Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
File: C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft (raw, json)
Hash identifier: PH5KGdzEL/qlzYb6lvVmPlD+OxmloCG6V0TwIi6Xum8=
Subject key identifier: A7:37:B8:B3:81:E6:7C:A7:10:C3:8B:EC:4F:E4:AB:FB:4D:BF:3F:E6
Authority key identifier: 0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
Certificate issuer: /CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Certificate serial: 019A71B93E46BDACEAD09846B86D4F98C4B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
Manifest number: 16AC
Signing time: Tue 11 Nov 2025 07:02:36 +0000
Manifest this update: Tue 11 Nov 2025 07:02:36 +0000
Manifest next update: Wed 12 Nov 2025 07:02:36 +0000
Files and hashes: 1: C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl (hash: GF+J11tSmCCi5TSymC6CP2NvFDUWzYrBV+Qg1ZQDOzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:3e:46:bd:ac:ea:d0:98:46:b8:6d:4f:98:c4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Validity
Not Before: Nov 11 07:02:36 2025 GMT
Not After : Nov 12 07:02:36 2025 GMT
Subject: CN=a737b8b381e67ca710c38bec4fe4abfb4dbf3fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:31:0c:d4:56:19:ff:2d:e6:b6:1d:21:01:bd:
fd:53:89:ff:63:1c:7b:94:ad:95:e0:f3:ba:cb:ea:
71:ee:dc:a9:ea:08:aa:ff:82:dd:85:78:6c:3f:05:
e1:24:8b:f3:d2:fc:8a:63:97:f9:d2:de:b2:e7:d6:
b3:a6:aa:8a:bb:22:42:9a:05:15:71:22:0b:69:7b:
9e:b5:51:54:c0:6c:a7:86:36:4a:37:50:86:23:8f:
13:6c:8a:f2:e0:ee:0b:94:ec:dd:0e:20:28:52:8e:
57:9c:2c:b3:b8:80:b8:40:de:e6:01:f5:27:ed:d4:
34:72:08:d6:8a:8d:f8:11:a7:eb:ae:7f:b2:8c:65:
10:48:b2:d8:5a:3d:33:96:2e:cc:f1:50:e3:78:f0:
f9:ad:fe:7f:a1:3a:1f:93:f2:e2:e3:77:f6:ef:f8:
6f:02:4c:75:f5:90:9c:dd:fa:da:85:30:0c:14:d7:
63:3b:41:42:bd:6a:f2:c6:3b:56:77:26:88:56:21:
a4:cf:1b:e9:a7:2f:26:cf:77:a0:da:a3:b1:24:2c:
89:b2:40:ab:65:af:72:bd:e9:6a:e1:7b:f6:86:4d:
b1:cf:0a:e1:23:c9:fc:4a:11:06:28:4f:7f:5b:b9:
45:9d:d9:12:54:d8:6a:e9:bc:3a:f9:75:3f:46:db:
f5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:37:B8:B3:81:E6:7C:A7:10:C3:8B:EC:4F:E4:AB:FB:4D:BF:3F:E6
X509v3 Authority Key Identifier:
keyid:0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1f:eb:78:18:db:93:4a:34:12:c4:2f:a3:88:77:17:68:9a:
b4:32:e8:5f:7c:80:33:2d:99:3c:c9:70:d0:bf:0a:4f:a6:ab:
ab:cc:5e:dd:58:cc:e3:cf:d5:3d:62:06:99:af:9b:d0:e5:74:
11:e1:43:4e:0c:f0:4f:99:6e:c3:f7:6c:dd:f3:65:0a:d4:61:
4a:43:60:f7:d6:2b:aa:dd:ba:04:74:a2:28:c4:e0:ee:74:5b:
57:d2:5a:fe:ab:c5:64:00:06:98:a7:43:6a:af:53:f3:03:2c:
10:2c:97:2b:72:f4:1d:02:22:60:e9:20:dc:37:a8:25:2b:1d:
cd:8d:10:7b:40:06:ab:b2:d1:2e:52:28:ff:d3:ab:44:b0:8b:
4e:5a:99:60:c8:72:e8:0f:d6:81:d2:b9:cf:6b:1a:00:fb:20:
69:4a:ce:79:38:d2:72:80:16:ba:a8:77:54:33:af:5d:c5:e0:
42:b1:09:fd:9a:33:a9:6e:05:d1:ce:7c:95:8f:c3:3c:66:5b:
ed:a7:09:c2:d1:06:2a:6d:19:ab:5c:de:2d:e6:23:29:92:ea:
9a:67:c9:37:94:43:e0:c7:7f:86:73:d5:05:89:3e:ed:8d:bc:
07:18:6a:b4:d0:26:b8:10:d1:98:33:8e:4f:23:ea:9c:6b:0a:
52:86:44:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:53 2025 by rpki-client