Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
File: 2_9h1cWObqbsXPfubPNTpmOxs6g.mft (raw, json)
Hash identifier: PecM4ZWuIDXVTv4Z0JtDbK0snAhzG8/oq6bxAcqDhYQ=
Subject key identifier: F6:6F:BC:F0:22:AD:03:72:A6:E4:91:4A:E6:B0:37:15:10:C8:BA:75
Authority key identifier: DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
Certificate issuer: /CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Certificate serial: 019A7293EF8976459820C6929266752D8088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
Manifest number: 0345
Signing time: Tue 11 Nov 2025 11:01:28 +0000
Manifest this update: Tue 11 Nov 2025 11:01:28 +0000
Manifest next update: Wed 12 Nov 2025 11:01:28 +0000
Files and hashes: 1: 2_9h1cWObqbsXPfubPNTpmOxs6g.crl (hash: S6oL2ejuhT0yADRitg7iEYRBJ7p93ytvOVpYC5GjXH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ef:89:76:45:98:20:c6:92:92:66:75:2d:80:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Validity
Not Before: Nov 11 11:01:28 2025 GMT
Not After : Nov 12 11:01:28 2025 GMT
Subject: CN=f66fbcf022ad0372a6e4914ae6b0371510c8ba75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:38:87:fc:b2:bb:ff:5e:a0:1b:bb:74:c3:
f2:24:23:54:1d:25:ad:e0:16:dd:7d:9d:d6:d0:0a:
c2:eb:f2:ee:83:c8:d0:2c:31:f5:9b:c7:aa:90:93:
5b:ca:e8:b0:5d:ed:ba:02:d2:5d:ac:4c:9d:de:e5:
73:95:fd:c3:e5:bc:1d:e5:71:38:1d:8b:74:3e:0d:
98:42:77:4b:fa:bd:bf:ce:19:65:2d:e3:0c:03:1f:
e7:fa:e5:1a:e4:7a:65:45:15:53:40:cf:d6:c1:67:
ca:d4:df:a9:e0:5a:91:41:c1:fb:eb:ee:77:32:85:
de:25:23:95:a1:18:ae:f9:1c:ed:2c:41:93:d9:23:
c6:0d:e7:77:04:2f:fe:7a:72:23:0f:bd:26:5c:b1:
10:08:2c:63:49:da:dd:bd:47:45:4a:6f:a5:29:0e:
22:b5:09:70:9f:c5:b3:44:7e:cf:1d:20:6a:10:15:
65:b4:36:1a:12:da:2c:b3:5f:2c:83:7d:06:77:c0:
61:73:5e:3e:36:29:a1:e7:ff:fc:11:47:65:ab:ae:
94:b7:66:13:8d:b3:80:cc:64:c4:fc:fd:15:8d:2a:
d1:99:93:dc:70:cb:ba:32:25:91:96:c0:56:8e:e0:
a4:a6:78:9d:e4:de:43:22:97:81:25:a8:2c:37:79:
64:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6F:BC:F0:22:AD:03:72:A6:E4:91:4A:E6:B0:37:15:10:C8:BA:75
X509v3 Authority Key Identifier:
keyid:DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:55:ef:64:a5:f0:11:04:bb:11:a9:b5:af:90:84:9a:f2:e3:
d8:ba:af:10:cf:f3:8a:ae:c5:18:3a:be:32:06:e1:01:54:7d:
57:29:db:96:d6:5f:f8:74:f5:12:ce:83:24:6a:19:75:67:aa:
ee:69:ac:51:48:08:cb:c3:61:ad:6d:2e:a6:02:b1:4f:71:30:
64:4b:9f:d6:a8:82:a3:74:8f:34:e2:db:e0:83:13:e6:59:05:
cc:9f:b9:c7:00:a5:81:04:ee:9a:55:f6:86:e9:b7:34:07:c7:
2c:9c:df:26:9e:ca:6c:59:d7:8a:99:30:62:1f:eb:7b:37:89:
32:ff:32:bd:55:2c:bc:25:c1:a7:20:3e:ca:52:30:86:20:d7:
d7:93:77:dd:ad:35:29:e8:6f:13:71:a9:50:8f:2d:f0:e1:34:
af:8c:21:b4:2d:92:ba:08:49:39:78:3e:0b:96:fa:6a:ce:a5:
8b:1b:b1:2e:88:fa:ce:59:ed:cd:f7:64:cb:77:83:a0:f2:e9:
96:c7:c6:b5:57:52:fb:c2:19:5e:e7:56:c0:e9:e0:a7:cb:20:
ba:83:db:58:86:d1:42:58:50:cb:73:70:a3:07:b0:e5:33:ee:
4c:97:c6:8a:6c:67:08:6b:43:5f:4d:17:24:a4:32:1c:72:23:
39:bf:2f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:03 2025 by rpki-client