Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a0bfd9-5fa7-448d-a514-8d1bac63efc6/1/9QtjTgs8aefagY27mc3jjqhJj3E.mft
File: 9QtjTgs8aefagY27mc3jjqhJj3E.mft (raw, json)
Hash identifier: ruCOdj2BaC2WkZhV75S9jWf8cytcuojx5eaVowk2LLU=
Subject key identifier: DD:B4:5A:37:B5:EF:19:A7:1E:CC:C1:F4:4D:F7:CD:9B:6B:5C:FE:A7
Authority key identifier: F5:0B:63:4E:0B:3C:69:E7:DA:81:8D:BB:99:CD:E3:8E:A8:49:8F:71
Certificate issuer: /CN=f50b634e0b3c69e7da818dbb99cde38ea8498f71
Certificate serial: 01984B54D6FCC635BA2480B100DA8CDABAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtjTgs8aefagY27mc3jjqhJj3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a0bfd9-5fa7-448d-a514-8d1bac63efc6/1/9QtjTgs8aefagY27mc3jjqhJj3E.mft
Manifest number: 0AFA
Signing time: Sun 27 Jul 2025 10:01:47 +0000
Manifest this update: Sun 27 Jul 2025 10:01:47 +0000
Manifest next update: Mon 28 Jul 2025 10:01:47 +0000
Files and hashes: 1: 9QtjTgs8aefagY27mc3jjqhJj3E.crl (hash: oMiht1VKLvdxS3uEsctvC/f8mq/LWadCtfC7NvDcKMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a0bfd9-5fa7-448d-a514-8d1bac63efc6/1/9QtjTgs8aefagY27mc3jjqhJj3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a0bfd9-5fa7-448d-a514-8d1bac63efc6/1/9QtjTgs8aefagY27mc3jjqhJj3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QtjTgs8aefagY27mc3jjqhJj3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:d6:fc:c6:35:ba:24:80:b1:00:da:8c:da:ba:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50b634e0b3c69e7da818dbb99cde38ea8498f71
Validity
Not Before: Jul 27 10:01:47 2025 GMT
Not After : Jul 28 10:01:47 2025 GMT
Subject: CN=ddb45a37b5ef19a71eccc1f44df7cd9b6b5cfea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:0f:64:42:45:f4:58:0b:42:77:c9:57:30:
38:df:51:81:7f:46:28:f4:5e:c0:98:2e:9a:6d:65:
2c:e7:e8:a7:e6:68:70:15:af:e8:64:7b:bd:f0:bc:
47:22:05:e7:f7:a0:56:b2:53:b8:79:78:4b:3f:87:
78:21:72:c0:e9:c4:ca:8e:e3:bc:ef:00:22:4e:b0:
c0:08:83:e3:17:c0:02:c4:72:eb:ba:16:67:3e:a0:
2e:bd:b6:d7:3e:f8:58:1d:06:f1:8a:14:6e:8f:88:
e6:e2:e1:c6:2f:fb:d4:a0:31:f6:cd:4d:7f:d9:03:
0f:8a:fe:33:76:7f:1f:79:12:b2:36:72:8a:87:e3:
1f:39:fd:c0:0d:b3:a1:99:c5:f3:b7:5e:d0:8d:28:
d6:92:63:cd:f5:8d:0e:c9:08:ab:1e:45:1f:5a:83:
60:5e:4a:8c:ae:fb:c6:b0:d8:7d:32:a3:ab:f5:a1:
f3:3d:38:eb:25:1c:fc:3c:3e:27:e5:65:8c:ba:be:
03:bc:95:8f:79:b3:9f:61:60:96:30:c5:cd:4b:f6:
f4:5b:b0:87:10:50:73:e0:19:c1:0b:7d:b4:85:10:
a2:8b:50:06:d1:12:cb:24:a5:d0:78:7b:c1:18:e7:
6c:27:3f:d7:00:f6:79:46:e4:63:04:4e:e5:99:6f:
89:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B4:5A:37:B5:EF:19:A7:1E:CC:C1:F4:4D:F7:CD:9B:6B:5C:FE:A7
X509v3 Authority Key Identifier:
keyid:F5:0B:63:4E:0B:3C:69:E7:DA:81:8D:BB:99:CD:E3:8E:A8:49:8F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtjTgs8aefagY27mc3jjqhJj3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a0bfd9-5fa7-448d-a514-8d1bac63efc6/1/9QtjTgs8aefagY27mc3jjqhJj3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a0bfd9-5fa7-448d-a514-8d1bac63efc6/1/9QtjTgs8aefagY27mc3jjqhJj3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:52:a2:69:ea:36:01:fc:c4:2c:ed:b2:3c:74:0b:34:83:0a:
a8:08:72:e9:f2:24:22:e4:b6:80:82:ac:15:d1:74:39:ee:31:
82:23:a5:b3:b3:ba:ee:b4:29:29:eb:9d:d7:95:dc:34:3d:99:
00:4a:76:7e:fd:6d:26:d2:3a:81:b1:02:85:0e:9e:56:24:9f:
9a:fd:93:df:d8:f9:c6:9b:28:7d:74:9c:8b:bf:00:89:55:b4:
05:f4:e3:00:4b:bb:a9:1c:b8:7e:ed:8e:1a:c7:d8:a0:ce:ea:
0b:d3:7f:8a:55:f4:0f:ff:90:32:c0:0e:46:93:13:c2:9c:71:
d1:18:f4:22:2c:00:e8:a9:8a:2a:9f:33:cb:56:8b:0a:2f:47:
65:fc:e1:58:e8:45:a8:06:af:95:7d:3e:2d:a9:e4:27:54:58:
6b:33:a1:c9:35:37:4c:ee:f2:f7:e7:b0:8e:22:7e:0e:44:27:
0f:80:4c:ca:0b:39:78:96:3c:ec:62:b0:4e:56:8e:54:16:72:
93:22:1e:65:f4:2c:0a:80:00:1a:36:da:14:f9:3f:4a:30:2d:
d8:17:85:a8:69:cd:35:84:47:7d:e3:f5:47:ef:39:89:6e:c4:
de:18:ee:68:07:10:ff:e8:6b:f4:14:46:da:c1:a2:9f:ba:28:
35:8d:19:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:21:09 2025 by rpki-client