Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft
File: 9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft (raw, json)
Hash identifier: l6oKL6odefdC+qg3VOnzl1TCJtrSYTDogaHEGD7AIDo=
Subject key identifier: DF:CC:CB:44:C0:3C:67:03:C6:B9:D0:EF:61:D2:B9:6E:70:1A:E7:40
Authority key identifier: 9C:9C:8D:51:85:D8:12:5C:9D:65:49:0A:0E:E0:60:1C:99:7F:DA:A5
Certificate issuer: /CN=9c9c8d5185d8125c9d65490a0ee0601c997fdaa5
Certificate serial: 2731CED06C7DB6244C043A0020BF80290450E73D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJyNUYXYElydZUkKDuBgHJl_2qU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft
Manifest number: 05
Signing time: Mon 10 Nov 2025 23:26:33 +0000
Manifest this update: Mon 10 Nov 2025 23:21:33 +0000
Manifest next update: Wed 12 Nov 2025 02:47:33 +0000
Files and hashes: 1: 9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.crl (hash: gebMyohXNQlPfDFGQZ6RQ8M9bdBg9SUsVJBy96eyv04=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJyNUYXYElydZUkKDuBgHJl_2qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:47:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:31:ce:d0:6c:7d:b6:24:4c:04:3a:00:20:bf:80:29:04:50:e7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9c8d5185d8125c9d65490a0ee0601c997fdaa5
Validity
Not Before: Nov 10 23:21:33 2025 GMT
Not After : Nov 12 02:47:33 2025 GMT
Subject: CN=DFCCCB44C03C6703C6B9D0EF61D2B96E701AE740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:19:e2:ad:98:07:44:49:d2:4f:79:34:34:09:
9a:a9:ba:1c:f2:95:fa:1b:75:74:b9:99:fb:fb:c8:
03:20:db:42:a1:be:12:e6:a4:d2:fd:f5:02:71:7d:
19:e4:d4:dd:0a:ed:f8:04:ad:a8:11:09:65:d3:95:
df:15:00:47:aa:f7:29:87:ab:ff:1d:da:32:41:db:
89:8f:95:78:ae:79:e9:52:82:a7:3c:fe:6e:8f:0d:
63:46:39:93:10:fc:29:6d:84:34:38:72:55:98:4f:
4c:f2:25:6c:31:31:e4:78:e3:74:4f:a9:03:56:4c:
0c:99:3f:5a:3f:25:ef:2e:f8:5e:16:88:37:4e:05:
83:d3:28:7f:6b:21:53:81:96:3d:81:93:66:d8:c1:
77:07:d2:d0:c9:45:28:a6:69:cb:86:49:e7:ec:34:
f7:05:67:92:8b:ef:96:0d:5f:0e:e7:7e:70:c2:54:
55:8a:a9:90:d2:26:b7:d7:5b:bd:0a:1a:df:65:e2:
d4:3e:43:f3:fe:b8:01:09:e8:84:95:92:32:f4:63:
2a:ae:e2:03:df:f2:42:14:d9:47:2c:c7:5b:cb:c5:
4f:43:72:29:96:88:8e:ae:83:f4:a7:93:7e:04:ca:
26:57:00:44:e8:86:47:33:b1:36:72:31:da:1b:0b:
1e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CC:CB:44:C0:3C:67:03:C6:B9:D0:EF:61:D2:B9:6E:70:1A:E7:40
X509v3 Authority Key Identifier:
keyid:9C:9C:8D:51:85:D8:12:5C:9D:65:49:0A:0E:E0:60:1C:99:7F:DA:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJyNUYXYElydZUkKDuBgHJl_2qU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d5:41:6c:4d:3d:97:8a:d2:ba:9d:77:ad:6c:43:db:7f:8b:
75:27:91:f7:f8:66:1e:a3:aa:d2:58:a8:d2:21:1c:ea:cb:48:
e9:29:04:00:c5:bf:66:74:e9:12:3a:36:50:ba:78:b9:9d:25:
13:15:ab:25:2c:fd:29:50:dc:90:34:aa:01:9f:0e:5c:58:4f:
5d:94:4d:db:d8:e0:2a:28:b8:7f:9e:cc:37:46:14:6f:09:09:
b0:2e:86:25:0f:f0:cf:0f:d4:55:ab:86:b3:37:6c:12:49:99:
8e:84:11:62:17:e8:7a:df:a0:3a:32:8e:43:30:e9:1b:93:3c:
cd:a6:0e:27:a3:a4:24:8d:6b:f6:f6:51:e2:48:cc:c5:c0:5d:
41:7e:e9:a9:a9:95:91:74:82:51:f7:28:c6:aa:1b:78:4c:40:
0f:92:f7:1c:64:39:9d:99:5f:3f:f5:d8:da:fa:0c:36:31:1e:
1e:68:fa:e3:65:57:05:1b:8a:7e:8e:5b:66:e8:48:8c:fd:d6:
12:32:0d:b2:b6:d8:00:c2:f4:d4:37:bc:b7:58:97:4f:72:b7:
8f:ce:d1:64:12:6c:f2:d8:2d:3c:6c:46:66:e3:40:32:c6:39:
6e:cd:51:2a:34:11:00:76:7d:6b:c3:4e:e6:6d:60:f1:83:af:
3a:ae:eb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:39 2025 by rpki-client