Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
File: 9rES1L7bpvNYUoqDcUG3SwkphZM.mft (raw, json)
Hash identifier: njGef6gTMkdCELoUSvTdez27Wq2UqurO9+NoRzTEypM=
Subject key identifier: 24:D9:C0:87:B1:10:9E:A0:C2:30:B6:41:B5:88:0D:17:F6:B9:7A:E5
Authority key identifier: F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
Certificate issuer: /CN=f6b112d4bedba6f358528a837141b74b09298593
Certificate serial: 0199FB4638F1505EA6576A05A2FD7987F9D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
Manifest number: 1631
Signing time: Sun 19 Oct 2025 07:01:47 +0000
Manifest this update: Sun 19 Oct 2025 07:01:47 +0000
Manifest next update: Mon 20 Oct 2025 07:01:47 +0000
Files and hashes: 1: 9rES1L7bpvNYUoqDcUG3SwkphZM.crl (hash: dWkPOLlSSN8LLnHCkMK2E9dQsuWQosu70MffN/eVUMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:38:f1:50:5e:a6:57:6a:05:a2:fd:79:87:f9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b112d4bedba6f358528a837141b74b09298593
Validity
Not Before: Oct 19 07:01:47 2025 GMT
Not After : Oct 20 07:01:47 2025 GMT
Subject: CN=24d9c087b1109ea0c230b641b5880d17f6b97ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ac:f5:14:cd:b0:73:a2:05:86:91:44:cb:92:
98:2c:17:cc:54:21:11:cf:ec:17:d5:92:d5:02:df:
a8:35:b6:38:de:9a:50:15:74:01:88:71:5b:28:d7:
b6:cb:03:eb:9e:7e:ef:03:54:3b:4a:3c:f8:4e:19:
d7:5c:da:29:69:81:00:3d:9e:54:a5:4b:27:fd:88:
da:e7:bf:54:c0:7c:ab:9f:da:08:11:ae:41:81:39:
99:ea:9f:cc:86:1a:e2:9c:d5:90:14:ca:54:89:b6:
7d:43:0d:5e:7c:75:77:44:f2:20:08:c0:c7:4f:c3:
4d:bf:71:e0:7e:94:57:8b:53:46:ab:02:3f:cc:24:
fa:5f:c8:a4:16:aa:6c:0d:fc:7d:4e:27:64:84:3f:
f0:fa:a8:6f:7c:a9:b1:05:cc:4f:4f:f8:69:52:50:
63:50:6b:ad:ab:62:ed:04:78:a7:9e:54:60:da:4d:
7e:7b:b9:5a:55:e3:46:ff:37:b3:bd:93:68:26:9d:
4e:f9:dc:9e:82:cf:70:52:29:25:35:f7:ac:6e:6f:
8c:3c:5b:df:71:7e:b9:37:49:9c:0c:1f:9f:0b:0a:
2d:15:c9:a3:cc:8f:fb:d9:50:d0:bd:d8:79:a8:cd:
eb:fc:8a:27:a3:ee:9c:41:3d:e3:1b:61:0b:30:a3:
92:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D9:C0:87:B1:10:9E:A0:C2:30:B6:41:B5:88:0D:17:F6:B9:7A:E5
X509v3 Authority Key Identifier:
keyid:F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:78:81:ed:87:1e:4b:5f:f7:fc:3e:3c:65:b6:8c:88:87:95:
24:18:87:9d:f3:d9:70:57:ef:12:7c:7f:31:b8:a3:2e:75:2e:
8c:1b:ba:60:b3:c6:f1:e8:15:cc:58:c1:94:e8:80:b1:7c:8b:
a1:24:18:08:69:b1:9e:0a:5d:1f:3c:d1:2e:fe:bb:e6:f7:c8:
b8:7d:79:30:f8:59:16:fe:fb:5f:92:e0:3d:80:c2:ca:dd:3c:
fd:9c:f9:db:3d:87:0e:66:db:06:97:22:b2:f4:0c:55:92:e5:
db:75:cf:c8:20:f5:af:33:4d:57:5a:b1:08:b5:85:7f:d2:38:
30:9d:bb:4f:1a:99:6a:fb:13:be:fe:f0:a9:52:77:08:5f:a4:
76:f0:9f:4d:5a:90:44:67:69:82:90:24:e7:f6:d7:18:b8:9d:
da:ac:61:cd:df:ef:be:76:54:26:ee:b6:c2:37:a7:2e:81:34:
9f:9a:a2:82:a3:20:be:5a:68:3c:e3:24:d6:c1:05:0a:51:d2:
dd:f2:25:8e:55:1e:ac:d4:d8:37:ce:83:39:64:2c:71:60:46:
73:6b:79:c8:78:86:d0:7e:34:b8:b1:02:de:5a:65:cd:dd:95:
10:7e:3f:57:d8:f3:b0:45:2c:4a:97:71:1b:9d:22:8d:61:48:
5e:e0:ad:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:58 2025 by rpki-client