Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
File: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft (raw, json)
Hash identifier: LN64YCKwyWIb9BvAh+hEXf+YZ82BR9s4GVil6rqDfGQ=
Subject key identifier: A0:FF:14:B3:56:E0:12:ED:57:91:09:AA:CC:60:DF:DD:C5:D1:9F:AC
Authority key identifier: 9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
Certificate issuer: /CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Certificate serial: 019A7301563FEA5153A4D90AD341ADD1C594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
Manifest number: 05C6
Signing time: Tue 11 Nov 2025 13:00:58 +0000
Manifest this update: Tue 11 Nov 2025 13:00:58 +0000
Manifest next update: Wed 12 Nov 2025 13:00:58 +0000
Files and hashes: 1: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl (hash: lYjKSBdB/fTbtMXeGueekQg0EQhlyZD21iwa6uE3GRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:56:3f:ea:51:53:a4:d9:0a:d3:41:ad:d1:c5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Validity
Not Before: Nov 11 13:00:58 2025 GMT
Not After : Nov 12 13:00:58 2025 GMT
Subject: CN=a0ff14b356e012ed579109aacc60dfddc5d19fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:03:d7:44:da:cc:32:96:03:b7:0a:bd:52:69:
6c:bc:ee:47:d2:89:98:a0:48:a7:84:81:ac:98:1f:
d9:a8:14:12:aa:7b:b5:4d:24:d1:ce:82:fd:ad:1e:
82:28:43:89:c6:93:fe:4c:57:8f:cf:74:64:71:f7:
0c:4c:fe:95:41:d9:e5:ad:01:42:be:cb:e3:72:70:
f3:49:58:0d:54:59:ed:07:ea:22:7c:fc:f3:15:d1:
51:4d:5d:13:2a:28:50:47:9c:02:8b:b4:9c:57:67:
f5:11:8f:2d:0c:4b:df:78:78:af:61:52:db:96:c5:
8b:82:68:86:37:e0:47:d3:d7:09:1e:9e:ec:82:5c:
fa:7c:f7:9c:0a:68:f6:4e:6d:6c:95:27:6d:eb:68:
44:10:cf:b3:ba:bf:58:9e:7a:00:f7:ae:24:6e:00:
3b:96:a8:15:5d:45:5e:14:46:3e:a1:ad:91:a5:0b:
6a:35:e6:0f:fd:18:65:38:63:f0:2e:15:0d:d7:2f:
2c:20:94:55:bd:0d:32:87:1b:aa:04:76:e4:76:52:
bc:37:f8:96:7f:d5:d5:f8:a2:b6:1c:13:7c:e6:0a:
a1:16:51:d3:0b:ff:00:58:67:75:4f:47:fc:f3:b7:
32:62:62:ac:ea:64:fd:0d:67:7c:de:e0:fc:ee:c9:
63:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FF:14:B3:56:E0:12:ED:57:91:09:AA:CC:60:DF:DD:C5:D1:9F:AC
X509v3 Authority Key Identifier:
keyid:9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:7a:1a:56:f4:d6:44:f9:c4:f0:11:2e:aa:89:f8:b3:26:98:
c9:00:f0:43:07:8d:29:3e:ba:c8:8d:15:73:d4:1f:8e:97:a6:
64:e7:d1:a8:2d:e5:46:e8:6d:c2:5f:21:a0:bb:a9:a1:da:05:
ef:1f:83:5d:64:1f:c1:a5:1e:9c:d6:73:2e:2a:25:b8:b9:a5:
91:7e:4d:f0:79:83:6a:39:07:79:10:b3:30:98:e0:d6:7c:ce:
7b:88:08:26:ad:d1:ee:2a:15:60:a8:20:96:08:d4:bd:1a:56:
13:59:19:7f:25:ff:b6:1e:c1:ae:c6:aa:7d:70:52:99:fc:f2:
21:2b:8c:cf:23:df:33:60:02:72:3f:79:de:88:d1:be:db:65:
6f:5e:93:94:9e:db:a9:0c:75:db:09:65:ea:48:8a:6d:89:35:
df:6b:83:a0:23:e7:7b:6d:46:14:ff:80:5b:cf:8e:76:42:7c:
bd:36:71:93:52:d8:82:7c:43:ca:b7:76:2b:32:a2:cd:80:bc:
75:01:a0:19:33:68:8b:23:6d:79:6a:80:22:fe:d9:32:44:06:
93:fd:a2:c9:49:c5:ee:f1:90:98:b8:05:af:1a:4e:9f:8b:69:
35:d2:47:17:ea:32:51:9f:bc:3c:d7:5a:7d:72:0b:f1:37:e1:
f6:2e:58:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:42 2025 by rpki-client