Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
File: 9krUXSK1888ucc4KwBB0t80hrFc.mft (raw, json)
Hash identifier: 5iCzBPIAJauhIIohxBAbEYc+OogTY9fUnPoY/GzQM0o=
Subject key identifier: D5:52:17:F1:56:7B:7E:62:1A:7C:9C:33:05:AA:63:9D:12:87:5B:B6
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Certificate issuer: /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial: 01984A77A3FEF88290FA46B47B6E3EAA55ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
Manifest number: 14AF
Signing time: Sun 27 Jul 2025 06:00:11 +0000
Manifest this update: Sun 27 Jul 2025 06:00:11 +0000
Manifest next update: Mon 28 Jul 2025 06:00:11 +0000
Files and hashes: 1: 9krUXSK1888ucc4KwBB0t80hrFc.crl (hash: GeBrjbYTklpvKYc+PfzMnTmsVqk1RSAIOqL+HLAGukY=)
2: rnFKFHUDJ2VK_n3nnMWQgvu93Us.roa (hash: ddxwbWDe9h7jTPjb6zGryBRSU7cXly9K/marvCxyA4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:a3:fe:f8:82:90:fa:46:b4:7b:6e:3e:aa:55:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Validity
Not Before: Jul 27 06:00:11 2025 GMT
Not After : Jul 28 06:00:11 2025 GMT
Subject: CN=d55217f1567b7e621a7c9c3305aa639d12875bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d2:38:b4:cc:d4:ea:f8:71:79:ba:97:25:e1:
24:dc:be:94:b8:cf:99:76:d5:83:bc:dd:9a:81:20:
94:50:7c:5c:59:a0:1d:b8:33:29:fe:3b:15:d5:85:
ad:30:30:49:b3:a4:05:de:8a:8d:5f:f8:78:1b:c5:
dc:7c:d5:f5:33:6e:95:0e:17:1f:44:61:84:80:71:
e7:7d:8a:16:7b:01:7d:83:bf:d0:e4:ab:c9:29:a0:
d0:72:55:ef:36:0d:95:63:d2:1e:80:68:dd:46:1c:
0f:58:94:52:91:de:c7:d1:c6:e3:2d:cf:8e:c1:e7:
df:ed:70:f5:41:2f:22:c6:5d:73:de:f2:bf:15:6f:
e2:99:6e:78:e3:79:ea:07:8d:3f:a2:0f:72:07:22:
80:5d:85:9b:2b:fe:05:0a:17:3d:8b:dc:99:96:88:
b6:c2:cc:d3:67:99:0b:6b:56:c3:2e:df:52:68:d6:
e1:3d:13:c0:14:b9:7b:74:63:96:d6:92:ef:4b:d9:
bf:c4:6c:0c:d0:31:ec:7a:a7:61:d2:ec:b1:a4:32:
92:0c:44:d3:6a:78:0f:d4:f9:18:07:a0:35:c0:11:
53:aa:d8:34:a1:2d:cc:74:6d:52:cc:f1:37:f5:e2:
d0:cd:4f:36:de:1f:c8:d9:41:e9:b5:72:c8:87:a7:
4b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:52:17:F1:56:7B:7E:62:1A:7C:9C:33:05:AA:63:9D:12:87:5B:B6
X509v3 Authority Key Identifier:
keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3e:81:68:33:28:2a:1a:8f:c2:91:be:21:21:08:d8:87:3b:
57:bb:1f:68:94:00:53:90:e7:90:49:ff:86:9c:cd:0b:50:c0:
f7:b4:d8:a9:58:6e:f9:ba:d3:3d:59:42:8b:72:4a:67:c1:fe:
47:91:37:7d:52:6b:fc:39:3d:e5:7d:14:f3:9a:3f:ae:83:55:
e6:58:f8:36:9f:d4:7f:8e:c7:31:9a:e8:88:9b:55:71:f4:2b:
c8:9d:5a:bf:56:3c:0f:bc:d4:97:e9:f7:3c:ba:c9:53:28:d5:
19:09:70:ed:3e:cc:99:02:f5:4f:0f:3b:b1:1b:e5:74:3f:9b:
d1:73:b6:e7:70:b0:c9:a4:8d:d2:1b:84:17:e1:ae:f9:fd:1c:
a7:65:c8:ab:d1:91:68:49:89:31:17:ae:d4:40:33:9a:a3:ab:
df:1b:ef:4c:66:73:ee:6a:27:0a:79:cc:11:4a:b3:a5:f6:5c:
26:8e:c9:5d:c6:d1:fb:2f:9d:d4:f5:96:ab:8e:09:10:1a:94:
78:08:8a:e6:f4:59:00:97:f7:58:1e:9a:28:95:43:4c:50:24:
04:42:35:85:21:86:b4:4b:d4:13:41:a4:6b:ac:be:45:2d:ef:
9a:53:53:bf:b1:24:ec:ef:82:e7:9c:f1:93:de:9c:b0:dc:16:
0a:36:a6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:34:34 2025 by rpki-client