
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
File: n9e3i11VWv7XZxyRbCbrf_x-LJo.mft (raw, json)
Hash identifier: qsvo1eKxclhad5tv3PoQTEnqEZjKukXEqASAsv5vufU=
Subject key identifier: 83:1D:24:34:B1:67:2C:CF:20:6A:C8:AC:19:2C:B0:75:80:99:90:A6
Authority key identifier: 9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A
Certificate issuer: /CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
Certificate serial: 01984A41593576E8F0CA1D9031E12D4AEF61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
Manifest number: 04FD
Signing time: Sun 27 Jul 2025 05:00:53 +0000
Manifest this update: Sun 27 Jul 2025 05:00:53 +0000
Manifest next update: Mon 28 Jul 2025 05:00:53 +0000
Files and hashes: 1: n9e3i11VWv7XZxyRbCbrf_x-LJo.crl (hash: INOdEgYl/7pI1TLb3TvwcDpWmUfOggIs5oPR7L1dncE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:59:35:76:e8:f0:ca:1d:90:31:e1:2d:4a:ef:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
Validity
Not Before: Jul 27 05:00:53 2025 GMT
Not After : Jul 28 05:00:53 2025 GMT
Subject: CN=831d2434b1672ccf206ac8ac192cb075809990a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:ab:d4:68:de:5f:29:9b:05:c0:24:b4:e5:
08:da:1c:cd:17:5b:c3:01:73:fe:34:ed:09:16:83:
73:bb:70:28:4a:03:d1:34:b2:84:6d:3a:98:2b:42:
93:50:05:31:39:9b:c9:26:45:4e:9c:1b:ec:61:c9:
20:60:cb:e1:71:d3:eb:24:76:0d:07:85:4c:f3:f4:
36:68:ba:e9:55:a0:fc:0f:fb:e3:a2:b0:23:50:9f:
97:ff:76:ff:96:4e:80:04:e5:9e:db:ac:33:d4:2a:
4c:7b:5b:60:74:0b:6f:6e:52:16:03:ce:e6:b7:b3:
58:a3:e6:21:d7:cb:2c:38:36:6b:6c:e1:71:b0:86:
db:af:07:f3:b7:54:25:65:88:b3:f3:bf:67:ca:74:
4f:e5:30:c4:e7:3c:5e:6f:10:9a:8a:41:19:e9:0d:
9a:37:2e:ca:c3:83:64:d8:0b:a3:eb:ee:8e:39:d4:
51:4a:52:7c:d5:c9:d1:c8:8a:5c:3e:d1:96:92:a5:
ae:3c:45:5d:82:39:08:3f:52:7d:d6:9a:da:4d:5d:
98:a8:7e:cc:94:82:a6:a5:c8:f7:4d:6e:d2:a7:ac:
13:1f:06:b6:cc:09:0c:f8:37:17:60:d9:73:f8:9c:
ba:d0:be:1e:5c:48:24:2f:fd:8b:70:e5:d3:3c:55:
bc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1D:24:34:B1:67:2C:CF:20:6A:C8:AC:19:2C:B0:75:80:99:90:A6
X509v3 Authority Key Identifier:
keyid:9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2a:33:a9:3e:f1:c5:7e:90:b9:e8:10:76:15:c1:ce:7e:09:
53:68:98:ed:be:65:98:67:93:db:eb:61:69:7d:88:c3:eb:6f:
9f:c0:dd:81:a5:97:ff:8b:81:cd:04:87:59:15:9c:8b:3c:f6:
3c:2a:a7:0f:d6:32:6d:42:ed:0b:b3:23:be:f7:18:12:fc:fc:
21:cd:ee:37:76:d0:c0:cd:f1:38:ad:14:76:80:0b:97:9b:2c:
6c:84:38:b4:6c:a8:73:9e:06:d1:34:01:8d:46:40:09:c3:5c:
d1:3d:70:06:a3:87:f2:30:17:76:ac:70:be:65:66:16:ed:bd:
57:99:a6:aa:b1:3a:d4:d9:5e:38:21:d4:0b:c5:51:9e:6c:9a:
03:48:ab:fe:83:69:9a:17:1e:c8:44:94:13:44:70:b8:63:0a:
10:7c:2d:36:66:c4:0b:b0:d8:10:1b:1b:12:59:39:cf:40:d2:
b0:4b:0f:73:a8:ea:d5:ae:53:7d:25:16:ee:a2:09:74:a2:72:
ae:ea:59:6e:16:35:0d:6d:c1:09:13:96:42:01:ee:0c:2a:e6:
2a:9f:f2:21:21:ff:49:31:7e:cf:99:6e:1d:69:d4:7b:7e:e1:
2c:4d:01:a5:bd:7b:64:a9:a7:59:5f:c1:3e:70:b0:48:04:65:
32:ad:db:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:24:03 2025 by rpki-client