Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
File: 9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft (raw, json)
Hash identifier: AkuDEnawH6WE+pCRF8JVGb95DZLfsm4diD6pieBaNe4=
Subject key identifier: 71:49:72:80:23:8D:F2:3E:88:2D:BA:25:54:E6:29:B8:A7:E1:B7:8F
Authority key identifier: 9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
Certificate issuer: /CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Certificate serial: 073DF59DB2B33A3750642535B1ECD6B37A316B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
Manifest number: 97
Signing time: Tue 11 Nov 2025 04:58:30 +0000
Manifest this update: Tue 11 Nov 2025 04:53:30 +0000
Manifest next update: Wed 12 Nov 2025 07:01:30 +0000
Files and hashes: 1: 9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl (hash: ejjWGqcqqnyDBZDZdmLLR7b0cfL2NdUBjVugem7bcB0=)
2: AS214809.asa (hash: twDSgOmLlkZzcvx0mDRRIi71WRXYCfTsSol/H2pUsYI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:3d:f5:9d:b2:b3:3a:37:50:64:25:35:b1:ec:d6:b3:7a:31:6b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Validity
Not Before: Nov 11 04:53:30 2025 GMT
Not After : Nov 12 07:01:30 2025 GMT
Subject: CN=71497280238DF23E882DBA2554E629B8A7E1B78F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:2f:31:b2:47:05:64:67:68:27:cf:a6:36:
90:e4:48:3f:b5:c4:67:96:13:fc:7a:f7:2b:a2:39:
04:60:eb:10:0e:54:4d:a0:4c:28:64:b4:ed:75:26:
f9:d9:51:b7:5b:58:5c:da:46:d8:ff:8c:5e:a1:b8:
4a:9b:66:2a:0a:5f:7a:0b:07:1b:6d:aa:9e:7e:b4:
f1:c2:b7:d4:28:20:d1:6b:a7:04:00:63:08:da:80:
81:17:c5:27:f9:5f:20:09:11:f6:ad:0c:b1:9b:b1:
50:27:d6:cf:b4:83:fc:a0:8d:79:2a:d6:2c:1f:70:
b8:3b:f6:db:fb:1d:f3:a8:9c:e7:03:e7:66:e6:b5:
04:05:a2:cb:d2:38:a5:3a:34:e0:a7:83:0f:8f:5d:
6e:9e:dd:8e:d3:6d:88:1b:7c:94:ec:dc:7d:82:70:
96:35:14:fe:36:7d:b9:3c:a8:a0:86:ab:8d:cf:c7:
0a:d6:09:ac:f5:dc:e9:c2:e6:26:90:7b:e2:93:81:
c1:de:42:f8:1b:4b:9f:a5:57:90:8c:00:3a:4e:05:
66:fa:03:a0:4f:f1:f4:17:e9:3d:f5:8c:8a:fb:ba:
f6:7a:15:f1:37:b1:f2:cd:c0:b6:8f:53:4b:57:95:
ee:87:b5:80:99:27:bc:4f:a7:1e:0c:a4:7f:d3:2c:
17:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:49:72:80:23:8D:F2:3E:88:2D:BA:25:54:E6:29:B8:A7:E1:B7:8F
X509v3 Authority Key Identifier:
keyid:9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9c:04:94:d3:c2:2b:f2:bf:31:96:d9:92:3a:98:68:3f:35:
68:96:79:8a:34:45:2b:e9:95:98:7e:45:da:84:8d:b5:59:a0:
d2:4b:1d:3f:e6:d3:14:ac:f9:cb:8e:0f:cd:f8:76:a9:9c:3e:
91:b3:ee:24:35:77:ca:88:5a:d9:28:8a:23:dd:61:0b:be:0b:
c3:a3:8d:b8:f1:a6:3d:4c:bd:fc:77:17:66:e7:e3:c8:ff:20:
33:c2:c2:e2:ae:40:1e:0e:e7:97:7d:42:7a:8d:a2:53:99:1e:
f2:f2:20:e8:3d:38:d3:c9:93:cf:e1:e5:35:f5:fd:44:cb:2a:
7e:0d:04:9a:19:60:04:97:c4:b1:f6:94:8d:f3:2b:99:a3:8f:
b4:7e:98:29:c1:40:d0:be:29:c5:27:5f:96:83:70:3c:59:08:
6b:7e:0f:a2:33:28:c7:6f:41:a3:74:1c:bf:75:8f:04:4f:ed:
90:e1:d2:68:69:3d:7f:d9:90:78:8c:9a:c6:6b:60:6b:24:d2:
2f:61:20:c3:ea:0c:8c:e2:9e:c8:b8:5f:4f:ba:3d:bd:4d:1b:
d0:40:61:26:c8:ae:c2:1a:93:15:67:06:44:66:f3:2a:6e:11:
ef:b2:fb:16:56:26:f1:f3:32:5e:3d:60:f9:aa:da:79:aa:ea:
b6:8e:b1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:42 2025 by rpki-client