Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
File: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft (raw, json)
Hash identifier: 0mp2GZ5PsogCjTQ1I5AGIqsA+tQf4kHE2oA9POvLWhA=
Subject key identifier: C9:6C:D7:67:2B:FB:9C:51:DE:B3:0F:45:86:0D:2F:41:E9:B8:9A:2E
Authority key identifier: F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
Certificate issuer: /CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Certificate serial: 019A7112C803ECD47EA881323C047E500F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
Manifest number: 0353
Signing time: Tue 11 Nov 2025 04:00:47 +0000
Manifest this update: Tue 11 Nov 2025 04:00:47 +0000
Manifest next update: Wed 12 Nov 2025 04:00:47 +0000
Files and hashes: 1: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl (hash: Q5BaQkF+q3pWjPNiB6L7icFelBa/PZE6fvIYfqkGdHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c8:03:ec:d4:7e:a8:81:32:3c:04:7e:50:0f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Validity
Not Before: Nov 11 04:00:47 2025 GMT
Not After : Nov 12 04:00:47 2025 GMT
Subject: CN=c96cd7672bfb9c51deb30f45860d2f41e9b89a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:df:eb:cc:9b:79:de:e1:bc:41:f2:7a:aa:
37:c9:59:f6:c1:0c:fd:8c:82:a0:6b:6d:ea:89:e2:
6b:03:b6:e2:37:6f:25:1f:4c:6b:fa:e8:ff:33:80:
ec:83:db:05:74:50:c3:93:fe:ea:0e:e6:e6:f5:a8:
fb:eb:b9:f4:77:36:6e:22:84:40:88:a1:a0:9c:49:
24:43:a5:35:2f:d3:a6:ec:e4:65:8b:4d:13:9b:cc:
5f:31:2a:34:55:8f:90:2e:f7:17:e6:b8:0c:a0:bb:
e7:e8:ee:b2:a9:1e:9d:2d:61:03:f5:e2:77:a6:c8:
10:7f:20:f2:5b:ae:6c:bb:d8:b2:7f:98:3f:4f:f4:
94:98:7c:2c:59:ad:67:c0:c0:0d:32:0a:92:b5:12:
f0:e3:49:45:16:d8:e9:02:02:84:00:06:12:a8:00:
44:97:36:c1:3c:da:fd:23:66:da:af:d4:6e:16:78:
dd:c2:88:16:6b:92:d8:c5:93:61:eb:41:e8:0a:81:
2c:ae:94:bc:2f:20:a5:b3:87:9c:5b:62:03:0b:70:
04:dd:37:b4:85:85:9f:37:c4:94:3d:73:b4:77:35:
a6:47:71:9d:ed:ef:85:85:94:ee:98:ee:bf:d7:6a:
f2:9f:bb:0d:fb:87:d0:22:f4:c2:d8:ec:91:95:b0:
3f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6C:D7:67:2B:FB:9C:51:DE:B3:0F:45:86:0D:2F:41:E9:B8:9A:2E
X509v3 Authority Key Identifier:
keyid:F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:14:f0:d0:0e:b5:03:02:61:70:33:73:fe:e7:32:fb:8d:84:
13:b5:5a:e6:4b:1b:1b:7b:87:0b:61:c5:47:85:aa:2a:4b:45:
57:ad:d3:82:2e:da:31:b6:df:96:5a:f5:3e:f8:1d:90:e6:04:
a1:31:42:dd:a1:46:b9:1a:ec:9e:27:cd:0c:a8:22:8c:12:7e:
1a:09:22:64:0e:4a:7c:8d:b7:ac:74:d1:8b:1f:15:20:05:7a:
34:60:d8:0e:f7:00:6f:73:8f:1a:f3:09:59:79:90:e9:7d:ce:
8c:f3:b3:d0:a5:ff:f3:46:e3:c9:eb:e2:75:66:f7:8c:8f:13:
aa:6f:b8:96:9e:46:d9:85:59:06:d8:17:58:1b:05:ae:cf:0f:
a9:05:9e:65:db:df:c0:9e:d5:29:28:06:b1:65:35:02:06:46:
82:33:f9:3c:4e:ca:7a:a9:0e:c5:b4:45:5b:49:5e:29:d6:28:
d3:c5:f5:a3:d9:3c:56:37:76:6c:89:a3:5a:4c:09:01:60:27:
d2:85:e5:75:e5:11:6a:a3:eb:0f:9e:15:b4:0c:f9:32:3d:94:
f1:ad:76:67:1c:16:3c:c1:a9:ca:2f:4b:2a:be:54:28:d4:7d:
40:8a:c3:04:4d:ff:05:56:48:dd:f3:a4:84:86:7a:3a:e3:be:
61:c8:e9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:40 2025 by rpki-client