
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
File: pO9xMrnCMYeert1cpNwysWXwx_M.mft (raw, json)
Hash identifier: 6mxVDvsr/COsnWXBpRoMISa9MpPi8qb3YXLwyfyEXhQ=
Subject key identifier: E6:D5:DB:AD:19:FC:11:E9:51:B2:CD:9F:78:1A:EE:8B:8C:D5:09:CA
Authority key identifier: A4:EF:71:32:B9:C2:31:87:9E:AE:DD:5C:A4:DC:32:B1:65:F0:C7:F3
Certificate issuer: /CN=a4ef7132b9c231879eaedd5ca4dc32b165f0c7f3
Certificate serial: 0199FC8F29036E59964801F2234020E48D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
Manifest number: 0E1B
Signing time: Sun 19 Oct 2025 13:01:04 +0000
Manifest this update: Sun 19 Oct 2025 13:01:04 +0000
Manifest next update: Mon 20 Oct 2025 13:01:04 +0000
Files and hashes: 1: pO9xMrnCMYeert1cpNwysWXwx_M.crl (hash: 1xcScJO51IUCi/+FQaBL3tOY9egkERZuXaLxILr7Ud8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:29:03:6e:59:96:48:01:f2:23:40:20:e4:8d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ef7132b9c231879eaedd5ca4dc32b165f0c7f3
Validity
Not Before: Oct 19 13:01:04 2025 GMT
Not After : Oct 20 13:01:04 2025 GMT
Subject: CN=e6d5dbad19fc11e951b2cd9f781aee8b8cd509ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c4:c6:8a:ec:67:6e:34:e8:38:95:5e:cc:6a:
b2:e7:c7:f5:6c:f4:6e:38:55:26:98:26:d8:58:e9:
f6:bf:0f:82:dc:b8:57:11:6e:fb:ae:d2:01:0c:d9:
c3:dc:7d:e2:bf:f6:16:ab:ec:7c:7d:58:b3:e9:9d:
3f:25:db:23:13:f6:b7:0e:4e:33:f2:b6:ea:fa:66:
83:d6:72:a9:c9:e4:bf:be:2f:17:10:2b:5b:a5:6f:
66:ae:05:46:8a:ed:f2:20:66:6e:d6:4b:a7:5a:41:
b6:5b:24:6f:2b:73:7f:cf:41:28:a4:39:78:fb:c0:
85:a3:f0:bf:06:8e:ad:5d:31:cd:19:bd:d1:88:1e:
51:b8:b8:0d:d6:8c:01:f4:20:25:7e:17:61:76:c4:
34:15:07:55:9e:cd:c9:eb:cc:c8:90:ea:12:a7:75:
a1:d8:64:4f:d8:1e:e5:05:4d:47:a1:8a:d3:7f:4b:
31:30:b9:f6:ef:26:72:f8:50:d8:ad:70:25:f4:8f:
29:bd:33:dd:34:70:0c:1f:e2:92:8f:1d:2e:e0:90:
43:b3:80:8a:11:50:84:2e:fd:89:b0:75:e9:32:ad:
14:7e:40:f6:2f:da:a1:d7:b1:13:7b:15:db:d5:55:
dd:66:80:2d:c5:98:7e:48:98:bd:cb:30:12:ae:00:
96:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D5:DB:AD:19:FC:11:E9:51:B2:CD:9F:78:1A:EE:8B:8C:D5:09:CA
X509v3 Authority Key Identifier:
keyid:A4:EF:71:32:B9:C2:31:87:9E:AE:DD:5C:A4:DC:32:B1:65:F0:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:bd:b0:d0:ef:84:62:aa:00:ae:f2:38:d4:7d:e3:0a:52:1d:
b4:2c:b5:cd:08:bc:a5:6c:9a:47:00:e1:85:1c:7d:85:a4:f2:
bc:4c:6e:e9:6d:be:74:a8:61:06:a7:c2:c6:2c:83:b6:95:d0:
85:bf:fa:db:78:0f:5c:82:e4:a8:14:07:de:df:45:95:10:f8:
b5:7a:b7:c9:79:42:17:21:47:80:25:f6:59:75:a1:64:45:0e:
ec:0e:90:0a:32:0b:52:b9:47:55:db:a4:36:be:2e:f4:d4:3a:
f9:a9:23:28:9e:4a:a9:d2:e9:6a:67:80:a5:2f:c2:5b:45:0b:
bf:f2:1d:c0:55:92:58:28:0d:86:c6:a5:a9:9c:ce:c6:f6:0a:
5e:32:41:10:cf:1d:8a:d7:7d:70:55:23:42:12:e6:e5:b3:05:
f3:0d:fc:dc:49:ba:20:cc:fa:9d:86:b5:cb:02:41:c4:5b:c7:
98:0c:a3:f4:43:93:fe:7f:1e:1e:4e:ce:56:d8:70:7a:b3:0d:
b1:06:e3:c8:8f:9c:8f:62:08:7b:2a:d0:ed:5e:8e:ca:68:64:
bc:e6:5e:05:c2:08:6f:d1:19:f2:99:7b:53:ff:7d:b6:75:9f:
ab:be:75:28:a9:a4:a3:f4:38:68:31:8d:1e:cc:80:30:7f:30:
3e:e2:de:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:59 2025 by rpki-client