Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
File: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft (raw, json)
Hash identifier: ZLLRAwuz7Ecac004ePJhfJhblBt1JGQZ7fgjX1PYzG4=
Subject key identifier: 9B:7A:81:BC:56:AB:53:EF:4F:59:C9:70:7E:D3:8A:BA:FF:A2:6D:52
Authority key identifier: F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
Certificate issuer: /CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Certificate serial: 0198541F7851BF6299D2A183C6868A46DB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
Manifest number: 0588
Signing time: Tue 29 Jul 2025 03:00:05 +0000
Manifest this update: Tue 29 Jul 2025 03:00:05 +0000
Manifest next update: Wed 30 Jul 2025 03:00:05 +0000
Files and hashes: 1: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl (hash: G4c38KswZzhqOL8ugoJrOTyCbCzWR0S0PAkusg9E+eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:78:51:bf:62:99:d2:a1:83:c6:86:8a:46:db:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Validity
Not Before: Jul 29 03:00:05 2025 GMT
Not After : Jul 30 03:00:05 2025 GMT
Subject: CN=9b7a81bc56ab53ef4f59c9707ed38abaffa26d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ed:c8:b9:ec:f4:ea:50:7e:f9:60:37:17:94:
19:31:b3:fe:b9:c0:6f:7f:f8:96:43:c2:c6:a5:1f:
5f:b0:0d:24:89:81:4c:60:fa:a2:8f:2f:4b:59:90:
d0:40:8e:e4:58:ee:df:e1:69:77:71:ac:fb:34:5b:
a2:c7:70:e7:91:1e:fa:f7:c9:fa:03:05:93:07:01:
9e:a2:cf:df:c9:9f:3b:98:79:f4:27:06:9d:32:e4:
92:ca:e4:ab:88:a2:af:9f:2a:d7:33:f4:72:bf:cd:
69:a7:78:15:44:bb:e8:be:5c:bb:6a:8d:9e:c4:d6:
87:a0:df:4c:43:9d:ae:2d:f9:e7:82:8d:67:7b:4e:
98:82:40:fb:bf:03:bf:e0:70:0d:08:41:03:e6:8e:
e5:27:09:78:57:58:a3:28:20:c4:5c:93:ff:e5:5e:
62:96:8d:e9:a9:4e:f3:6b:30:44:e8:5b:03:bb:82:
03:ac:de:82:58:86:56:2b:44:9a:cc:58:4b:6e:d5:
09:0a:89:86:22:f3:d4:e3:59:bd:4a:7f:97:09:b9:
1c:1f:9c:f3:ec:2b:70:26:77:e5:72:a3:c1:68:32:
95:7e:44:16:bd:87:71:d3:d9:19:2e:5e:bd:5c:29:
41:dc:e3:2b:fe:9e:b8:d4:e7:76:0b:25:9d:a6:96:
fa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7A:81:BC:56:AB:53:EF:4F:59:C9:70:7E:D3:8A:BA:FF:A2:6D:52
X509v3 Authority Key Identifier:
keyid:F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e7:e3:c9:ec:1a:48:26:2c:db:81:28:df:e2:c1:49:e2:84:
00:fd:d3:5c:94:fd:71:f2:38:c6:14:ad:f9:67:e7:6f:3c:3d:
58:c0:98:ca:2e:50:64:56:23:5a:3c:a8:19:bc:38:b2:0f:e9:
3a:26:70:2c:6d:98:02:f4:52:cc:46:c0:4d:bf:f1:d6:55:62:
a2:7d:99:11:2a:1c:ca:52:8a:52:a3:c6:51:90:8c:59:80:09:
65:4c:11:f8:89:23:8d:4a:ae:44:07:91:c6:e9:fa:0c:85:27:
b6:c1:13:fa:a6:5d:aa:fa:68:51:b4:73:88:fd:51:2d:41:9b:
c8:a9:ca:bb:5c:6b:42:00:76:35:00:99:e6:13:4f:12:a5:41:
5d:8a:91:52:32:fb:50:f0:c1:53:e8:d6:3f:a1:3f:aa:b4:e8:
fc:ad:79:ad:aa:06:a7:40:a2:7d:6b:ca:38:94:69:8c:67:ba:
6b:86:7f:63:84:72:df:a3:b3:7b:ad:aa:97:13:a9:59:12:70:
c2:da:b1:9a:3d:3f:3f:74:2b:3c:86:10:85:8f:f2:2b:ca:08:
a8:65:ec:4e:9a:f3:1d:11:68:d4:48:86:2e:97:b1:6c:82:c7:
3a:fc:ce:6a:02:f8:a7:83:56:6a:34:2c:ba:1e:f6:30:39:81:
50:f1:19:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:21:11 2025 by rpki-client