Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
File: a1a9UK-T9GN-LAfi7EAya8ZABSc.mft (raw, json)
Hash identifier: KwnebJNXkgSSMEEXmLNDZP+2hMk8UwABM9U86kowtNw=
Subject key identifier: 52:59:D4:B5:3F:CC:06:71:AC:5B:36:58:34:F4:A3:1B:59:FE:0A:0D
Authority key identifier: 6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27
Certificate issuer: /CN=6b56bd50af93f4637e2c07e2ec40326bc6400527
Certificate serial: 019A71137654FBA31E534DE451DD1C669B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
Manifest number: 037B
Signing time: Tue 11 Nov 2025 04:01:31 +0000
Manifest this update: Tue 11 Nov 2025 04:01:31 +0000
Manifest next update: Wed 12 Nov 2025 04:01:31 +0000
Files and hashes: 1: a1a9UK-T9GN-LAfi7EAya8ZABSc.crl (hash: 02syDV0mCG6cGpkMm0q5Vls2aWfHxp7JnLkA/DyrfYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:76:54:fb:a3:1e:53:4d:e4:51:dd:1c:66:9b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b56bd50af93f4637e2c07e2ec40326bc6400527
Validity
Not Before: Nov 11 04:01:31 2025 GMT
Not After : Nov 12 04:01:31 2025 GMT
Subject: CN=5259d4b53fcc0671ac5b365834f4a31b59fe0a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:17:3b:60:43:84:3d:af:d4:aa:69:82:db:
5f:96:65:6c:03:b0:06:ab:4e:55:9b:55:83:3e:49:
8d:8a:3a:0c:44:c1:ad:cb:23:81:b1:a9:8c:95:87:
41:26:77:98:f6:e3:7b:42:45:39:ca:59:ea:66:ac:
aa:dc:95:9c:a4:af:8b:e4:c2:49:f2:16:de:fa:85:
b6:8a:7c:e0:6f:11:46:83:57:54:40:38:5c:6a:9f:
fd:65:7e:71:68:60:a2:81:65:a7:d6:35:b5:84:5d:
af:d7:a4:2c:2c:54:f0:65:11:4f:ff:70:c7:ff:41:
0a:4c:d6:32:d0:78:81:44:0a:9b:cb:39:ef:41:2b:
5f:72:77:32:0c:0a:a8:0b:35:1a:d3:b5:98:f2:3e:
0a:8d:15:a9:a0:93:21:f2:a0:2f:71:3b:5d:47:0f:
cb:25:a7:28:4e:76:8b:35:05:9f:74:53:30:b6:27:
59:81:2e:9f:2b:76:fc:aa:40:77:b4:44:74:78:a7:
cd:b4:1f:dc:89:2c:33:ec:fd:0d:a7:f5:e8:ae:39:
aa:53:ae:90:dc:2a:cc:58:24:d4:70:52:e4:47:37:
16:3c:81:de:92:9f:99:cf:45:3c:19:37:b8:ba:d5:
f6:08:54:97:c7:99:15:ad:61:65:85:cd:13:a2:c8:
2d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:59:D4:B5:3F:CC:06:71:AC:5B:36:58:34:F4:A3:1B:59:FE:0A:0D
X509v3 Authority Key Identifier:
keyid:6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a4:bb:14:df:74:52:fe:e4:4f:e4:6a:ff:a7:fe:ad:c5:bb:
cb:c3:11:41:a7:8f:ea:29:2d:c9:75:01:fc:a7:4e:4a:69:a6:
f9:eb:39:32:d1:04:04:4f:84:f4:0a:0f:21:7c:dc:3f:a9:3e:
74:6b:02:d1:83:c6:28:eb:86:9d:18:4d:b0:53:76:5a:d3:6d:
36:28:87:b0:b6:77:a6:a5:0d:0b:8e:74:f8:cd:e6:b6:ac:ce:
23:b4:27:59:bd:22:16:a8:64:eb:34:23:d2:38:4f:dc:3b:af:
1b:81:39:24:07:25:64:fc:99:de:90:4d:da:6c:19:6e:cd:d8:
88:cf:4a:8f:ee:75:c0:6d:03:20:0b:ca:db:22:d1:cf:c0:cf:
4b:d1:d0:3f:ba:ed:bb:4c:45:05:fc:16:00:d7:1c:f4:4c:25:
40:9e:d7:cd:a9:1d:ac:11:e8:c7:50:75:4f:d1:f8:0e:91:d9:
ea:41:c8:f3:77:fd:77:d0:90:83:e1:aa:ed:ea:ad:0c:a6:36:
3f:76:5f:5a:15:40:90:62:ad:4e:b1:a6:9b:53:eb:d1:cb:30:
e9:2f:56:f4:78:a9:46:d9:42:53:6d:b1:ef:85:2d:75:c2:f1:
7f:98:50:2c:9e:16:87:6e:fb:e0:4b:59:75:a2:dc:87:67:43:
99:a6:3e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:55 2025 by rpki-client