Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
File: ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft (raw, json)
Hash identifier: ByS+Kv8OjpXTW6Z/CamNa5Cy/c45gMB/FC6nNwpZhpI=
Subject key identifier: EE:5F:6D:FC:9D:B5:21:D7:88:66:B1:7F:BE:62:5C:A3:BE:74:46:F7
Authority key identifier: 7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA
Certificate issuer: /CN=7dff71655fde58db046b835f39ec10e2d4f7abfa
Certificate serial: 019A71B8628BE18C7DBCF1E05425B2630D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:40 +0000
Manifest this update: Tue 11 Nov 2025 07:01:40 +0000
Manifest next update: Wed 12 Nov 2025 07:01:40 +0000
Files and hashes: 1: ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl (hash: hOLHjKawQaL8EyI39d3ewFhkviQnapw0/TdxeBKVbP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:62:8b:e1:8c:7d:bc:f1:e0:54:25:b2:63:0d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dff71655fde58db046b835f39ec10e2d4f7abfa
Validity
Not Before: Nov 11 07:01:40 2025 GMT
Not After : Nov 12 07:01:40 2025 GMT
Subject: CN=ee5f6dfc9db521d78866b17fbe625ca3be7446f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:51:77:1c:b5:80:af:19:40:41:c5:80:8a:
1f:40:41:e4:15:14:bd:86:40:28:b3:2e:f4:52:a7:
ca:ec:ad:c4:b3:91:b8:78:a7:c9:01:71:40:00:30:
b3:a1:cd:1b:e7:56:ea:0d:e9:3d:d7:42:6b:7e:cc:
25:27:78:ff:9f:23:f1:dd:16:56:42:34:5e:63:7b:
e5:47:8e:57:e3:f2:36:05:18:0c:49:e6:17:f7:3b:
3e:00:0f:22:16:13:ef:c8:28:29:6c:1e:b8:3d:ce:
95:ad:c3:f4:d6:41:62:38:9b:ba:14:26:b2:d8:1d:
44:e9:0f:db:81:d0:a8:23:b7:ff:55:ea:a9:07:6d:
a0:2f:56:08:77:82:c2:27:18:4c:27:ba:8b:df:14:
fb:e8:cb:90:f0:12:86:18:ce:30:5f:56:8d:69:f8:
10:6c:50:17:0e:7b:e0:d3:fa:aa:96:3b:c9:59:73:
23:b6:3c:10:b0:0a:7b:21:ad:d4:3d:4b:fb:e7:3d:
15:9a:e1:73:a2:16:45:95:fb:1d:d4:27:c1:61:2c:
56:0d:83:39:2b:76:99:60:07:84:aa:f9:bd:96:b6:
4e:06:a5:b5:9d:13:78:2e:02:e9:b7:6a:73:ed:68:
01:bf:c1:56:52:d6:01:8d:6b:ba:fb:ac:d2:b2:c1:
ae:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5F:6D:FC:9D:B5:21:D7:88:66:B1:7F:BE:62:5C:A3:BE:74:46:F7
X509v3 Authority Key Identifier:
keyid:7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:2e:d5:c3:f3:89:09:74:5d:e9:30:3b:3a:9e:d1:92:78:bd:
68:c5:38:3f:81:51:3b:d7:b2:50:05:d7:89:b7:3f:bc:b4:b9:
a0:8b:a5:f9:fb:95:82:89:3a:79:09:85:ef:b3:07:63:e1:f5:
bb:1d:bd:b1:54:9e:08:55:1f:a5:2d:12:88:d6:7e:2c:40:c9:
bb:6e:10:84:84:8b:6f:27:10:2b:4c:6e:2e:a4:13:d4:69:ba:
81:e4:c9:5f:b9:d7:13:ae:53:61:a9:8a:f6:7f:b6:d8:6c:c1:
26:ad:5a:ea:30:6a:13:c5:4a:c7:99:1b:14:a7:11:37:a0:07:
a2:9c:84:62:36:31:19:23:31:cf:48:d8:84:11:3f:73:c7:a1:
61:f5:f7:7a:15:e2:55:f9:38:08:73:0a:63:06:d0:e9:37:64:
6c:bd:c7:98:5c:af:af:d6:a6:12:f5:0f:3d:81:b3:89:b6:c1:
6c:02:0f:2a:2b:87:4a:cf:aa:97:60:69:89:24:0d:a8:20:cd:
ba:f2:d9:cf:a9:15:89:84:69:a3:18:5a:a4:b8:3a:1f:1a:df:
d5:e2:cc:6d:89:62:65:50:8d:57:dd:dd:6f:4c:f9:ef:8a:c9:
c7:1a:d1:ec:39:4c:40:d9:8c:e7:25:e0:28:f2:56:17:9f:18:
de:ae:37:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:13 2025 by rpki-client