Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
File: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft (raw, json)
Hash identifier: lUic3MCyyn6/6oDKpulzXuLEGi3bzTPloYI68VwblTQ=
Subject key identifier: AB:95:8C:04:B8:5B:7B:22:02:23:05:20:21:E5:5B:D0:63:DC:49:3F
Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
Certificate issuer: /CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Certificate serial: 019842874B5725E8E75C36DF16883DE76B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
Manifest number: 0F61
Signing time: Fri 25 Jul 2025 17:00:19 +0000
Manifest this update: Fri 25 Jul 2025 17:00:19 +0000
Manifest next update: Sat 26 Jul 2025 17:00:19 +0000
Files and hashes: 1: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl (hash: P+pXbsLlg3tl0RXlv7qEz4BT/5spOPUrbjGS1Lx2ZM4=)
2: JKDoGMCZzjSndX7Ct7p3CxyKJR4.roa (hash: bo2ZyeRjzsKv0IsXJYurWXlAoWDOMikTk02MIFIPMnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:87:4b:57:25:e8:e7:5c:36:df:16:88:3d:e7:6b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Validity
Not Before: Jul 25 17:00:19 2025 GMT
Not After : Jul 26 17:00:19 2025 GMT
Subject: CN=ab958c04b85b7b220223052021e55bd063dc493f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:68:4d:4b:1b:59:91:22:02:4e:6a:23:d2:
92:4a:a1:37:00:fd:81:5b:43:19:c1:e3:01:83:73:
59:49:f8:1d:81:b6:37:f4:1a:88:4b:4e:d9:23:ca:
67:b0:d5:b6:23:6b:12:da:37:64:6c:85:0b:21:8e:
f0:0e:bf:57:92:fd:77:90:27:9d:b7:2a:dd:c8:06:
46:15:a2:29:49:94:24:d1:53:89:99:ac:2c:a7:ea:
2e:fa:e1:e9:76:11:57:f7:c3:09:ab:39:a0:22:86:
70:b4:0f:20:73:8e:e4:7b:80:27:ab:2e:fc:06:15:
a3:5e:ae:7c:b1:c0:2f:d6:9e:49:62:b7:b4:79:e3:
34:43:f8:66:d2:9b:bf:b7:4b:69:57:70:74:7b:18:
87:ee:48:e1:4c:ff:91:19:2f:2d:c9:0e:3e:8d:cf:
96:8f:62:4b:cb:ce:7b:2a:3b:3d:11:a8:56:08:6f:
23:96:0b:0c:11:4a:57:5d:2d:3e:20:45:ae:90:b8:
9a:cb:29:33:84:7f:23:3e:b1:17:bd:45:09:52:28:
8d:bd:b3:b6:ba:d2:22:03:e1:7d:31:59:3b:52:53:
16:78:c5:89:47:ed:15:3c:a7:d1:47:da:72:17:38:
b3:8e:11:56:3d:b5:8d:56:4a:9b:f0:77:e0:03:ee:
a5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:95:8C:04:B8:5B:7B:22:02:23:05:20:21:E5:5B:D0:63:DC:49:3F
X509v3 Authority Key Identifier:
keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d8:82:2d:45:07:e5:78:23:d8:b9:df:47:7e:76:f4:a7:93:
f1:09:24:68:f8:f2:9d:a1:c7:e2:1d:ea:99:88:c3:c0:61:25:
81:77:e4:21:ef:a0:bf:78:91:b8:4e:66:85:c3:06:90:2d:13:
aa:c4:86:b7:e2:bc:21:35:38:35:6a:55:d9:aa:19:26:fc:26:
95:93:9d:92:00:24:1c:c2:fc:96:e7:bc:8e:09:2f:b6:10:a9:
07:95:78:8a:dc:0e:bd:8b:a7:cd:29:3e:5c:31:45:7b:3a:6e:
72:fe:44:13:f6:7c:af:63:25:2e:c9:fe:8c:5b:1f:74:27:8f:
43:1e:01:1b:eb:46:b5:e3:d1:22:0b:cc:ee:8e:26:3a:55:f3:
de:83:53:55:87:68:de:01:60:b2:96:f6:5b:34:a2:14:15:7d:
3d:29:53:80:f1:5d:b5:c2:82:f1:25:00:f5:1d:82:dc:e8:6a:
c3:e4:42:26:c6:6a:d4:52:9c:62:84:0b:f0:16:d0:81:1d:80:
ba:c3:3e:9c:09:b2:13:83:00:c7:01:f7:08:6a:e0:33:be:9f:
b4:d2:54:fd:22:84:f6:9c:01:d1:34:b3:8a:ac:0c:a8:c8:d5:
c9:b9:99:d3:98:6a:1d:2b:70:24:3f:52:01:5b:5a:e2:a7:dd:
e3:fb:5e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:41:58 2025 by rpki-client