Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
File: INS9SZ9YSUrA6CJjtVIKLGTWR34.mft (raw, json)
Hash identifier: FYEJCxbT/b846VQoRssiulOlqPlMlgPAcPAxhOwGmvo=
Subject key identifier: 12:9E:87:CB:12:45:8B:3A:20:25:E2:84:55:8C:3B:A4:A1:77:15:27
Authority key identifier: 20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
Certificate issuer: /CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Certificate serial: 019847E4F01F085FFA3B5634806FA3388BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
Manifest number: 1592
Signing time: Sat 26 Jul 2025 18:00:42 +0000
Manifest this update: Sat 26 Jul 2025 18:00:42 +0000
Manifest next update: Sun 27 Jul 2025 18:00:42 +0000
Files and hashes: 1: INS9SZ9YSUrA6CJjtVIKLGTWR34.crl (hash: vwQBsvF2Y++cDFni/es3yKDLrRlVgYJil53o8H2NyGk=)
2: h_lcjhsZRd-WoNkwUeJTA-cn-HU.roa (hash: MoTuYke9XnON66W6lzgS1xcgPTaCQPNgcBaF3y/k338=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:f0:1f:08:5f:fa:3b:56:34:80:6f:a3:38:8b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Validity
Not Before: Jul 26 18:00:42 2025 GMT
Not After : Jul 27 18:00:42 2025 GMT
Subject: CN=129e87cb12458b3a2025e284558c3ba4a1771527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:ab:33:ee:cf:68:98:73:c1:28:b5:2b:98:
61:e9:2d:11:dd:d8:ce:f4:a9:52:eb:a4:f8:2d:7f:
e3:cd:cc:ea:dc:37:e9:61:26:fa:73:70:11:05:59:
84:0f:06:eb:f8:7c:0c:4c:de:4e:86:6e:13:ea:ca:
d6:a7:6a:11:36:21:51:7c:b0:35:90:59:8a:30:3b:
16:b9:d5:33:ef:02:ea:ef:d7:77:3c:a7:3f:38:20:
f1:15:65:99:82:28:0c:a3:b9:22:61:e6:57:23:a6:
d3:34:b4:77:ca:2a:f7:68:d1:e8:0b:dd:45:af:82:
1b:d0:e7:98:ad:e5:ff:17:05:d2:1c:01:ff:95:25:
a1:99:8d:42:c7:b2:a1:3e:e1:63:a2:29:bf:c1:98:
d8:61:97:3b:0b:67:9e:0e:45:81:95:83:6d:6a:6d:
c6:81:7f:49:66:2f:71:8b:69:3c:ee:c9:1c:d7:d4:
40:e2:e4:4e:33:6a:14:3c:0b:3f:fb:57:b0:00:b4:
86:94:21:49:4a:d2:da:0f:52:6e:fb:d1:cb:d6:9e:
bb:b5:b5:a9:06:cf:a0:e4:78:fd:61:8b:11:e3:40:
53:5d:b5:8d:4a:81:41:bd:2f:b2:66:4e:94:24:5b:
e4:87:1a:48:96:7b:74:d2:a5:db:23:13:29:76:0a:
26:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9E:87:CB:12:45:8B:3A:20:25:E2:84:55:8C:3B:A4:A1:77:15:27
X509v3 Authority Key Identifier:
keyid:20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f9:fc:b0:90:5e:7f:a5:55:5a:ec:57:aa:4a:e1:c7:a0:ea:
78:fd:3a:84:05:90:4c:e0:03:77:7c:17:0c:e6:ca:1f:67:33:
d3:b9:55:cf:35:9d:ac:89:5e:ba:6b:08:31:03:54:56:f1:17:
f7:f0:71:80:7e:47:32:9e:b3:4b:98:6f:ad:96:35:22:99:2f:
bf:53:c2:ea:49:60:e8:a0:16:b0:13:96:dc:32:25:5d:88:36:
a6:31:69:83:a2:09:84:cb:27:1d:85:14:24:15:0b:6d:83:5f:
65:50:bb:7e:38:04:d8:d2:bc:4e:38:44:4a:b0:ed:3c:30:c1:
e9:74:57:7d:35:73:c3:6f:51:45:90:20:ae:bf:1b:36:c9:5a:
94:29:71:97:9a:6f:b4:d7:78:2e:0b:8c:71:cf:bf:9f:7f:f6:
c9:c3:9d:cd:bb:5d:4d:25:c8:70:4a:f1:95:54:5c:f0:b7:45:
45:84:db:5a:db:6d:3e:39:c5:b6:f0:ca:86:f2:4e:44:63:ea:
67:c3:07:a9:c0:96:94:93:06:32:16:f5:3d:34:ea:1d:8a:85:
39:ea:3b:db:5b:d8:9e:24:45:4a:fc:48:f8:ec:27:da:d2:54:
81:00:3d:93:f3:d7:7a:8e:d0:21:b9:15:b2:53:4f:87:95:0e:
ee:78:e5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:39:53 2025 by rpki-client