Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
File: n98bEcryuCRFMXghJa6TOudpn3Y.mft (raw, json)
Hash identifier: Pei0HrFw86bzyMWJrjpMbS+LnEjGuvYfHienuCsyz3A=
Subject key identifier: 42:FE:5E:CD:D9:A8:C0:95:36:60:87:06:58:B0:8C:EA:71:82:B6:EE
Authority key identifier: 9F:DF:1B:11:CA:F2:B8:24:45:31:78:21:25:AE:93:3A:E7:69:9F:76
Certificate issuer: /CN=9fdf1b11caf2b8244531782125ae933ae7699f76
Certificate serial: 01984852BEA82E9F0B1D31E78E16C7E74D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
Manifest number: 15CE
Signing time: Sat 26 Jul 2025 20:00:38 +0000
Manifest this update: Sat 26 Jul 2025 20:00:38 +0000
Manifest next update: Sun 27 Jul 2025 20:00:38 +0000
Files and hashes: 1: n98bEcryuCRFMXghJa6TOudpn3Y.crl (hash: 99YKkLmslXFXaBFPQQbOrqRrCz2aBUOTAxagWNke4OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:be:a8:2e:9f:0b:1d:31:e7:8e:16:c7:e7:4d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fdf1b11caf2b8244531782125ae933ae7699f76
Validity
Not Before: Jul 26 20:00:38 2025 GMT
Not After : Jul 27 20:00:38 2025 GMT
Subject: CN=42fe5ecdd9a8c0953660870658b08cea7182b6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:82:81:06:ab:57:87:cc:bd:5f:05:f8:93:6e:
22:59:00:36:98:6a:05:b3:e6:7f:38:e8:e3:61:30:
aa:71:ad:4d:6a:17:06:f9:55:01:9f:8a:e1:32:b7:
18:41:ea:33:81:5b:af:42:c9:1c:e9:0b:73:b3:68:
a2:11:94:21:9a:a6:ad:02:bd:78:77:ca:b3:01:cf:
62:1f:36:0f:fe:fd:4c:a8:9b:ce:af:3f:13:8f:c3:
9b:d8:63:5c:35:27:ac:2a:e4:f4:86:28:14:29:fe:
62:10:3f:51:89:9b:14:76:de:c8:b6:30:af:6d:70:
c9:34:a1:57:51:f0:a1:fa:53:d8:44:49:8d:49:2e:
75:c2:84:98:02:3f:8c:cd:7f:f3:5b:38:02:05:99:
33:62:d3:9a:28:ba:be:54:d7:b0:08:1e:e2:fd:e2:
58:73:e6:9e:f1:83:a7:80:73:e1:57:b3:44:ce:35:
8f:f9:dd:67:c0:3f:98:34:36:c9:f9:ec:7b:6f:0b:
89:49:b3:82:69:5e:df:b1:57:d7:85:4b:93:9b:7d:
21:bb:d5:f8:fc:24:ad:dd:17:84:ea:84:33:63:68:
4f:47:b5:b5:03:46:2f:82:41:9d:3d:ba:c4:d5:09:
82:fb:4b:2e:2f:cb:ce:11:d2:5f:81:29:59:ea:e8:
e2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FE:5E:CD:D9:A8:C0:95:36:60:87:06:58:B0:8C:EA:71:82:B6:EE
X509v3 Authority Key Identifier:
keyid:9F:DF:1B:11:CA:F2:B8:24:45:31:78:21:25:AE:93:3A:E7:69:9F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:99:a1:58:5b:75:ab:83:d1:20:63:b9:d1:3a:9f:f2:64:df:
11:d9:ea:8f:06:28:bd:19:f1:da:2c:f2:fd:ad:7f:b9:2e:d6:
9d:cc:8b:06:8d:bf:5b:a7:f3:df:9a:02:22:2f:bc:2b:99:57:
2c:48:d1:f4:f8:b6:27:84:fe:11:97:9d:bc:33:33:dd:0b:64:
20:ae:03:ef:19:9f:f0:18:35:70:2b:42:fb:0b:19:b7:08:1f:
dc:5a:30:9b:c7:b1:6e:e8:fa:b4:86:97:d5:66:da:d9:5a:ef:
47:27:23:21:7d:06:a5:f0:8c:b8:9f:6f:12:12:c5:f1:ed:88:
02:ca:a0:e6:64:6d:dc:9b:c1:69:b7:3d:0a:78:a7:8e:7f:35:
e2:55:e7:ae:15:2a:25:c1:26:5e:d7:bf:ef:90:4f:74:66:8a:
14:b3:e0:b2:20:42:cb:22:b6:32:8e:b7:59:9a:bc:f7:b3:bf:
5c:bd:82:a4:95:07:5b:21:b1:2e:65:14:c5:64:36:ef:fe:ea:
b6:e3:e9:96:73:43:5b:d0:d3:49:76:d4:91:6f:bc:b7:72:42:
90:f8:b7:a6:99:1a:2b:23:11:0e:5d:d2:d5:d3:ce:aa:2f:86:
39:39:21:0c:43:d6:52:b9:fd:78:22:5c:b1:79:82:39:a3:18:
ba:ad:47:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:51:41 2025 by rpki-client