Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
File: 9bdVrRo8ekUCu8PqNMdba85hyUw.mft (raw, json)
Hash identifier: EDLJlzzIVndL3PVCvDSRxxTFqR3Kon3t9kaaFC3DsLU=
Subject key identifier: AD:3D:ED:7D:FE:5E:28:BB:63:EB:4F:29:ED:4E:BC:B6:62:97:0E:D0
Authority key identifier: F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
Certificate issuer: /CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Certificate serial: 01984852A5417DD68390405C774CF959FAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
Manifest number: 15FD
Signing time: Sat 26 Jul 2025 20:00:32 +0000
Manifest this update: Sat 26 Jul 2025 20:00:32 +0000
Manifest next update: Sun 27 Jul 2025 20:00:32 +0000
Files and hashes: 1: 9bdVrRo8ekUCu8PqNMdba85hyUw.crl (hash: D2SDcDsQYTGZmwPYPvWW+cBxfQYupofwmx5g+Bc1Xgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:a5:41:7d:d6:83:90:40:5c:77:4c:f9:59:fa:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Validity
Not Before: Jul 26 20:00:32 2025 GMT
Not After : Jul 27 20:00:32 2025 GMT
Subject: CN=ad3ded7dfe5e28bb63eb4f29ed4ebcb662970ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:92:11:b2:0c:04:f8:49:c4:65:7e:e8:f7:0e:
44:da:69:00:54:93:13:e6:ec:3f:90:cd:ae:40:d9:
fa:15:aa:49:24:85:ad:35:20:ac:f1:23:57:1e:d2:
92:6f:5c:0c:80:09:7f:fe:6c:54:29:7c:b4:3f:f8:
d3:97:43:d0:d1:b3:69:bd:d6:d7:be:8c:56:86:a4:
bd:69:01:a2:bd:f6:3f:f4:12:cd:31:cd:36:af:1c:
44:fe:16:0b:39:56:1c:ea:d3:f2:77:e0:dd:3b:7f:
dc:8c:bd:97:f4:1a:bd:cd:33:f5:b7:17:fb:a0:c4:
1a:23:89:70:1c:61:dd:90:21:c0:bd:b3:24:22:df:
79:39:48:8b:7c:95:85:04:9e:ce:de:1d:dc:11:7d:
e0:27:9f:52:ce:0b:95:cf:25:6e:6b:ed:ab:94:8d:
9f:da:92:50:8f:8f:a8:bb:f4:9b:71:d4:84:25:d4:
71:9c:61:71:4d:fe:98:d5:36:4b:d4:cd:38:9b:38:
c3:09:f9:62:67:ac:94:a5:d5:d3:0a:60:3d:5e:15:
cc:e2:3a:fc:71:70:c4:4f:27:49:2d:3a:e7:d0:13:
d0:29:62:3b:91:a4:7d:af:f8:3b:00:9b:1d:cb:e5:
bf:38:e4:84:c2:c9:e7:d1:28:fd:74:13:1a:98:d8:
05:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3D:ED:7D:FE:5E:28:BB:63:EB:4F:29:ED:4E:BC:B6:62:97:0E:D0
X509v3 Authority Key Identifier:
keyid:F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:35:a3:20:f3:ed:2a:3a:df:3a:60:46:50:9a:d3:04:82:38:
dc:01:b0:af:fb:d0:72:8f:a3:ca:48:c0:3a:f4:1f:4c:91:68:
dd:0e:36:74:0b:98:77:25:2d:92:e4:4a:3f:3c:bf:63:ac:d0:
d4:8f:1e:fe:a7:52:8b:4f:d8:36:d1:42:42:8a:13:50:44:56:
ed:a9:ab:75:b0:66:a2:4d:ba:6d:59:0f:2c:df:10:f2:50:46:
31:dc:11:55:77:3b:46:a8:2c:60:bd:1b:f8:e4:17:92:a2:eb:
2c:bd:6d:c4:c4:26:e1:af:2c:a5:06:e4:21:97:f4:11:d6:1f:
01:56:37:01:38:be:18:75:90:a9:21:59:b5:bc:b6:df:e4:b7:
55:7f:30:06:63:c1:e9:42:50:92:e7:25:2d:48:06:90:ef:cd:
b3:17:36:14:c3:49:67:95:e2:65:9e:f1:73:e5:2a:b4:dd:8d:
ba:31:8f:70:09:0a:74:e5:77:66:3a:60:df:6d:70:9e:d0:ea:
9b:20:67:8b:8f:bd:08:7e:85:c1:91:a6:34:3d:80:e4:90:a4:
d9:2c:ea:0a:64:ea:c7:d9:59:50:b9:09:68:85:78:82:af:47:
af:d4:5c:24:94:a0:08:52:20:ed:c8:3f:24:84:59:a8:ae:c0:
8c:ba:cb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:30:49 2025 by rpki-client