
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
File: 9l50I9P3sbLnrMG6HO4CQLfWedY.mft (raw, json)
Hash identifier: JisKuBXuEki4iNVK5ajYBTttQTLKfmsGfEBbhAF6qTU=
Subject key identifier: AD:22:04:B7:4C:36:B9:4A:37:E3:40:99:02:8A:50:62:54:BA:4F:DA
Authority key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Certificate issuer: /CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Certificate serial: 01984AAEAC76E4B145CA7FF39F0994A3A793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 07:00:17 +0000
Manifest this update: Sun 27 Jul 2025 07:00:17 +0000
Manifest next update: Mon 28 Jul 2025 07:00:17 +0000
Files and hashes: 1: 9l50I9P3sbLnrMG6HO4CQLfWedY.crl (hash: 7oEB9AQ4V01aUJNHupoA98FvzEOsPY+KTjTJ1aKqDkM=)
2: FAJKZDo6nLNipexAJT8L9FAGXrE.roa (hash: NVIidy7uobZX7hs2QRQ052g+pZeZGSMOgKQJmZ0nDuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:ac:76:e4:b1:45:ca:7f:f3:9f:09:94:a3:a7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Validity
Not Before: Jul 27 07:00:17 2025 GMT
Not After : Jul 28 07:00:17 2025 GMT
Subject: CN=ad2204b74c36b94a37e34099028a506254ba4fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:86:e1:7e:dc:7d:e9:29:01:30:8c:f2:f7:
93:e7:28:a3:df:56:b1:ad:35:e7:7d:d0:95:d9:95:
7b:16:b6:26:85:69:5d:79:c5:13:41:49:1e:c1:6b:
3f:77:6a:6e:2f:6e:51:46:0e:d5:87:a4:c1:cc:b2:
53:fd:aa:05:b0:9b:2c:d0:a4:83:b6:1f:49:e1:03:
97:57:16:6b:6e:34:05:57:c9:80:40:40:8d:0d:9b:
ed:12:60:81:f4:96:42:cc:b5:1f:02:92:9e:77:87:
b0:55:05:7c:b0:d5:58:e2:06:3f:3d:05:ee:63:8d:
96:52:98:28:03:fa:02:20:d8:c7:9b:89:70:4d:86:
7d:8a:81:b2:b3:72:5a:9b:4f:12:48:b3:b9:ba:67:
a3:be:68:da:16:1b:42:de:1e:19:50:97:d6:da:62:
a5:aa:30:44:52:33:dd:3c:b6:de:d3:8a:19:b2:60:
dd:46:e2:44:ef:3a:7e:55:cc:67:cb:65:0e:95:16:
df:11:34:6e:20:9a:56:ca:b8:22:59:28:f9:f6:b2:
08:07:9b:ad:75:f8:e0:82:66:81:90:3b:3f:91:a9:
70:fa:2e:b5:cb:cf:40:2e:27:c9:13:01:59:f2:37:
80:11:3d:c3:19:92:9f:69:8b:8e:5e:54:dd:b9:5a:
71:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:22:04:B7:4C:36:B9:4A:37:E3:40:99:02:8A:50:62:54:BA:4F:DA
X509v3 Authority Key Identifier:
keyid:F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a4:a2:17:76:33:07:f7:3e:f2:a9:32:33:56:6f:04:62:3e:
14:24:81:02:33:56:6c:ea:92:eb:39:0e:93:12:8e:96:3d:21:
24:97:e0:67:2d:4c:af:cb:7b:2f:06:3b:74:d0:05:70:7c:8c:
90:0e:fe:cd:d1:53:c0:a4:41:24:7d:ed:28:1c:7c:6d:76:7d:
b3:3b:8f:95:53:35:21:86:d7:87:4e:da:cd:a3:47:c6:fc:be:
ce:eb:59:f2:54:e9:05:5a:4c:4b:f8:7d:72:f3:ba:f9:75:61:
56:5b:9e:92:3f:e7:6e:30:bc:60:d8:e2:27:0f:b6:72:6b:6b:
fc:38:fa:03:66:c1:17:fd:f8:e3:63:c3:aa:84:3d:3c:81:3d:
33:7a:7c:10:15:33:98:a1:72:4d:50:ef:e3:3f:e2:81:0c:e2:
19:c8:31:6d:1b:57:60:1a:1a:07:1d:00:cd:5d:eb:2b:d3:57:
15:bd:64:b8:69:9b:e2:cf:c6:5f:ad:b2:9a:ba:14:4b:a7:55:
4c:15:ea:e8:61:47:28:c0:f1:08:3d:6a:62:96:ad:d8:65:b1:
b0:4a:8f:ca:1e:16:80:a2:3b:59:db:26:f4:cd:89:32:78:87:
62:be:a8:74:1e:41:bf:99:1c:da:49:6b:77:79:8d:8d:bb:29:
4e:03:a7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:42:05 2025 by rpki-client