Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
File: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json)
Hash identifier: H9iFg3NBuDR1bQhs5CMrAwzDkAMq4r9cWVLMrwXfQWg=
Subject key identifier: A2:03:20:26:F9:5D:12:77:B8:80:87:16:61:D8:5C:6D:43:B9:B9:C3
Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
Certificate issuer: /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Certificate serial: 019A00A31A9A0BB36597E3FB228E954DF4B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
Manifest number: 12B6
Signing time: Mon 20 Oct 2025 08:01:20 +0000
Manifest this update: Mon 20 Oct 2025 08:01:20 +0000
Manifest next update: Tue 21 Oct 2025 08:01:20 +0000
Files and hashes: 1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: XRDYs+m5AQw/iwNQrbZQgrPIbYwJm0QWNxjOQAVXgHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:1a:9a:0b:b3:65:97:e3:fb:22:8e:95:4d:f4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Validity
Not Before: Oct 20 08:01:20 2025 GMT
Not After : Oct 21 08:01:20 2025 GMT
Subject: CN=a2032026f95d1277b880871661d85c6d43b9b9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:98:75:88:10:ac:0d:b3:e4:9e:3c:60:7e:bb:
4c:a2:ab:b3:d8:a5:ac:88:8b:41:97:14:d1:a9:e5:
19:5f:9b:42:da:5b:39:01:af:ae:14:9f:a5:59:d1:
ec:2a:8c:00:74:e7:dc:1b:b7:d6:73:6e:d8:b8:23:
9c:65:f4:bb:92:fa:86:95:70:0a:b2:f1:e0:fc:70:
f2:d4:77:0d:9c:52:65:06:5b:80:8e:4f:95:70:0b:
30:b8:23:bc:7a:3a:1e:ae:ad:18:0b:f3:ff:b9:f5:
6c:8b:9c:f8:e6:42:ee:3d:83:d4:1b:f7:da:5e:23:
67:02:67:68:b0:fd:89:eb:ef:71:49:21:7b:e3:b9:
19:ee:61:17:93:39:71:e2:52:5c:c1:8c:73:52:5a:
f2:aa:4b:e7:91:ea:c5:8b:90:13:f9:71:56:bb:ae:
2c:07:5e:9a:a8:eb:14:1b:9a:0a:a6:98:2f:ae:6d:
5c:8b:75:60:72:a5:4a:d6:8a:38:b8:9a:46:ac:44:
4a:80:72:26:eb:2f:14:00:8f:15:10:4d:9f:88:45:
93:93:06:df:c3:ed:3e:f8:80:bc:ed:e2:60:55:ea:
60:e4:89:51:05:5c:35:64:a3:d6:f9:c8:95:80:4a:
fe:c7:ba:79:c0:84:5b:5e:f0:6b:ba:3f:6a:71:c8:
25:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:03:20:26:F9:5D:12:77:B8:80:87:16:61:D8:5C:6D:43:B9:B9:C3
X509v3 Authority Key Identifier:
keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b3:6a:f6:7b:e2:cf:67:a4:72:1e:cb:48:ee:4b:93:2d:23:
1d:2a:ce:50:bc:15:bd:47:30:cf:ac:1b:cc:79:63:47:f9:28:
dc:b6:09:c8:08:eb:09:d2:9c:fb:f9:5b:c6:80:47:4c:13:c1:
50:15:ac:47:31:1d:43:27:db:d7:88:28:9f:39:30:98:cf:f7:
00:43:d6:09:96:52:fd:d0:19:9d:38:e2:b8:22:ff:05:b4:68:
a7:09:56:33:e8:5d:8c:40:30:42:d2:e8:18:b0:08:39:a4:c0:
38:c4:fa:d4:aa:e4:13:cf:5a:ee:2f:f6:85:ad:62:55:31:3e:
3d:8a:fd:db:9f:f0:b8:dd:ef:85:fe:c8:8d:ea:14:24:16:e2:
9e:d7:f3:a0:6d:2c:ab:16:61:f5:96:c1:b5:2f:8b:24:1c:4b:
9d:e5:af:8d:50:94:9e:0d:de:8c:da:3a:6d:de:19:43:25:af:
61:6a:f6:89:f5:33:c3:7c:5c:bc:f7:2c:83:9e:4e:e1:2c:ab:
0e:f7:c5:cc:a6:42:68:33:e5:f1:c0:07:20:b6:83:37:57:0b:
87:ef:5f:01:fb:ef:5e:d8:42:74:1e:fb:57:97:e9:b5:6e:36:
aa:5e:d8:91:7c:2e:b2:f0:5d:13:0f:93:a2:a0:0f:46:f0:19:
14:28:75:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:23 2025 by rpki-client