Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
File: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft (raw, json)
Hash identifier: 6pM4RiExIVrjzhG1KTOUayi+qDiIM2yXEQEfWsuOkwM=
Subject key identifier: EC:B1:4D:C1:1A:73:55:C5:01:AA:04:F5:9C:AB:9A:C1:28:8A:7A:82
Authority key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
Certificate issuer: /CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Certificate serial: 0199FF22A064297BEFBB5BC0DE06011D78FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
Manifest number: 16E0
Signing time: Mon 20 Oct 2025 01:01:23 +0000
Manifest this update: Mon 20 Oct 2025 01:01:23 +0000
Manifest next update: Tue 21 Oct 2025 01:01:23 +0000
Files and hashes: 1: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl (hash: FpCNkVNAu9OksVs0APxAeLRGGte4+SD+gks6ro7yOqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:a0:64:29:7b:ef:bb:5b:c0:de:06:01:1d:78:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Validity
Not Before: Oct 20 01:01:23 2025 GMT
Not After : Oct 21 01:01:23 2025 GMT
Subject: CN=ecb14dc11a7355c501aa04f59cab9ac1288a7a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:19:d1:b9:f0:d0:9b:00:1b:1d:5e:ee:2e:c6:
c3:d0:42:91:2f:1e:1f:52:90:63:9c:0d:af:a5:4f:
40:86:8d:dd:f1:6f:35:e1:e5:63:06:ad:c2:5c:00:
ba:ce:0a:18:fa:c9:a2:d7:3f:76:01:47:76:49:cf:
12:7c:22:39:1a:1c:f9:28:29:88:d0:69:16:6d:84:
45:38:19:2d:b8:06:b8:68:05:0a:e2:b2:3a:4f:1c:
3e:68:71:a1:22:9e:01:36:f4:7a:83:ca:ec:4c:45:
92:21:5c:51:6c:7b:ce:bf:89:78:c0:c9:f8:2b:8c:
b0:4f:4f:f4:49:d4:f1:a9:db:f7:21:b9:47:99:a9:
02:55:82:07:ca:a9:d5:3d:09:e0:4d:e9:81:de:99:
0a:96:41:1b:5e:5b:0f:27:5c:17:5a:3c:a9:2b:45:
2e:28:16:fd:40:28:fb:ff:d2:60:ea:d9:d5:40:74:
1e:08:39:05:62:ca:de:ac:08:b5:2b:bb:34:20:c6:
ce:a0:9f:38:40:f2:3d:df:0d:d8:c8:19:47:d0:26:
b6:5d:50:71:03:22:c8:49:0c:6d:ef:8b:76:cc:12:
e6:23:52:fb:90:30:85:c5:1e:d8:19:83:26:81:51:
d9:96:39:85:d7:1f:0f:17:12:80:d9:f6:c2:0e:4d:
1b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B1:4D:C1:1A:73:55:C5:01:AA:04:F5:9C:AB:9A:C1:28:8A:7A:82
X509v3 Authority Key Identifier:
keyid:F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b6:03:3d:a6:d3:85:38:e5:82:74:e2:39:c5:3c:93:bb:e8:
e2:f3:18:5e:dc:ff:c4:99:43:75:1e:1c:53:6a:d6:8a:a2:65:
c6:3c:43:10:0c:e7:a1:de:43:a5:8d:8d:ea:bc:de:51:26:72:
f5:42:5e:8d:e6:ac:90:37:31:11:2f:37:73:06:20:02:e6:1a:
8a:7e:e5:94:b4:f8:41:5a:f4:18:db:d1:13:8a:44:78:1c:f6:
06:63:b9:be:d5:60:da:ab:f7:0d:46:bb:3d:a6:52:68:2f:11:
2f:b2:fe:ee:8c:d7:81:f2:1b:ef:57:9d:ec:74:b3:90:60:f4:
61:e9:7b:d5:38:99:9d:cc:e0:d9:f8:f9:98:7c:cc:a5:97:57:
ce:68:b6:bd:87:10:4e:49:3e:e9:cd:d6:94:fc:b3:33:31:70:
c1:f7:30:ae:2c:03:90:f2:e8:6d:ba:cb:cc:b8:66:b6:64:ee:
ba:19:6b:69:13:42:cf:ad:ea:91:ec:00:27:85:da:0f:cb:46:
c4:e8:6b:94:cc:77:3f:8c:1e:8b:37:c5:b5:65:7a:39:97:8a:
de:1b:8c:71:c0:b8:af:a8:32:02:53:b9:5b:ef:c0:69:43:3c:
48:29:b1:c7:ed:fc:a9:d6:5e:50:3f:06:47:74:4c:5c:79:8a:
43:39:f5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:55:18 2025 by rpki-client