Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
File: 9H1LS48bGIg-rDtJnA8EKsomsKk.mft (raw, json)
Hash identifier: awwLj0WjviH6OdRkz5Yu4u55tsZmzGppl3nHEmPMY2M=
Subject key identifier: 3A:C3:A6:90:32:5F:C7:42:CD:52:78:D4:39:4E:C2:4F:B4:E9:0C:A9
Authority key identifier: F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9
Certificate issuer: /CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
Certificate serial: 019A71B93806E2333D9ED7BE73744835D26D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
Manifest number: 0A51
Signing time: Tue 11 Nov 2025 07:02:35 +0000
Manifest this update: Tue 11 Nov 2025 07:02:35 +0000
Manifest next update: Wed 12 Nov 2025 07:02:35 +0000
Files and hashes: 1: 9H1LS48bGIg-rDtJnA8EKsomsKk.crl (hash: C1OwS/u4njpSVymZFZupws3jVdqqr4mBP1ICy4oNlwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:38:06:e2:33:3d:9e:d7:be:73:74:48:35:d2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
Validity
Not Before: Nov 11 07:02:35 2025 GMT
Not After : Nov 12 07:02:35 2025 GMT
Subject: CN=3ac3a690325fc742cd5278d4394ec24fb4e90ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9a:fa:18:84:eb:f3:df:bc:a8:d9:a5:2e:fe:
b4:a7:80:4a:cf:b1:d1:1d:ac:fa:37:02:89:39:38:
7c:36:ea:1e:08:bc:a4:6a:1f:7b:19:17:39:00:9a:
78:6f:a2:71:59:d5:fb:e7:14:aa:58:4b:4d:13:95:
19:e2:ff:3a:3d:1e:92:35:65:d3:23:0f:a5:a1:32:
28:a8:02:5e:f0:17:ef:20:21:9f:f5:40:a3:21:7e:
ee:ab:b3:a8:67:75:ee:8c:50:db:5f:fc:e3:80:0d:
58:ad:0f:7d:36:3a:08:ad:ba:12:53:d1:11:9b:d6:
7a:03:8e:9a:04:19:23:fb:75:52:0f:c1:a7:44:02:
ad:74:b7:32:9d:13:ea:f9:bb:34:7c:52:fd:3d:79:
57:e6:2d:cc:7e:4c:1f:97:d6:b7:af:dc:82:64:1f:
54:50:e2:0e:38:6d:5d:4d:61:10:7c:2f:3d:44:ca:
24:f4:4d:86:6a:4e:8e:a5:fb:12:68:22:f1:e7:b5:
b7:bd:c0:16:4e:93:c1:a4:98:bc:5f:a2:23:33:6f:
41:1a:68:44:76:87:3c:81:ed:11:41:f2:30:96:3b:
c3:b5:eb:d5:73:70:25:5c:7f:aa:89:ab:c8:9a:8a:
84:7f:49:f0:3a:27:bd:26:e7:b9:3d:14:68:4e:bc:
9e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C3:A6:90:32:5F:C7:42:CD:52:78:D4:39:4E:C2:4F:B4:E9:0C:A9
X509v3 Authority Key Identifier:
keyid:F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:96:92:1c:98:09:99:ad:d6:7c:0e:a8:e0:da:44:da:e3:65:
81:38:0a:3d:96:2b:1a:1c:3e:57:d7:5e:c3:ef:65:25:5d:8e:
e8:26:16:ad:e6:19:33:40:19:b9:13:72:86:00:5e:a8:19:e3:
7b:9e:41:f3:4f:a1:11:af:fc:47:a2:b4:ea:04:6c:e2:e0:37:
12:d0:da:de:c4:8b:35:d9:0c:d0:4b:87:43:05:1c:44:f1:86:
dd:1a:4e:60:56:a6:15:23:84:86:c0:5d:15:30:79:c7:ab:8e:
ae:56:da:13:78:dc:9b:eb:42:c0:d6:9a:55:8a:d4:d1:50:37:
66:8f:08:75:2f:51:7a:03:09:9d:2b:09:3b:34:2a:7e:22:32:
09:c2:27:dc:dc:66:a2:ec:97:7f:49:26:9d:b6:3a:50:2d:3f:
1d:88:07:c2:d7:e7:4a:00:2e:5c:c0:3a:61:50:f9:87:6c:35:
62:ea:b2:cd:53:59:18:2f:0b:14:e6:1a:74:7d:28:1b:c2:d2:
74:11:a7:79:2c:71:99:b8:b1:91:e3:3e:f4:9e:0c:83:cc:14:
b8:af:f2:ea:f5:e9:36:6f:b0:93:88:e7:a2:fd:2c:e9:60:62:
41:b3:94:7e:42:ab:b1:a0:27:2c:6d:28:b6:cb:53:85:45:2c:
73:37:09:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:42:59 2025 by rpki-client