Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
File: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft (raw, json)
Hash identifier: uT3sOoIbjYrNWIxiouotPylZEXMmhPP+mPX8Rr+pf74=
Subject key identifier: 55:AD:33:24:BB:F9:ED:E9:04:E6:CE:43:66:36:79:B4:CB:2C:48:6F
Authority key identifier: 08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
Certificate issuer: /CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Certificate serial: 019848C0E45FB5A772170B2C747BBAB87B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 22:00:57 +0000
Manifest this update: Sat 26 Jul 2025 22:00:57 +0000
Manifest next update: Sun 27 Jul 2025 22:00:57 +0000
Files and hashes: 1: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl (hash: W/abFU/jUJrZi7Kvyn4NwQb28pZxnNhS3I4joZ1hNKM=)
2: QBvaKUProLFwUadr8JLWlBh2UrE.roa (hash: xpxsGWmbgKM4U5yVDwdEgOHu1jns29KEhnZ49U4Y2OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:e4:5f:b5:a7:72:17:0b:2c:74:7b:ba:b8:7b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Validity
Not Before: Jul 26 22:00:57 2025 GMT
Not After : Jul 27 22:00:57 2025 GMT
Subject: CN=55ad3324bbf9ede904e6ce43663679b4cb2c486f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:39:f1:b0:c4:e1:24:a4:c5:66:23:63:aa:94:
b2:82:0b:cf:8b:8e:3e:2e:94:67:03:7b:75:1d:e7:
ba:a9:23:f9:84:21:65:d8:be:15:1e:7d:98:fa:43:
72:5a:41:8c:8c:d9:bc:8e:34:ea:79:16:17:b1:54:
54:0f:b5:c7:09:fd:96:d0:30:76:b3:ad:2e:d3:88:
d4:7b:d8:a5:3e:21:ec:21:51:4c:46:09:12:98:54:
c9:12:3a:05:05:3d:58:c8:a5:44:9a:2c:ab:28:d5:
af:a8:52:90:b5:a5:d8:77:09:87:fb:18:f1:f4:52:
a8:3e:fa:71:c8:bb:7c:00:e3:c7:40:13:25:d4:5a:
57:bb:73:21:e1:49:ed:c9:bb:a6:41:85:b5:aa:87:
a8:7d:ca:b6:c2:c0:85:64:db:f6:f5:e9:30:81:17:
48:8c:84:d7:80:8c:ff:71:75:64:67:0f:ef:b5:82:
56:10:b0:0e:c4:84:cb:46:39:50:68:19:13:7c:e0:
cc:c8:8e:4a:42:dd:c0:b0:77:a6:1d:00:1e:d6:61:
c8:8e:a4:34:7b:66:66:5f:17:42:d1:82:e9:36:b2:
7b:ca:c3:c9:e5:04:85:9a:97:bc:cc:47:f2:a5:ff:
62:d5:c2:0b:75:32:cd:44:e2:85:fe:19:38:ed:24:
11:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AD:33:24:BB:F9:ED:E9:04:E6:CE:43:66:36:79:B4:CB:2C:48:6F
X509v3 Authority Key Identifier:
keyid:08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6b:06:ca:ff:d8:58:36:34:ab:bc:00:56:2b:ed:16:5b:84:
c7:22:a9:32:26:86:9f:1c:8c:e4:73:8a:85:dd:42:05:9e:88:
5d:54:95:e0:81:cf:39:a4:16:dc:15:01:c2:93:2a:9d:87:33:
a8:c5:e9:7b:68:7f:ed:2d:cf:18:54:ec:cf:5f:d7:1e:29:3d:
df:df:c6:3a:b4:e2:bd:9d:4a:db:ff:08:2d:75:52:60:ed:ac:
a0:57:38:4d:21:8e:1b:6f:5c:31:c5:73:82:99:53:93:ba:47:
ae:66:86:e5:95:90:e8:76:50:ef:22:28:b6:b5:05:2b:de:e9:
8c:b2:15:55:aa:5c:94:62:68:6d:9e:e1:1f:06:08:fa:2d:97:
8a:d5:98:9e:50:f4:f3:93:e5:9f:a3:6c:df:b6:7c:7f:81:75:
40:af:cc:65:95:e2:29:fa:22:4e:4e:fa:7e:ed:a7:33:da:c6:
f4:76:e8:51:9b:30:28:21:4c:ae:e3:b2:de:a7:4f:46:0e:a3:
6c:a3:29:19:6a:65:01:be:8b:c0:42:0a:83:c5:52:76:62:a7:
59:4a:44:2c:ae:0a:22:d4:79:6d:ec:18:30:00:89:3e:73:9f:
0b:76:06:24:0a:fa:5e:ad:fe:84:ec:83:b8:49:bb:de:9f:2c:
14:9a:db:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:30:26 2025 by rpki-client