Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
File: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json)
Hash identifier: KeMWhWFJKGoVnpLiGyYYIYXdmuoozx1K/Nl4KZjTzDM=
Subject key identifier: FF:33:DC:BA:20:AB:BA:2B:6C:B7:08:69:72:91:FD:D5:CD:BA:A0:90
Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
Certificate issuer: /CN=f4272ac0423fb097583c6872567d84cae410c89b
Certificate serial: 01984A4110765E6A434A208A302AA281911E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
Manifest number: 0918
Signing time: Sun 27 Jul 2025 05:00:34 +0000
Manifest this update: Sun 27 Jul 2025 05:00:34 +0000
Manifest next update: Mon 28 Jul 2025 05:00:34 +0000
Files and hashes: 1: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: iOXWc+/fneW/3CfsombtE+InWcg1Mof8DnHfekuWRc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:10:76:5e:6a:43:4a:20:8a:30:2a:a2:81:91:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b
Validity
Not Before: Jul 27 05:00:34 2025 GMT
Not After : Jul 28 05:00:34 2025 GMT
Subject: CN=ff33dcba20abba2b6cb708697291fdd5cdbaa090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:fe:7f:06:83:c2:f7:9e:50:7d:13:2e:6e:
6d:e0:c7:88:cf:8a:85:5a:6a:5f:5a:24:f2:11:b9:
fa:ac:ba:42:7f:6f:1c:00:8a:83:19:0e:e3:e8:5c:
68:ee:bc:5b:73:f7:e3:d2:ff:d6:16:7a:1f:d0:d1:
a7:a0:55:22:7f:34:eb:35:52:9b:7e:7f:53:91:93:
d0:cf:2d:84:b1:e6:e8:3b:8c:03:b4:24:30:07:22:
b7:5d:a1:48:9c:1c:06:42:b3:ae:48:5e:5a:c6:2a:
28:98:c6:21:a0:e8:0b:bb:b0:ca:1d:b7:45:57:71:
1a:e9:cf:44:ff:72:99:88:79:b1:25:0b:ab:d1:b1:
0f:d8:cf:95:0b:1c:10:b1:af:2f:77:24:55:77:ec:
aa:eb:48:23:56:8a:20:de:eb:23:6e:47:23:12:1b:
55:0f:b2:a2:94:62:53:4b:19:bd:27:89:0b:ec:d5:
b9:a7:53:27:b5:bc:c8:a9:9f:de:6c:4b:8d:c5:b2:
6a:dc:3d:fb:fa:65:68:d1:76:79:cf:f0:34:4f:21:
ec:85:0c:e1:a2:0e:5d:eb:b0:56:7a:d0:d8:20:06:
48:d3:ad:f3:3a:a2:a7:6d:c0:b1:0d:2e:29:5a:3b:
35:77:c6:94:98:1f:2f:35:dc:e1:2e:56:59:77:d3:
f2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:33:DC:BA:20:AB:BA:2B:6C:B7:08:69:72:91:FD:D5:CD:BA:A0:90
X509v3 Authority Key Identifier:
keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:0a:ae:0a:89:7d:99:c2:77:ff:e7:46:9a:50:53:12:dd:38:
1b:8c:d8:a7:83:65:92:7c:4a:ac:7e:ca:55:46:aa:c5:be:7a:
dc:ba:4e:96:c1:96:76:5e:a3:d8:98:a2:8f:85:f6:88:cf:f8:
66:e0:fb:f7:9f:59:53:90:ae:6d:4a:68:6a:a0:bc:6c:2f:6f:
cd:c8:c6:a8:25:26:a9:79:e6:58:fa:8d:1f:24:ae:8c:84:40:
ce:2f:91:7b:2f:1a:bc:86:21:d7:51:be:42:8d:56:e1:68:bb:
a8:f0:e6:c9:3d:c8:69:fd:bc:ed:86:b8:47:d8:4a:a6:00:78:
1e:64:db:d6:fd:c9:da:a5:09:88:05:f4:b4:54:79:c8:09:f3:
12:31:d0:e1:a8:c5:a4:8b:00:e5:cc:25:55:a1:8c:33:59:cc:
84:55:57:ad:5b:c9:61:2a:d0:fd:a7:a6:79:cf:c0:3f:57:50:
21:ba:de:dd:cb:00:f4:9f:b0:90:f7:6f:cd:bc:32:93:d5:ea:
13:d6:8e:0b:67:a1:fa:1a:61:a9:d5:41:ab:24:09:a1:9f:6e:
db:97:c2:0c:6a:0f:f1:ef:62:8a:e1:a9:42:a9:3c:bb:95:01:
e1:18:7f:77:b5:b5:48:a7:2d:2d:f3:c3:c5:54:76:2e:82:b9:
63:1b:42:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:25:36 2025 by rpki-client