Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.mft
File: n34J7YuBilTMw-tCb2elWhOKuH0.mft (raw, json)
Hash identifier: 3nKNt1HkD8lPNC+IZrC8N0yNkS5UUHnjvknjaNz6cWE=
Subject key identifier: D7:42:A5:AA:63:B6:46:5C:DA:53:59:80:18:74:15:A5:28:A6:61:EA
Authority key identifier: 9F:7E:09:ED:8B:81:8A:54:CC:C3:EB:42:6F:67:A5:5A:13:8A:B8:7D
Certificate issuer: /CN=9f7e09ed8b818a54ccc3eb426f67a55a138ab87d
Certificate serial: 0198496597A67AED1AB8EF171604465824C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n34J7YuBilTMw-tCb2elWhOKuH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.mft
Manifest number: 0A0D
Signing time: Sun 27 Jul 2025 01:00:51 +0000
Manifest this update: Sun 27 Jul 2025 01:00:51 +0000
Manifest next update: Mon 28 Jul 2025 01:00:51 +0000
Files and hashes: 1: n34J7YuBilTMw-tCb2elWhOKuH0.crl (hash: xtfu6cS4vRiFjzlKHXWg4LpmlBk5jih0XDxW4AjhRIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/n34J7YuBilTMw-tCb2elWhOKuH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:97:a6:7a:ed:1a:b8:ef:17:16:04:46:58:24:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f7e09ed8b818a54ccc3eb426f67a55a138ab87d
Validity
Not Before: Jul 27 01:00:51 2025 GMT
Not After : Jul 28 01:00:51 2025 GMT
Subject: CN=d742a5aa63b6465cda535980187415a528a661ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:06:c5:f6:8e:38:ac:70:b5:39:73:3c:55:d9:
50:ea:32:32:c7:17:d5:ff:1d:ea:87:d5:f8:32:0e:
97:c2:bc:b0:1c:48:ed:2d:ad:a8:b6:a8:88:a0:fc:
c9:12:fb:7a:fd:69:71:ca:10:d9:cb:d2:3e:ef:80:
bd:62:3c:cf:05:a4:b3:80:bf:4e:d2:20:b2:4a:8e:
1f:1e:3b:0a:70:8e:c5:63:20:05:53:98:f4:f5:d4:
1b:4b:80:de:75:87:58:0c:25:31:db:30:c9:87:b1:
0e:47:75:86:fa:42:35:35:5a:f4:45:22:7b:d8:ca:
83:88:ad:8a:b3:af:6b:7b:56:26:d7:33:d5:c3:6f:
d4:b9:94:62:88:f6:f0:f7:01:f5:af:05:a0:51:ce:
9b:51:e2:e5:ab:b0:de:16:ff:c2:ce:91:1d:d7:1d:
f1:7e:9b:78:27:de:bb:3d:29:92:e1:23:87:ee:52:
46:dd:e7:53:97:63:37:54:5f:c0:a6:d4:3b:3e:b8:
3a:db:c3:f0:0c:6f:9e:b3:e1:55:41:00:83:a0:24:
b4:3e:5e:e4:c4:6f:10:de:54:88:3c:2b:3c:f3:c6:
79:af:98:0a:01:c2:00:56:05:52:0e:d7:3d:c4:29:
94:54:86:76:37:24:95:05:66:ae:7e:8e:5b:67:29:
63:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:42:A5:AA:63:B6:46:5C:DA:53:59:80:18:74:15:A5:28:A6:61:EA
X509v3 Authority Key Identifier:
keyid:9F:7E:09:ED:8B:81:8A:54:CC:C3:EB:42:6F:67:A5:5A:13:8A:B8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n34J7YuBilTMw-tCb2elWhOKuH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:43:d1:26:bb:3a:76:9d:d5:e0:57:93:ec:92:12:fe:b0:c9:
db:eb:74:ff:ce:c4:5d:17:c8:eb:ed:bf:e0:1c:71:5e:c8:48:
6b:92:31:b7:c3:b2:ce:29:07:d4:ce:74:f9:d9:c8:f7:3c:ee:
e4:fd:84:fb:cc:f1:f4:fe:3d:0a:a1:68:79:a3:23:8f:bc:c4:
ef:bf:16:91:7e:39:a9:ff:e7:1a:c0:9b:18:a2:af:10:fd:6b:
89:2b:65:0b:03:41:f1:b1:e0:2a:f6:36:a5:68:e6:d7:2a:1a:
3b:63:80:d8:d7:24:4d:71:f1:c6:38:ba:19:7e:92:5c:0a:05:
ce:00:b0:33:b6:b3:28:10:b7:fe:10:f6:ff:36:fa:8c:b9:03:
24:19:2c:20:3a:89:bf:57:64:27:59:71:a6:59:8e:4b:17:c0:
32:e7:e6:3f:2a:2d:bc:b4:cc:a8:85:f5:b0:d1:89:1d:af:e9:
7f:42:62:ec:6b:df:45:34:2b:0b:71:23:05:8e:d3:ee:51:51:
d4:dc:6a:1e:99:ad:08:e5:3c:4a:5d:68:29:bd:28:50:29:88:
69:92:8a:fa:38:c0:13:bc:91:9d:81:64:2e:23:46:db:6b:cc:
45:25:a8:fc:be:91:32:f1:0a:9f:43:09:e1:40:d1:2d:4a:9d:
32:fd:fb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:25:36 2025 by rpki-client