Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
File: 9bJzfl2X4RCOsEmQTemxbzauseA.mft (raw, json)
Hash identifier: V6zzJM/eHPLVErvLnHMgCCO/qCCpRND4ehVud3yDbQc=
Subject key identifier: 39:34:71:16:C1:49:5B:81:A1:8C:14:FE:25:BB:BD:7F:3E:70:DA:6C
Authority key identifier: F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0
Certificate issuer: /CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0
Certificate serial: 019845883A43DA23D0AFECB487AFCB57EF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
Manifest number: 15FD
Signing time: Sat 26 Jul 2025 07:00:12 +0000
Manifest this update: Sat 26 Jul 2025 07:00:12 +0000
Manifest next update: Sun 27 Jul 2025 07:00:12 +0000
Files and hashes: 1: 9bJzfl2X4RCOsEmQTemxbzauseA.crl (hash: whY/1sLmNBmC0TcBe2CWLHEsJNu+9GXr7VMekk1hWcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:3a:43:da:23:d0:af:ec:b4:87:af:cb:57:ef:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0
Validity
Not Before: Jul 26 07:00:12 2025 GMT
Not After : Jul 27 07:00:12 2025 GMT
Subject: CN=39347116c1495b81a18c14fe25bbbd7f3e70da6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:ea:0f:03:20:49:d7:15:46:be:03:78:29:
22:43:37:bb:ef:32:c8:0c:0c:2a:0f:1f:22:06:11:
c9:20:5a:53:ac:73:ee:0f:6a:eb:f3:b9:89:e7:f7:
5d:13:4b:c8:43:e4:fd:af:67:ae:ee:ef:54:de:5d:
e4:91:65:8b:c4:02:cd:e8:90:40:3c:79:e2:e5:51:
56:2a:5a:5b:07:26:4c:39:cf:7c:c3:ce:68:33:91:
58:8f:f5:52:3b:7b:75:de:44:7d:48:c0:83:f4:3e:
28:dd:45:6c:34:b1:e7:8e:d5:7e:08:26:91:41:fa:
d2:ea:06:1e:76:c5:31:cb:e3:4f:b8:ad:d9:dc:45:
1f:2d:c4:a5:e6:25:36:f0:23:64:eb:a0:cc:69:41:
cc:ee:d2:43:d3:2f:de:ca:e5:46:2c:1e:35:29:50:
d6:52:3a:79:bd:b2:ac:57:5b:0b:55:4a:cb:88:a6:
52:2e:26:48:f8:b1:c1:a7:ed:f6:64:aa:36:8f:1b:
ce:5e:a9:37:34:d3:60:69:6d:7f:cf:ec:a1:57:6f:
64:1a:34:68:2a:de:18:f3:f5:6d:cb:c4:13:0f:7c:
57:15:24:63:da:b9:e8:b2:ec:3f:da:9e:5d:23:0d:
03:07:f2:8a:58:26:1b:f2:5c:b6:88:cc:77:90:f5:
48:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:34:71:16:C1:49:5B:81:A1:8C:14:FE:25:BB:BD:7F:3E:70:DA:6C
X509v3 Authority Key Identifier:
keyid:F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:43:c4:29:e9:49:16:79:72:6a:a3:5f:cc:3f:b7:dd:4d:fd:
6b:96:34:18:24:42:28:8a:ab:56:cf:97:fb:f6:a4:a6:d3:fc:
69:b9:71:f0:fb:a2:2a:32:eb:a4:a2:48:5d:61:00:58:58:bd:
e3:fd:01:42:1a:29:12:77:5a:30:0b:96:81:5b:db:01:62:44:
c3:56:23:f5:02:1f:18:db:a8:b3:ab:b3:e6:ab:ec:72:29:66:
99:5b:90:17:cf:3e:2b:9d:b0:3e:1e:61:9c:52:8c:06:ba:12:
fa:99:fa:e5:34:38:2f:e6:19:07:34:0a:56:9c:39:84:16:9c:
da:3b:8a:ed:69:cc:25:b8:ee:95:24:81:70:62:85:e8:d6:9a:
d6:df:4b:2a:54:ec:1c:cc:bd:95:56:31:e0:e3:4b:31:a9:38:
92:06:ea:81:a3:73:01:0b:05:c6:79:9a:44:8e:9a:00:e5:9b:
47:4d:d8:65:c7:21:cb:a6:81:79:e5:3a:1b:ff:44:99:56:b5:
af:e9:0c:64:42:cf:c2:c4:68:f0:0c:81:2c:7a:ef:52:88:a5:
79:34:7a:4d:bd:96:39:0f:76:3b:2c:c8:b5:77:c0:e7:7b:f7:
34:03:c5:8d:8a:a3:44:51:b0:6e:f8:07:46:55:00:b0:b8:36:
11:c6:4c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:32:14 2025 by rpki-client