Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft
File: d6ssFiF5lXMJnEAq6R_8V5ada5s.mft (raw, json)
Hash identifier: B8fy8Uo2IuX/xotYEwUZ3gfJ3UQTm3yboVX1il+4W+8=
Subject key identifier: F0:EC:4A:14:95:D4:61:AE:78:AE:06:D1:7C:87:CA:73:E3:A7:E8:F1
Authority key identifier: 77:AB:2C:16:21:79:95:73:09:9C:40:2A:E9:1F:FC:57:96:9D:6B:9B
Certificate issuer: /CN=77ab2c1621799573099c402ae91ffc57969d6b9b
Certificate serial: 019A71EEB2DC120AF50D4316E6D7F0D1F54D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6ssFiF5lXMJnEAq6R_8V5ada5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft
Manifest number: DB
Signing time: Tue 11 Nov 2025 08:00:59 +0000
Manifest this update: Tue 11 Nov 2025 08:00:59 +0000
Manifest next update: Wed 12 Nov 2025 08:00:59 +0000
Files and hashes: 1: d6ssFiF5lXMJnEAq6R_8V5ada5s.crl (hash: ixe394Iq/UdtyXJweVVp2nVUoyzbWGYGUmgfTAs6d1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6ssFiF5lXMJnEAq6R_8V5ada5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b2:dc:12:0a:f5:0d:43:16:e6:d7:f0:d1:f5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77ab2c1621799573099c402ae91ffc57969d6b9b
Validity
Not Before: Nov 11 08:00:59 2025 GMT
Not After : Nov 12 08:00:59 2025 GMT
Subject: CN=f0ec4a1495d461ae78ae06d17c87ca73e3a7e8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:8d:2a:26:c4:e4:d2:31:58:33:4e:e4:e4:
1c:d8:5a:a1:bf:9f:0f:e4:e6:78:41:8d:20:a7:cc:
63:5e:e2:1a:ca:a9:73:d0:a0:bc:da:da:20:21:a5:
43:c5:c0:c9:d8:f3:d6:65:50:5a:fb:64:52:5d:7a:
49:0b:4c:fb:4a:81:9a:e5:0f:77:47:58:a2:33:c3:
0d:43:51:41:66:8d:90:0b:9a:08:39:2b:d7:48:17:
b6:14:46:9f:cc:2a:14:e1:f6:03:32:a5:49:30:8b:
7c:f7:44:fd:b1:05:70:3a:ef:1d:a1:90:1e:bc:b4:
ed:58:db:dc:49:2f:47:17:e3:0a:e8:ed:4d:1f:c6:
d9:31:17:76:7a:7f:9e:1d:8d:11:3a:1e:5f:da:fb:
59:e5:db:6d:97:df:9d:6e:f6:ef:10:6a:93:64:28:
34:b6:44:b2:03:ba:ff:e4:b1:1c:1a:cf:d6:e8:da:
75:cb:77:da:a3:12:6f:28:74:87:c4:f9:c5:20:a9:
3b:69:20:5d:69:57:cb:09:e6:fc:95:46:60:04:38:
b6:5a:b3:59:b5:e5:55:94:e0:ff:6b:b2:b2:97:18:
01:07:02:b5:1b:33:ab:c2:d2:1c:c9:bd:13:08:5a:
6e:ab:ea:90:14:24:e7:a2:48:af:29:b0:7c:8e:a0:
51:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EC:4A:14:95:D4:61:AE:78:AE:06:D1:7C:87:CA:73:E3:A7:E8:F1
X509v3 Authority Key Identifier:
keyid:77:AB:2C:16:21:79:95:73:09:9C:40:2A:E9:1F:FC:57:96:9D:6B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6ssFiF5lXMJnEAq6R_8V5ada5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:50:b9:1f:ca:98:cb:2e:f4:e2:16:83:63:35:8f:65:c1:59:
02:f0:27:90:f3:75:56:9b:18:c7:0d:4a:c9:25:79:56:be:7c:
cd:00:0b:b3:4c:d0:85:e0:bf:03:a5:c0:a1:5d:42:0f:98:f1:
d8:ff:9a:23:6b:a8:08:e4:6d:3a:35:26:72:2e:3e:52:38:81:
41:e2:72:e7:1d:c6:bd:8a:d5:d3:b1:e5:13:2a:c3:0d:8f:d4:
80:a6:6b:dc:67:6c:94:bd:58:e0:89:e6:63:1a:9d:75:12:49:
40:2a:df:65:08:e8:0d:43:87:77:a4:e1:bb:07:f5:1a:ac:ca:
88:b7:5d:aa:7e:b8:4b:f6:bc:9e:e6:4b:5d:cc:e1:44:87:c5:
d0:3c:26:17:8a:8d:e3:30:94:8f:ae:47:d0:71:a1:3a:04:cf:
59:4a:51:29:82:14:d8:32:5d:fe:53:ba:b0:6d:26:e0:76:32:
fc:62:64:c2:3e:db:59:06:80:ae:95:af:2c:76:3e:75:73:f6:
90:ff:dd:45:de:20:25:fd:8c:9f:2e:06:81:3a:bc:e9:b4:bb:
0d:bd:8a:2e:a8:0d:a2:27:16:b3:df:61:c4:0a:64:13:2c:e8:
07:a2:1d:c8:51:ca:f3:41:81:b4:c4:20:7d:b2:e2:3c:57:87:
7c:cf:63:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:50 2025 by rpki-client