Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
File: Eht9Dci8pP9OdTa9OANAJCLo4mw.mft (raw, json)
Hash identifier: a85ni9976x6OPycNcHtNzhyjmOSe4f1PkAmEkqaq08A=
Subject key identifier: FF:66:BE:6A:36:12:0A:36:A5:7F:86:EA:80:41:E6:82:43:98:20:DA
Authority key identifier: 12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
Certificate issuer: /CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Certificate serial: 019A706E2B2CF9A7512B1FF298694C4C1580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
Manifest number: 0A9D
Signing time: Tue 11 Nov 2025 01:00:59 +0000
Manifest this update: Tue 11 Nov 2025 01:00:59 +0000
Manifest next update: Wed 12 Nov 2025 01:00:59 +0000
Files and hashes: 1: Eht9Dci8pP9OdTa9OANAJCLo4mw.crl (hash: Ek2DlrgvKvIzoRY1bE6YwcSYQgItQG7CC6QNPBI2rWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:2b:2c:f9:a7:51:2b:1f:f2:98:69:4c:4c:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Validity
Not Before: Nov 11 01:00:59 2025 GMT
Not After : Nov 12 01:00:59 2025 GMT
Subject: CN=ff66be6a36120a36a57f86ea8041e682439820da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:50:ef:45:16:ea:0d:39:7a:e2:e3:fd:a7:
c0:f7:ee:0f:06:b6:15:b4:d4:43:98:02:84:8a:06:
2e:0e:79:70:f9:72:e4:f8:7a:20:cc:42:c1:c4:02:
02:85:38:ce:1d:07:10:ad:74:53:62:a3:9e:5e:5a:
83:1c:3e:d5:a2:7d:8e:04:11:8a:c2:a5:5b:67:1b:
ed:50:b9:0c:94:78:63:6c:c1:90:fd:bc:d7:5d:28:
f5:09:36:f0:39:39:68:e9:c8:62:58:f0:4d:51:16:
88:d4:f8:cd:1a:5e:38:d1:61:29:ad:ac:1b:94:42:
0e:ba:b0:a8:4f:11:1f:92:7b:37:61:49:63:b9:d7:
dd:33:f6:0f:4a:bb:eb:41:db:21:be:72:0f:3f:e0:
94:01:bd:f3:50:89:2f:33:6c:27:46:74:8d:fe:b3:
9b:43:f9:87:58:7c:6e:8a:af:98:1e:18:a4:fb:f7:
cb:e5:d6:71:33:32:30:0e:b3:18:be:95:ab:97:45:
32:e0:16:95:f2:91:72:c8:14:37:c6:51:10:f1:c1:
16:15:4b:88:18:a0:99:31:82:54:85:0d:a8:28:74:
af:3a:1f:5c:54:8f:92:c9:b1:de:29:2d:75:d7:da:
2a:de:02:b7:bd:2d:f1:ef:89:ce:41:67:62:0c:4f:
48:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:66:BE:6A:36:12:0A:36:A5:7F:86:EA:80:41:E6:82:43:98:20:DA
X509v3 Authority Key Identifier:
keyid:12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:09:b6:ff:9a:47:fa:4a:3b:ba:db:8f:49:19:1f:db:cd:24:
e7:50:83:ec:de:eb:35:2e:e5:b8:a3:24:14:05:ec:79:da:f3:
c0:43:3c:2c:30:35:70:3d:51:09:ed:fe:12:0c:85:86:53:8a:
1c:0b:f4:fc:48:8a:2d:af:56:96:9c:62:91:c9:9f:13:bf:9d:
50:fd:1a:69:b3:12:a1:cf:e0:20:29:5a:0f:9d:68:44:6e:a4:
7a:21:61:f6:ff:ca:d8:b8:06:e6:43:6a:89:28:29:c4:01:22:
4d:91:d4:3a:4c:23:02:cc:da:bd:8e:b4:04:df:6a:6f:81:a0:
00:7a:1f:af:61:f5:38:77:3a:1a:da:1e:89:0f:c9:81:27:d9:
79:f6:a1:2a:9c:af:91:c5:e1:e1:11:e7:b8:52:43:58:66:2c:
9f:71:a9:cc:c1:81:bb:94:8c:01:1d:d0:23:f5:e4:5f:43:1c:
06:6b:62:e1:ca:2e:b8:b7:22:49:3b:73:75:46:6b:e0:61:de:
9e:64:80:25:f2:93:23:cc:5e:c4:0c:67:a4:b6:73:2e:ba:9d:
b7:b0:67:50:6d:f4:35:bc:d3:2c:ee:f5:9f:32:81:55:1d:89:
33:be:4a:f6:47:7d:02:37:f1:5e:f6:e7:b2:7e:c7:44:47:6a:
7e:b8:08:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:19 2025 by rpki-client