Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
File: 9OcXTG90-poisK3uJRqNZDEjE_I.mft (raw, json)
Hash identifier: DCHr8QgmDHz9SJ7fl/jmilX9wtSYWu7Ge1FjCLcJljA=
Subject key identifier: 40:68:8C:BB:C5:35:C1:CE:DA:11:86:1B:DF:50:93:83:9F:26:DB:97
Authority key identifier: F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
Certificate issuer: /CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Certificate serial: 019A71B81896483733A8AEFBC1B3D11533F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
Manifest number: 16B0
Signing time: Tue 11 Nov 2025 07:01:21 +0000
Manifest this update: Tue 11 Nov 2025 07:01:21 +0000
Manifest next update: Wed 12 Nov 2025 07:01:21 +0000
Files and hashes: 1: 9OcXTG90-poisK3uJRqNZDEjE_I.crl (hash: Gls59ALwzfGygCmh0pZuBdVdGKLqRn8c+92ifLi0tSs=)
2: DSwyNAuAz2bJdfrLonxlYBob04I.roa (hash: 3+/CvQ/0iqsF5SqvqkyipksHlcWBh/rqDJFf0zM3tC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:18:96:48:37:33:a8:ae:fb:c1:b3:d1:15:33:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Validity
Not Before: Nov 11 07:01:21 2025 GMT
Not After : Nov 12 07:01:21 2025 GMT
Subject: CN=40688cbbc535c1ceda11861bdf5093839f26db97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:e7:ca:d3:8c:40:16:e7:51:87:6b:b5:8b:
0d:aa:df:f7:7e:bb:63:49:90:b8:90:cb:9c:54:fe:
ab:51:8a:a0:5b:f5:3c:b6:df:62:2a:ab:7a:55:eb:
78:6f:0c:94:d3:49:f8:71:63:b9:77:40:11:4a:82:
44:74:03:81:54:bd:a6:ca:8d:25:2a:de:52:6c:82:
aa:5c:6b:7f:f7:4d:f7:2a:f0:0a:1b:37:00:22:8d:
2f:c5:c2:77:88:26:45:f9:f2:58:5b:9c:cc:45:ef:
e0:65:a9:54:32:4a:fd:3b:31:b8:3f:0e:74:b8:77:
a1:7a:f6:92:5e:a8:c8:14:1a:c8:b3:de:0f:c4:52:
a7:3b:4b:9e:f4:84:b2:b6:08:a9:4d:13:81:82:03:
b1:b7:cb:01:2f:2d:84:c2:66:a1:2c:ff:18:60:08:
7d:d2:f2:c8:f3:c3:dd:16:e4:aa:f0:7b:82:c3:75:
ff:a2:24:fa:dc:d3:1a:0a:7f:2d:0e:e6:95:ea:74:
bb:7c:3c:fb:3a:e3:33:5d:c1:b4:27:6f:67:c3:27:
19:6d:95:f6:80:7b:8f:7f:8c:04:5d:08:a6:51:5e:
6b:67:28:d0:93:ad:68:43:30:8a:6c:92:78:b2:4c:
dd:34:89:15:9e:3f:2a:3e:48:d8:bc:82:f8:26:b2:
f5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:68:8C:BB:C5:35:C1:CE:DA:11:86:1B:DF:50:93:83:9F:26:DB:97
X509v3 Authority Key Identifier:
keyid:F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7c:56:27:c4:c5:71:43:f2:70:24:8c:60:c9:56:26:5c:75:
42:7b:c6:c2:67:a1:7d:e9:ce:4c:bc:96:fa:4c:82:87:3b:05:
b2:2b:c5:ed:ee:1b:89:b0:3f:23:15:66:dd:69:a1:cf:00:81:
e9:4f:62:0b:fd:3d:ff:13:ca:2d:e3:fa:8f:4d:eb:69:44:ed:
3f:7d:6d:af:cd:5d:33:52:02:32:c8:68:e4:fe:34:ec:b3:06:
83:fb:04:35:c2:1d:37:2f:d8:4e:c8:0c:b4:24:ec:5a:47:7d:
6a:14:2e:9e:b4:a3:a6:26:71:cb:cc:42:f5:ec:f0:d9:6a:79:
23:b2:00:4c:94:78:1a:d3:4a:bd:af:44:de:a8:33:f7:8f:ad:
c5:65:19:d2:76:f1:bd:da:ad:e2:b1:60:fa:cd:a7:6c:84:5e:
0c:02:9c:3e:08:c6:2a:82:53:4c:e5:32:7b:08:98:23:ed:7a:
0c:be:84:38:e8:fb:e5:47:50:6c:15:34:af:8a:01:a3:f0:d3:
e9:5e:2e:8b:b6:d2:a6:39:ca:69:66:7f:1c:1a:b3:52:d5:59:
93:e9:31:f2:ad:dc:37:a4:a1:53:5e:d4:89:a2:66:c6:2c:c1:
da:42:38:b0:26:de:a1:fc:3a:f0:48:93:f5:47:1c:7c:82:21:
84:09:e6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:13:52 2025 by rpki-client