Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
File: 9g8GwTqb9lKcSmvQ3uBVggVgz78.mft (raw, json)
Hash identifier: cTUazq7A5QReT9X8jvX5kX8dU/J31ntAuFnwy5Ovod0=
Subject key identifier: 89:92:D8:EE:4B:F4:41:7C:B2:08:9B:A7:77:6D:1F:13:91:34:FD:51
Authority key identifier: F6:0F:06:C1:3A:9B:F6:52:9C:4A:6B:D0:DE:E0:55:82:05:60:CF:BF
Certificate issuer: /CN=f60f06c13a9bf6529c4a6bd0dee055820560cfbf
Certificate serial: 01984966493C71A3F3BB3CC36DD2F6436781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
Manifest number: DA
Signing time: Sun 27 Jul 2025 01:01:36 +0000
Manifest this update: Sun 27 Jul 2025 01:01:36 +0000
Manifest next update: Mon 28 Jul 2025 01:01:36 +0000
Files and hashes: 1: 9g8GwTqb9lKcSmvQ3uBVggVgz78.crl (hash: uFi4fLDbcPevOdSoBMpzk0Sne/xDc7j3dxOsbvgP2Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:49:3c:71:a3:f3:bb:3c:c3:6d:d2:f6:43:67:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60f06c13a9bf6529c4a6bd0dee055820560cfbf
Validity
Not Before: Jul 27 01:01:36 2025 GMT
Not After : Jul 28 01:01:36 2025 GMT
Subject: CN=8992d8ee4bf4417cb2089ba7776d1f139134fd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:b3:70:f6:87:d3:3c:14:6b:90:59:dc:84:
94:d6:71:72:8d:1d:ec:0a:bf:c3:ff:21:60:fb:07:
d0:0d:e0:b4:f9:e0:9a:a4:f0:7d:0e:20:b1:d5:96:
2b:0b:ff:47:39:66:00:a7:b1:35:d6:02:fb:44:e3:
db:6c:4d:6a:3e:a3:80:c3:24:29:11:71:73:6a:2e:
ee:0d:96:93:e6:32:91:04:74:05:e2:4c:4a:f1:0f:
d1:71:38:dc:e3:b7:94:a0:3c:ca:cd:e7:ac:04:68:
d8:62:f3:2f:4e:d7:3c:e1:73:f6:14:97:0f:18:0a:
6b:a8:74:f2:95:aa:c4:94:3f:39:d8:f4:70:27:20:
0a:34:c9:81:09:99:9d:b3:96:30:82:85:87:ea:90:
b9:1a:75:e3:09:b7:fe:65:1e:2c:53:ce:6d:ef:8c:
37:d0:ea:18:12:78:cb:2e:1c:75:31:ca:00:27:b4:
98:bb:60:3e:f3:37:5a:ba:df:7b:66:92:38:a3:5a:
8a:e5:6e:d5:a1:c3:27:cb:0d:63:26:18:d4:20:b0:
f2:f0:83:20:5b:67:6e:a6:fc:5a:8c:aa:a2:a4:d2:
91:43:60:ca:31:24:e5:d8:8b:54:71:db:dd:5f:b0:
1c:38:9f:fb:c4:bf:41:f4:e8:e6:bb:95:6e:7c:8e:
28:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:92:D8:EE:4B:F4:41:7C:B2:08:9B:A7:77:6D:1F:13:91:34:FD:51
X509v3 Authority Key Identifier:
keyid:F6:0F:06:C1:3A:9B:F6:52:9C:4A:6B:D0:DE:E0:55:82:05:60:CF:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:63:48:77:ee:64:08:18:bf:30:dd:21:02:0a:5d:b5:f0:42:
d9:af:e9:a9:55:f7:1b:89:e0:24:fb:83:03:75:07:62:2f:5d:
b5:1f:e0:bb:b0:30:be:d3:a5:d2:4e:e1:ab:ec:05:03:9f:be:
34:ef:5a:ac:f2:18:66:c9:2f:fb:7b:fc:60:42:9e:1e:30:46:
c5:45:92:9a:c6:3f:52:67:a5:3e:02:47:93:93:17:32:37:f1:
02:cc:3e:0f:53:a5:5f:a2:dc:23:c6:1d:52:ab:01:3b:40:b5:
2a:9c:ce:8b:30:4f:65:1f:8f:6d:24:44:53:be:07:d5:08:97:
cf:06:ec:6a:ef:37:01:c3:ca:eb:9c:25:d1:8c:c5:43:fb:fd:
6f:36:3d:63:b2:70:be:f0:96:b8:7f:2f:6c:6b:ab:96:8d:ea:
14:8c:60:69:08:de:f8:fe:7b:17:2b:6c:b5:e2:8e:e4:c0:73:
2f:bb:cd:f4:e8:20:8d:33:36:55:32:4b:e5:03:cd:a1:f7:cc:
3a:eb:43:d3:d0:bc:1e:dd:89:aa:48:9d:48:d4:7f:16:13:d7:
6d:f0:a8:ba:ce:cd:67:5b:4b:f7:8e:56:f6:ab:8d:b9:ce:29:
2c:e7:0d:89:db:72:50:01:1d:7c:c6:0e:fb:0d:63:35:68:58:
8b:79:90:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:42:25 2025 by rpki-client