Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
File: 1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft (raw, json)
Hash identifier: EjIC1QuXrV7WHXcqa1KN7Mym7W9n5ikfj+cS9UTNU8E=
Subject key identifier: C0:17:AE:50:B6:BC:B8:8E:5D:63:B8:41:AF:E1:FF:DD:4E:A2:96:58
Authority key identifier: F9:A0:3D:24:50:DC:E5:87:D5:37:55:A9:F6:B4:A4:65:6A:28:0B:4B
Certificate issuer: /CN=f9a03d2450dce587d53755a9f6b4a4656a280b4b
Certificate serial: 019A7225FB3E8DBF3CAF71924CC03E60F800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 09:01:23 +0000
Manifest this update: Tue 11 Nov 2025 09:01:23 +0000
Manifest next update: Wed 12 Nov 2025 09:01:23 +0000
Files and hashes: 1: 1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl (hash: 153PE2seHiYlTxIBwSNeSulEXXgRRcK+9JeDFn1bJoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:fb:3e:8d:bf:3c:af:71:92:4c:c0:3e:60:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a03d2450dce587d53755a9f6b4a4656a280b4b
Validity
Not Before: Nov 11 09:01:23 2025 GMT
Not After : Nov 12 09:01:23 2025 GMT
Subject: CN=c017ae50b6bcb88e5d63b841afe1ffdd4ea29658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:3c:79:46:a7:cd:00:41:24:2d:d2:0f:31:
f7:45:27:0f:8b:46:8d:97:3e:2e:eb:8d:7c:92:82:
dd:02:46:8d:cf:41:10:45:6f:15:87:b0:d8:45:8e:
9d:81:28:d6:26:56:1e:60:a7:47:1b:9d:fe:a8:7b:
25:92:0b:90:a3:ee:e0:a7:bf:65:11:be:af:8a:8e:
66:60:33:65:ba:ae:9c:8c:17:cd:ed:ae:36:14:06:
39:01:f1:98:1c:23:97:d0:27:db:45:73:4a:f8:2e:
dd:05:6a:24:6b:22:d7:ad:58:86:41:d7:54:00:2e:
d3:a6:0f:39:49:39:04:a4:fb:56:9f:bb:bb:b9:95:
5d:35:09:73:36:47:3d:91:1a:9e:c3:97:f1:50:ac:
6b:3d:42:a2:2a:cb:fc:f6:3f:8c:6d:d5:14:ec:8a:
64:45:b6:6d:82:d2:48:f5:f7:df:11:31:13:0a:7d:
26:d1:13:28:55:e1:12:06:a2:e7:e3:fa:db:55:13:
a8:e8:14:29:b5:e5:8e:ea:48:46:10:49:50:8b:1b:
ff:5e:93:26:05:80:34:06:42:e3:49:d8:c9:75:3c:
59:96:bf:e8:8f:c5:ed:00:c2:39:59:39:ad:0d:02:
2d:42:2b:92:0f:b5:8c:5a:99:fa:e2:88:a3:d7:be:
2c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:17:AE:50:B6:BC:B8:8E:5D:63:B8:41:AF:E1:FF:DD:4E:A2:96:58
X509v3 Authority Key Identifier:
keyid:F9:A0:3D:24:50:DC:E5:87:D5:37:55:A9:F6:B4:A4:65:6A:28:0B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:31:b8:a1:a1:cf:38:d0:a1:77:4f:66:cb:b8:69:1c:ba:0e:
eb:f4:9d:fd:cc:06:cb:cf:f8:3b:71:73:1e:97:20:86:ce:f5:
f0:d8:c3:20:61:62:be:2a:a1:0a:8c:ec:c5:84:19:ae:7e:5a:
c7:60:6a:d4:02:c8:d8:58:31:2d:94:2c:a8:f4:8d:e2:56:a2:
ed:a6:30:ee:3b:a5:d5:d9:fc:1a:67:00:df:31:a0:a7:6d:cc:
91:1d:de:bd:95:cf:d0:b3:2b:43:9c:e2:d2:8a:9d:4d:15:83:
e4:59:23:8f:b9:7d:f1:75:70:96:cf:ba:a3:6d:7f:ae:e0:0c:
67:ab:25:14:3a:cd:a0:c5:cb:38:71:cc:1e:1f:ee:79:55:f8:
3f:ce:7a:7a:cf:7a:56:2e:23:65:eb:b1:e5:00:2c:92:2d:1f:
8a:ee:3d:b7:a9:be:ff:f6:3a:31:01:9d:aa:98:cd:2f:d7:01:
61:f4:0c:1e:f6:93:3f:2d:d5:ff:c9:43:8a:af:89:36:c2:5c:
d4:33:c5:70:32:bf:02:5d:d3:f9:a6:c3:5f:3c:a4:35:e1:e1:
8e:45:f8:ae:11:6c:7d:ff:6d:16:30:33:2f:81:31:8d:4d:12:
5f:d2:88:f8:17:05:5a:5b:02:78:b5:47:f9:13:6b:fd:db:9d:
3b:31:8d:58
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpyJfs+jb88r3GSTMA+YPgAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YTAzZDI0NTBkY2U1ODdkNTM3NTVhOWY2YjRhNDY1NmEy
ODBiNGIwHhcNMjUxMTExMDkwMTIzWhcNMjUxMTEyMDkwMTIzWjAzMTEwLwYDVQQD
EyhjMDE3YWU1MGI2YmNiODhlNWQ2M2I4NDFhZmUxZmZkZDRlYTI5NjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4g8eUanzQBBJC3SDzH3RScPi0aN
lz4u6418koLdAkaNz0EQRW8Vh7DYRY6dgSjWJlYeYKdHG53+qHslkguQo+7gp79l
Eb6vio5mYDNluq6cjBfN7a42FAY5AfGYHCOX0CfbRXNK+C7dBWokayLXrViGQddU
AC7Tpg85STkEpPtWn7u7uZVdNQlzNkc9kRqew5fxUKxrPUKiKsv89j+MbdUU7Ipk
RbZtgtJI9fffETETCn0m0RMoVeESBqLn4/rbVROo6BQpteWO6khGEElQixv/XpMm
BYA0BkLjSdjJdTxZlr/oj8XtAMI5WTmtDQItQiuSD7WMWpn64oij174sZQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMAXrlC2vLiOXWO4Qa/h/91OopZYMB8GA1UdIwQY
MBaAFPmgPSRQ3OWH1TdVqfa0pGVqKAtLMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1hQTlKRkRjNVlmVk4xV3A5clNrWldvb0Mwcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvOTZmOTI0LTE5ZjQtNDUxMi1iZGU0
LWUwNmM4YjMwMzQ3OC8xLzEtYUE5SkZEYzVZZlZOMVdwOXJTa1pXb29DMHMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2NlLzk2ZjkyNC0xOWY0LTQ1MTItYmRlNC1lMDZjOGIzMDM0
NzgvMS8xLWFBOUpGRGM1WWZWTjFXcDlyU2taV29vQzBzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDG4
oaHPONChd09my7hpHLoO6/Sd/cwGy8/4O3FzHpcghs718NjDIGFiviqhCozsxYQZ
rn5ax2Bq1ALI2FgxLZQsqPSN4lai7aYw7jul1dn8GmcA3zGgp23MkR3evZXP0LMr
Q5zi0oqdTRWD5Fkjj7l98XVwls+6o21/ruAMZ6slFDrNoMXLOHHMHh/ueVX4P856
es96Vi4jZeux5QAski0fiu49t6m+//Y6MQGdqpjNL9cBYfQMHvaTPy3V/8lDiq+J
NsJc1DPFcDK/Al3T+abDXzykNeHhjkX4rhFsff9tFjAzL4ExjU0SX9KI+BcFWlsC
eLVH+RNr/dudOzGNWA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:45 2025 by rpki-client