Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
File: 9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft (raw, json)
Hash identifier: atJfJj+C2ldA8pWdPbx9YyHGIEEf/wMF404r8eOlhTM=
Subject key identifier: D7:9D:F9:7E:7E:EE:2A:A1:73:8D:5B:EF:91:BC:BB:97:3B:E8:E6:56
Authority key identifier: F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0
Certificate issuer: /CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
Certificate serial: 019A722611522149E87FE9EFB8696B3618AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
Manifest number: 16AD
Signing time: Tue 11 Nov 2025 09:01:28 +0000
Manifest this update: Tue 11 Nov 2025 09:01:28 +0000
Manifest next update: Wed 12 Nov 2025 09:01:28 +0000
Files and hashes: 1: 9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl (hash: EQgC3bKG4vsinsRWkP3c+VT2VNPuehyMrfwSpw8Kboc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:11:52:21:49:e8:7f:e9:ef:b8:69:6b:36:18:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
Validity
Not Before: Nov 11 09:01:28 2025 GMT
Not After : Nov 12 09:01:28 2025 GMT
Subject: CN=d79df97e7eee2aa1738d5bef91bcbb973be8e656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:9c:84:29:93:96:28:4f:f8:cc:67:35:c7:
08:07:32:e8:22:88:f9:b0:52:56:9b:ec:0a:b0:91:
df:ac:f9:b5:21:90:4f:ff:08:c7:7f:44:f8:a5:17:
b9:7c:bb:83:f7:f6:2f:92:d5:39:67:f0:5f:1d:5e:
73:d5:56:c9:45:14:09:92:17:7b:f0:92:4f:bf:b9:
ae:e8:e8:da:47:13:33:f6:9b:58:1a:29:74:16:86:
05:55:5d:05:db:25:38:90:08:57:47:32:2e:b1:c2:
0f:f8:f9:20:5c:b3:84:24:c8:8a:d1:9d:bb:16:98:
14:d5:f5:dc:c8:50:f8:8b:a2:fe:20:a9:03:bc:69:
85:8e:06:5b:b0:cc:23:ea:c6:19:ae:10:54:f2:27:
11:42:ba:40:7f:ae:96:f9:9c:1f:6c:44:36:f3:d2:
f6:e3:5f:91:19:11:db:ec:24:da:63:33:08:e9:54:
8e:5c:c5:28:92:c8:18:07:f2:a7:c7:44:bb:2a:20:
58:b9:e5:63:53:64:fc:cd:29:fa:78:cf:7d:7f:43:
be:1f:57:17:11:09:c6:1e:e6:74:05:86:4c:af:64:
f6:d8:ea:41:5f:87:02:21:52:a7:04:66:83:64:81:
8b:c4:73:b3:e4:23:32:6e:14:63:db:09:2f:cd:43:
8f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9D:F9:7E:7E:EE:2A:A1:73:8D:5B:EF:91:BC:BB:97:3B:E8:E6:56
X509v3 Authority Key Identifier:
keyid:F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8e:ac:12:cd:4f:22:01:23:f5:48:30:61:33:02:d6:3b:eb:
60:09:8f:6d:51:c5:e2:87:69:a6:fd:fb:0c:ef:fd:bf:7c:a0:
b1:6c:25:a8:44:ab:cc:52:26:b5:46:30:9f:28:51:18:83:60:
25:99:9b:c6:18:38:be:50:d3:be:f1:5a:24:2d:d9:9a:72:ce:
c0:e5:be:77:9b:a3:23:3a:03:a6:95:f3:09:b0:bd:7f:d4:6e:
b5:85:10:26:5a:ed:86:07:d6:56:d9:72:a4:28:d9:2b:b6:ac:
14:26:4f:6f:52:7f:f9:09:e8:b2:f8:fa:04:fb:75:f2:15:76:
fb:85:42:0e:13:f7:17:10:95:ed:c7:24:71:72:69:66:e5:87:
80:1a:d6:6e:3e:79:e8:36:51:86:fe:37:5f:74:47:a5:5c:59:
39:e4:e4:4d:45:29:a8:df:08:ba:ea:5f:44:15:68:c0:2b:40:
2f:06:fb:56:32:c0:a4:6e:e4:4b:14:ee:57:d8:84:47:8a:30:
8c:28:f5:d6:6c:93:ab:8c:70:bb:13:60:16:f4:10:e9:f5:7d:
56:93:38:d1:b1:0a:12:f1:4f:94:1b:d1:37:2d:45:b9:47:ed:
ff:50:be:d8:b1:ca:a0:d5:c2:73:5d:f6:00:50:a9:5f:f4:c0:
40:1d:39:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:18 2025 by rpki-client