Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
File: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft (raw, json)
Hash identifier: A/MdFsxenZkHXYZCwoCh4tmY0s71uJtXzOSkS8LymAE=
Subject key identifier: B0:B3:74:21:E2:A5:5F:CA:9A:DF:26:7B:AA:03:89:71:B5:83:A1:C2
Authority key identifier: 73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
Certificate issuer: /CN=73d85f8438d73b5668e89cc692646f9487965fa9
Certificate serial: 0199FFC839A93DDC94FA99C98D29783CE5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
Manifest number: 02A7
Signing time: Mon 20 Oct 2025 04:02:15 +0000
Manifest this update: Mon 20 Oct 2025 04:02:15 +0000
Manifest next update: Tue 21 Oct 2025 04:02:15 +0000
Files and hashes: 1: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl (hash: LFJK5ktBr4dazzD9E2uC4MEyJZvhZpT306WjNrQpF1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:39:a9:3d:dc:94:fa:99:c9:8d:29:78:3c:e5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d85f8438d73b5668e89cc692646f9487965fa9
Validity
Not Before: Oct 20 04:02:15 2025 GMT
Not After : Oct 21 04:02:15 2025 GMT
Subject: CN=b0b37421e2a55fca9adf267baa038971b583a1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:b8:7d:ac:4d:ad:7d:df:7d:b6:a0:98:d2:
e4:27:c3:71:98:fa:c3:10:f6:4c:9c:8c:a5:b0:8d:
17:eb:ca:b2:9d:f1:6d:b2:64:7e:0a:69:85:99:eb:
43:5c:8d:02:27:87:d0:62:6d:54:21:6d:10:ef:75:
fe:8e:0c:18:f2:65:a6:48:0e:cb:13:87:c6:95:d7:
22:cb:ba:bf:50:c9:ac:02:3a:02:10:ba:b2:79:2d:
05:8d:bc:ae:04:76:4e:77:30:5e:4e:cd:e7:1f:be:
b1:aa:f3:aa:fa:e7:8b:e6:78:06:2c:e8:dd:31:28:
e6:35:c8:70:79:13:89:c4:fc:29:98:a2:73:00:91:
5c:fa:2a:59:3c:d1:c3:8e:ec:f4:23:89:cc:0c:a7:
a5:de:18:6c:18:1f:b6:25:8b:6e:21:f4:66:be:95:
54:39:6e:22:23:be:c6:d2:65:d3:e6:16:02:ba:3c:
68:49:b4:c1:c8:75:1a:c3:ed:59:b1:a9:65:6c:ef:
55:91:a3:74:88:f7:ac:9c:03:fe:42:fe:c2:6c:d8:
fe:df:13:ad:80:2a:c7:44:bf:8e:7b:ed:83:62:59:
1e:27:71:a9:ae:7d:72:76:e4:8f:5b:1b:f4:7c:ce:
ff:44:3d:b1:13:b8:24:38:89:5d:3e:c5:ee:5d:2e:
61:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B3:74:21:E2:A5:5F:CA:9A:DF:26:7B:AA:03:89:71:B5:83:A1:C2
X509v3 Authority Key Identifier:
keyid:73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a2:c2:c0:50:d7:46:99:f9:3f:74:f0:46:ce:86:fa:8c:e9:
e4:06:16:07:19:9e:1f:09:e3:53:ee:92:c5:a1:d7:34:93:92:
0d:cc:72:56:2f:91:89:c9:bf:ab:96:ee:f9:8f:a9:59:92:e9:
92:d2:4b:f7:13:bb:77:09:42:b2:a7:5f:7f:aa:97:a9:a0:12:
1d:57:49:1e:e3:9a:41:ce:f7:43:7e:03:3c:7d:a5:ad:f5:9d:
30:f9:29:8f:38:18:74:35:e9:e8:b7:ba:55:26:ed:06:d7:c0:
d0:95:77:aa:9c:4a:68:81:9d:93:dc:04:2d:d4:d5:12:53:b7:
a5:28:d1:2f:de:54:79:49:7e:68:1f:8a:35:e6:5c:92:40:34:
fb:c9:17:6c:67:14:2e:0f:04:a2:8d:ee:e5:a2:9c:90:51:66:
e5:41:53:df:9e:04:f6:11:0b:9d:91:e6:ae:f5:fd:26:8c:6d:
48:1b:1b:fa:b8:fc:72:7a:5d:31:5d:d4:fe:63:58:14:60:c4:
3a:d7:c7:10:69:77:12:9b:a1:f4:1c:c9:ad:8f:cc:e6:0a:90:
9e:e3:7e:04:88:5b:8b:71:1c:63:53:54:16:b2:9d:27:b4:7f:
49:66:ae:99:b2:50:fe:84:7d:3a:81:d5:a5:5b:8a:c8:1c:e5:
0d:3c:4c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:22:51 2025 by rpki-client