5c:05:6f:e9:7a:30:f3:56:bb:d2:85:
73:d2:50:68:e0:63:ee:8c:b5:3b:ec:89:19:9a:68:
c3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A5:73:C3:CE:BD:5D:DB:80:43:81:9C:ED:E3:83:C8:D6:CD:5A:F6
X509v3 Authority Key Identifier:
keyid:FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5e:78:c4:8f:de:4a:e2:9c:73:69:1b:71:cc:08:f2:a5:de:
c6:84:23:95:d5:1b:f7:f1:8c:34:a9:8f:cf:fd:0a:3e:b5:66:
35:1e:3e:db:53:f6:b5:21:8a:62:c9:f2:52:a2:07:04:dc:b6:
26:95:fc:72:34:2c:00:ca:86:81:cb:59:aa:92:b0:0a:77:ac:
bd:0c:11:d0:29:18:04:55:e4:61:4e:7c:64:1e:42:b8:32:8f:
f7:d4:f8:85:7f:ff:d3:14:b5:9c:73:be:b1:34:f0:a0:89:45:
09:24:d7:73:7d:74:bd:fa:03:37:ef:70:51:58:ec:fe:c3:9d:
d1:df:af:2e:f2:26:6d:fb:1d:81:b8:a9:eb:2f:89:77:7d:cc:
64:ea:09:13:fc:73:ed:30:24:ba:46:da:c3:d6:8a:73:14:a0:
70:d5:20:47:fc:d6:61:1b:fc:f5:cc:ed:cf:64:39:62:bb:37:
bd:3e:d5:5f:9a:85:d8:0c:f6:df:d5:ec:6a:6c:6b:b8:f0:11:
6c:c5:13:ee:ba:e8:65:0c:4d:ad:a3:b2:25:64:1b:47:c3:05:
85:ed:99:f2:b6:0a:19:bc:40:a2:f8:8f:47:cc:f1:7d:62:00:
cb:76:1e:96:e3:8c:0f:7a:10:4a:5e:d1:66:8f:4b:a7:d5:a8:
67:9b:e2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:57:59 2025 by rpki-client