Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
File: 9rES1L7bpvNYUoqDcUG3SwkphZM.mft (raw, json)
Hash identifier: kNXB495q8oUdAwjJqyRkGabILh7DJoL3j/Qxz8zuydw=
Subject key identifier: 5F:48:E9:DB:0A:37:8E:B6:C6:31:CA:D5:05:F5:45:6D:DA:A1:C0:29
Authority key identifier: F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
Certificate issuer: /CN=f6b112d4bedba6f358528a837141b74b09298593
Certificate serial: 01984AAE8A2AAEEAE0694BA1EA48207A49BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
Manifest number: 1551
Signing time: Sun 27 Jul 2025 07:00:09 +0000
Manifest this update: Sun 27 Jul 2025 07:00:09 +0000
Manifest next update: Mon 28 Jul 2025 07:00:09 +0000
Files and hashes: 1: 9rES1L7bpvNYUoqDcUG3SwkphZM.crl (hash: wKMuOMGM3lwNc/+lWA5gGRUD7azIcmTE+IMVfkOX3Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:8a:2a:ae:ea:e0:69:4b:a1:ea:48:20:7a:49:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b112d4bedba6f358528a837141b74b09298593
Validity
Not Before: Jul 27 07:00:09 2025 GMT
Not After : Jul 28 07:00:09 2025 GMT
Subject: CN=5f48e9db0a378eb6c631cad505f5456ddaa1c029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:04:ae:20:e8:fb:92:d9:26:21:1a:87:bc:
74:2e:6f:b6:21:33:69:a1:c8:ad:e1:23:06:43:f1:
87:38:ab:3c:53:d9:6a:e7:89:6a:b0:90:07:d9:8f:
0e:43:b9:3a:8c:44:b9:63:a2:5e:92:18:4c:3e:0b:
ae:04:7a:67:a2:e0:d5:c8:ed:97:cc:7a:fe:46:c1:
a2:28:a9:af:ea:a1:d5:24:e6:08:64:29:e4:a0:c2:
fb:fc:23:c2:fd:6b:0d:6a:34:2f:62:d5:86:51:2b:
d0:3f:fa:10:db:46:f1:ce:27:6f:01:26:42:35:25:
fe:aa:2f:ca:ab:30:fe:e9:0b:7b:57:71:05:36:da:
b9:a5:e5:96:82:34:4a:51:0e:a9:c3:21:2a:c1:6b:
62:2b:eb:ab:7f:cc:d7:ee:3e:32:f2:5f:20:16:7e:
31:1c:31:2c:c2:9f:c8:9d:fd:07:ac:0d:8c:e8:7d:
ed:43:8e:98:34:9a:a1:90:44:71:e2:bd:14:a7:69:
96:51:73:59:e4:78:da:93:f6:fe:81:bd:4c:5d:96:
e7:0f:43:b7:9a:18:be:8a:49:fd:70:9f:65:6a:5a:
1f:e2:35:c0:01:88:4b:42:3d:b7:d7:a3:d3:6c:44:
6d:09:ed:e4:06:39:60:0c:06:c8:6e:12:d8:08:68:
85:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:48:E9:DB:0A:37:8E:B6:C6:31:CA:D5:05:F5:45:6D:DA:A1:C0:29
X509v3 Authority Key Identifier:
keyid:F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:53:9e:5d:c2:0f:a3:76:af:8b:54:83:55:b9:a2:ea:95:2f:
e7:19:1d:cd:b1:4f:5d:31:c7:80:e6:99:6e:fc:38:3d:74:f8:
44:8d:21:20:e8:51:86:52:88:6a:6b:1d:47:75:2a:5e:96:ff:
c7:02:f7:c6:06:26:12:14:38:20:48:11:26:f7:b4:8b:bc:4f:
44:4a:d7:7b:19:20:3f:a6:77:65:d5:e3:9d:d1:11:21:32:6e:
19:48:05:ed:b0:3a:d0:46:f7:20:93:ce:7b:5e:de:4f:b1:ff:
75:bb:61:65:d9:64:6a:79:4a:46:61:3c:06:9d:4d:dc:14:c9:
39:b5:eb:d5:d0:3e:7d:be:20:39:68:ef:5f:4e:1e:7c:78:40:
3f:e3:b4:6e:95:a4:5b:e1:6a:19:e0:87:ce:e4:c7:6e:ef:c0:
15:e8:a0:56:08:3a:e7:19:60:de:2e:79:cf:8a:42:9a:96:27:
a2:48:06:c7:c2:61:76:ac:a1:10:85:9f:e6:43:9d:01:6f:fa:
b0:ee:7d:f8:36:20:72:f5:0f:03:d3:a1:a6:4e:91:8b:10:0c:
94:c1:59:c1:16:bd:cd:ca:db:77:83:29:c0:df:63:cf:25:9b:
e0:b1:34:41:f7:2b:3e:86:de:50:1f:13:6a:68:8c:50:91:1a:
8a:05:d6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:43:39 2025 by rpki-client