Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
File: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft (raw, json)
Hash identifier: 7XuGon+QCqUp5zUTwnZBl1J3W7YRKesOu/Pd8xr6Us4=
Subject key identifier: A8:02:F6:90:B8:CC:EE:1A:67:51:49:73:90:7F:D8:F7:21:F8:3F:2A
Authority key identifier: F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
Certificate issuer: /CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Certificate serial: 0199FC582F72893DA982E01F06714628EF8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
Manifest number: 0DC2
Signing time: Sun 19 Oct 2025 12:01:01 +0000
Manifest this update: Sun 19 Oct 2025 12:01:01 +0000
Manifest next update: Mon 20 Oct 2025 12:01:01 +0000
Files and hashes: 1: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl (hash: YRbMBxSITbIXigVvyrqcNnM+VlLXDn89ME/eQY9xZuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:2f:72:89:3d:a9:82:e0:1f:06:71:46:28:ef:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Validity
Not Before: Oct 19 12:01:01 2025 GMT
Not After : Oct 20 12:01:01 2025 GMT
Subject: CN=a802f690b8ccee1a67514973907fd8f721f83f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:66:99:d9:bb:aa:84:00:83:dd:72:d7:02:d5:
1d:fa:41:e1:24:4e:b9:8c:82:cf:a4:5f:fa:06:d4:
a9:a8:b1:82:ae:d8:78:01:7f:5f:49:87:d9:b6:57:
6d:ea:4a:f7:93:9e:bc:c3:ae:1d:d0:9d:f5:19:6e:
9d:e1:ba:67:be:42:ba:8b:dd:49:88:e2:e8:42:a5:
75:de:96:32:73:df:e9:51:fe:75:f0:e8:68:e8:79:
2e:cc:e3:33:53:11:a8:f3:3d:de:55:c0:b1:33:6d:
c5:0b:51:ea:d9:0c:96:cf:d4:e8:9a:39:c8:56:89:
c3:a2:73:c3:85:e3:6e:29:7f:c6:21:50:33:54:27:
1a:1d:e2:cf:1b:e8:12:49:bd:2e:3e:6d:6a:f7:4b:
b0:2e:37:6a:c2:7c:5c:80:01:34:fe:10:4d:37:56:
72:de:3a:a4:5d:13:be:31:86:e0:c2:8f:04:47:ba:
a5:20:b3:50:44:9f:f0:94:87:4a:f2:f7:0a:f2:32:
45:bd:9a:d7:e6:3a:af:10:e9:46:de:13:26:d9:c8:
b5:7d:37:e0:61:53:6e:e9:9f:d9:ff:6c:d1:7d:8d:
42:a8:09:2f:3d:67:6d:3c:11:5d:a6:fd:ea:7d:ce:
69:a4:cb:bf:d5:e8:6a:d7:4f:21:57:a8:9c:78:5f:
f8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:02:F6:90:B8:CC:EE:1A:67:51:49:73:90:7F:D8:F7:21:F8:3F:2A
X509v3 Authority Key Identifier:
keyid:F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:28:24:0e:3f:aa:0e:a8:5a:98:61:41:38:74:e3:8b:1b:87:
3f:5f:87:18:1e:a5:c3:dc:8a:5e:17:1f:d2:44:f5:cb:af:20:
73:a1:67:21:8b:f5:ca:f7:57:91:07:81:b5:54:cd:e1:db:86:
11:cb:af:d9:f8:fe:2d:00:3f:65:61:13:8a:42:e0:ff:4c:9a:
d7:66:cf:08:96:30:64:48:57:97:24:2c:e4:87:92:4d:55:ce:
fc:f0:39:08:04:84:5e:6c:50:1c:cc:08:5e:82:e8:70:23:11:
e6:93:c1:5d:6c:aa:b9:df:ea:65:25:ab:55:8b:39:ce:28:d9:
eb:d4:d3:fc:a4:08:c1:65:65:ef:db:10:ad:d6:79:67:3d:f1:
71:13:db:db:05:1f:54:de:ba:cb:48:51:cb:28:ca:b5:e6:da:
48:eb:6b:0d:f3:a2:c8:85:03:ca:a6:63:01:13:b0:33:e4:a4:
3a:bd:f0:45:f8:8b:dd:6e:df:64:35:a4:f5:ed:c1:88:c2:38:
f8:2a:00:00:84:e7:d8:0a:ec:cc:4f:7b:53:b7:17:4a:54:27:
ae:ee:61:13:74:9b:dc:9a:9c:90:b4:ca:d3:36:52:6f:ad:ba:
65:8b:65:5c:6d:0d:f5:7d:ed:31:81:45:4c:8d:dd:fd:65:f5:
90:10:9e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:26:56 2025 by rpki-client