Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
File: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json)
Hash identifier: ocZSw0PNUT33hPw9o6W6CqvjZw1ywa+q80G16WywX3Y=
Subject key identifier: 62:F2:85:8D:D3:01:FE:3B:21:5D:CF:A6:0B:8C:09:BF:CB:89:8C:29
Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
Certificate issuer: /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Certificate serial: 019A729409C1ADD8248F6099CA0947EE952D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
Manifest number: 12F1
Signing time: Tue 11 Nov 2025 11:01:35 +0000
Manifest this update: Tue 11 Nov 2025 11:01:35 +0000
Manifest next update: Wed 12 Nov 2025 11:01:35 +0000
Files and hashes: 1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: nALZqwlvh3SKsD/bPbxsQjBxhGAse22fTzJymF6JtA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:09:c1:ad:d8:24:8f:60:99:ca:09:47:ee:95:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Validity
Not Before: Nov 11 11:01:35 2025 GMT
Not After : Nov 12 11:01:35 2025 GMT
Subject: CN=62f2858dd301fe3b215dcfa60b8c09bfcb898c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4b:56:7f:dc:c8:6f:f1:8a:45:fd:c0:c2:73:
d3:a5:19:03:57:9a:52:d8:c5:26:dc:18:28:d1:2f:
76:74:19:57:37:87:97:62:0d:b7:d2:3c:55:46:6c:
9a:b0:a1:f1:82:07:5f:ab:1e:b1:0f:7a:55:2a:a6:
5c:4e:ff:8d:ef:79:b0:bc:ca:1f:44:cc:5d:b6:51:
91:54:5d:63:25:23:ff:ad:5f:70:bc:ff:32:7f:74:
b6:25:3f:97:2a:c0:d7:1a:11:83:26:cb:31:eb:61:
36:d2:7f:ac:fb:de:f5:c8:79:ec:b7:e3:d8:96:3d:
e8:08:fc:91:56:77:12:23:b0:2e:e6:15:c1:c5:72:
f0:c8:52:e1:c3:90:4f:88:1b:fe:85:4d:b5:48:25:
7a:a6:c9:d2:a6:a9:16:48:54:b8:78:3c:7b:51:a2:
fe:cb:59:41:62:58:11:45:e5:25:7d:73:d6:38:b0:
e8:93:f7:8c:b8:8e:f6:6f:2c:d9:a7:06:7d:94:96:
8a:09:8e:e6:78:22:97:1b:5c:96:b2:da:4c:de:d3:
88:e4:17:a0:ea:5e:7b:0f:26:3e:9c:61:78:88:8b:
ac:28:a0:b6:9f:21:97:73:d8:72:cb:01:0b:fe:cd:
70:e2:1d:e5:9b:29:19:48:64:65:34:ae:76:cf:5d:
c1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F2:85:8D:D3:01:FE:3B:21:5D:CF:A6:0B:8C:09:BF:CB:89:8C:29
X509v3 Authority Key Identifier:
keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:c5:45:4f:7e:9a:24:4e:d5:36:5a:af:cd:10:55:22:ca:6d:
64:50:a4:87:70:68:5d:c6:ac:69:38:27:c2:02:1b:d4:1a:75:
6a:b6:bd:df:90:27:b5:6a:9c:34:71:38:30:40:fc:e3:c8:e2:
b7:ef:85:87:f5:29:58:5f:0d:0b:96:1f:c4:ea:7b:4b:6a:41:
b5:4e:1d:60:b0:64:ad:4b:7e:38:15:0a:2c:f3:ae:00:a2:87:
43:a2:e8:7a:f5:bf:06:fb:e0:71:6c:a1:6a:70:97:52:82:28:
4a:33:16:87:fb:40:b0:11:3d:47:5f:d2:12:8d:f5:87:31:76:
5e:e0:fe:97:f5:a3:86:56:d0:8b:a9:33:e8:11:9b:98:de:81:
77:05:f4:e8:ef:96:9c:34:8e:d1:8a:76:e9:6e:e9:b7:0f:25:
96:dc:17:9e:b6:19:8e:f8:64:5d:42:47:de:0c:53:41:bc:39:
9e:39:e3:96:38:5f:6a:00:09:3c:46:4b:33:de:c3:9a:65:fd:
fa:22:7a:d5:f0:45:d3:5b:b9:d3:6b:90:ec:d9:08:be:9a:f5:
2c:47:c3:c4:a9:e9:e4:ff:5e:c5:dc:ee:f1:19:08:81:2c:c9:
07:67:a1:ca:13:aa:fa:9e:47:0d:7e:73:68:30:8e:3e:81:e6:
d8:b6:73:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:54 2025 by rpki-client