Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
File: 9TK715EK8VrXBk20ptO9ZKfoJ8E.mft (raw, json)
Hash identifier: otBqi2tCQRo0+z2bQ6gREM0aGeLIcAh6gtzo3BlbTeI=
Subject key identifier: 9E:7E:98:0F:FA:D7:08:FD:94:A6:65:2C:8C:D5:44:61:1C:1B:DE:BF
Authority key identifier: F5:32:BB:D7:91:0A:F1:5A:D7:06:4D:B4:A6:D3:BD:64:A7:E8:27:C1
Certificate issuer: /CN=f532bbd7910af15ad7064db4a6d3bd64a7e827c1
Certificate serial: 019849D32DF41999AF877E3188FF951B1F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
Manifest number: 0489
Signing time: Sun 27 Jul 2025 03:00:33 +0000
Manifest this update: Sun 27 Jul 2025 03:00:33 +0000
Manifest next update: Mon 28 Jul 2025 03:00:33 +0000
Files and hashes: 1: 9TK715EK8VrXBk20ptO9ZKfoJ8E.crl (hash: TPA5GBBl2aj2pzqGaFeARqXWTcTKdjWI2phXCZqA0oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:2d:f4:19:99:af:87:7e:31:88:ff:95:1b:1f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f532bbd7910af15ad7064db4a6d3bd64a7e827c1
Validity
Not Before: Jul 27 03:00:33 2025 GMT
Not After : Jul 28 03:00:33 2025 GMT
Subject: CN=9e7e980ffad708fd94a6652c8cd544611c1bdebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ba:ff:7d:98:05:d3:bb:39:d7:47:cd:07:5f:
40:d1:1d:44:c9:f6:f7:b9:a9:bb:90:e4:31:94:64:
ca:7e:07:e6:fa:66:d8:93:ed:18:ba:0f:5d:20:05:
5c:d4:90:73:5f:c2:9e:2e:eb:1a:c5:e8:5a:88:67:
dc:c0:42:0b:f1:bb:1a:b7:dd:f4:23:0a:99:c0:ed:
50:f0:bf:0d:75:c3:e4:b4:cb:f8:f2:8b:97:b0:e0:
d0:3e:26:1f:58:4c:11:bd:5a:14:51:a7:4e:6c:7f:
1e:1d:ba:9a:64:ee:dc:3f:5f:2d:42:0b:3f:05:e5:
c0:c4:7f:8b:b0:b9:97:97:d3:03:f0:42:7e:7e:cf:
f3:98:1d:65:a8:b0:f2:b6:b3:c0:d4:d6:62:8a:6c:
18:99:18:56:c8:d6:60:c6:8b:17:31:70:8c:23:14:
d6:50:6b:cc:fd:19:b3:d2:38:e4:8b:f5:d3:49:f8:
67:d2:70:b4:de:6e:20:07:c3:d3:27:32:ea:5f:ed:
81:48:60:a6:c6:27:c2:9b:22:15:f8:5a:4f:70:d9:
c2:54:a3:35:e0:43:3a:7a:25:47:12:cd:b4:a8:67:
9c:3c:fe:67:ca:46:5b:3b:79:93:99:cf:98:1a:ef:
2e:de:8e:e9:9a:21:4a:a1:90:69:d8:49:38:57:e9:
d0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7E:98:0F:FA:D7:08:FD:94:A6:65:2C:8C:D5:44:61:1C:1B:DE:BF
X509v3 Authority Key Identifier:
keyid:F5:32:BB:D7:91:0A:F1:5A:D7:06:4D:B4:A6:D3:BD:64:A7:E8:27:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:72:b9:2c:e6:a3:7b:97:e6:c5:d5:5d:a2:a2:60:bb:5f:47:
2a:71:ab:7f:79:ca:c9:6b:f6:6d:ad:76:2b:a0:a2:1d:51:9b:
f2:af:08:b2:25:bd:54:1d:5a:46:0e:be:fd:f0:3c:ae:83:5a:
a2:37:2e:99:c1:ef:b9:32:9b:80:c3:21:59:e5:fd:0b:8d:dd:
33:c7:c4:ed:af:db:88:5e:fa:d0:aa:63:45:bd:37:32:b9:6b:
c3:be:e2:d8:e6:79:86:7e:93:d6:6a:50:04:e5:c4:40:b4:d2:
28:48:20:cc:66:4c:da:ca:a1:ba:5f:ec:aa:b5:32:9b:27:02:
15:f1:47:a1:71:34:52:a9:82:98:70:aa:10:4b:de:74:a7:e2:
15:b8:94:6d:82:28:79:56:07:a7:50:22:b5:28:55:52:b3:d3:
94:7e:c5:bf:29:b4:56:fe:66:82:0c:a7:f1:5d:11:06:79:0b:
c0:c2:04:b1:c5:8c:d8:00:20:5f:84:25:a1:e1:b9:7d:3e:1b:
d2:1b:d2:12:ab:11:78:25:72:76:a7:cc:c2:36:0a:76:2f:a9:
2b:4b:b1:db:ff:47:40:ac:76:1b:21:d4:1c:bc:d2:89:a9:ea:
a0:3c:e8:35:4c:58:3e:43:7b:9c:89:73:26:90:88:a3:84:86:
5e:2a:22:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:22:47 2025 by rpki-client