Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
File: 9PpnFz_1YpCIuXCWGuG-dGldxmE.mft (raw, json)
Hash identifier: nfZLFl8rkmvg/ne8JLVKidxFjmfcAIsQzGzhN2bmCF0=
Subject key identifier: 15:0D:8C:19:6A:B7:D5:D1:4F:2A:AD:24:90:19:B7:9D:31:F5:16:8D
Authority key identifier: F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
Certificate issuer: /CN=f4fa67173ff5629088b970961ae1be74695dc661
Certificate serial: 0198439AF88017DBCC4FEFBBA881FDF6F7CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
Manifest number: 15FA
Signing time: Fri 25 Jul 2025 22:01:26 +0000
Manifest this update: Fri 25 Jul 2025 22:01:26 +0000
Manifest next update: Sat 26 Jul 2025 22:01:26 +0000
Files and hashes: 1: 9PpnFz_1YpCIuXCWGuG-dGldxmE.crl (hash: Nen7a9JxrWmChoTaxr/YyjetHVEpGnHrDmFhVWYs4d4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:f8:80:17:db:cc:4f:ef:bb:a8:81:fd:f6:f7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4fa67173ff5629088b970961ae1be74695dc661
Validity
Not Before: Jul 25 22:01:26 2025 GMT
Not After : Jul 26 22:01:26 2025 GMT
Subject: CN=150d8c196ab7d5d14f2aad249019b79d31f5168d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:97:77:1c:c6:9c:6d:21:d9:0c:60:0d:d0:e6:
6e:65:eb:da:76:6c:f0:70:6e:67:74:a3:0a:6e:37:
20:34:4d:b1:3d:0b:d9:2d:d7:74:e6:d0:29:b6:31:
7d:15:07:09:14:4f:99:c3:18:58:c9:49:db:e8:4a:
c0:8a:c4:f3:52:ed:fa:21:a5:b1:88:96:0e:30:3b:
c9:13:b0:15:e7:62:a4:37:56:97:3e:6a:cd:18:8b:
b0:0a:63:8f:52:28:39:9f:c7:28:10:7b:a3:32:61:
16:c6:bc:84:47:95:27:f5:b8:5d:15:78:f8:c8:50:
11:3d:37:8c:91:e6:da:d5:6c:f9:92:9f:e5:e3:a9:
f3:c6:0d:90:9d:3e:6b:36:42:0e:d5:8d:e9:6a:4d:
b8:1c:5d:6a:ff:49:68:26:65:88:d6:95:da:8c:9b:
06:8e:be:44:87:f8:60:a9:4b:9a:bf:7c:e3:b0:46:
54:4e:24:91:67:1f:8b:82:37:c4:9d:8f:ae:df:56:
3e:e9:5c:93:ee:e2:1a:c5:f0:12:71:b2:37:cb:b7:
45:2b:68:de:59:a9:f5:ab:f7:47:d2:81:91:f1:26:
4a:ee:79:90:3c:3f:e7:c2:3a:49:f2:21:a3:b2:65:
e4:30:ba:7b:8b:7a:c2:d1:dd:02:a8:d5:0a:9e:9a:
5b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0D:8C:19:6A:B7:D5:D1:4F:2A:AD:24:90:19:B7:9D:31:F5:16:8D
X509v3 Authority Key Identifier:
keyid:F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7b:be:91:b4:91:0b:fa:d9:da:0d:95:bf:76:3a:59:34:fa:
37:fb:98:ea:12:50:99:64:14:08:74:44:2c:9c:65:93:ea:8a:
6c:fc:18:d1:c0:b4:21:43:ad:0a:9d:61:a0:b8:0d:2c:48:d5:
0d:2b:b5:de:85:f0:36:91:30:a5:27:70:9e:b7:e5:b9:29:6a:
32:dc:ec:a3:8e:2d:cd:4b:d9:7c:ba:a9:39:1b:4d:ee:60:f8:
fb:9c:cd:09:da:51:47:7b:9a:2a:77:36:5f:ba:28:43:66:f7:
a9:b1:71:95:fd:a7:a8:f0:75:b3:fc:11:46:f6:68:7b:97:fe:
12:b3:81:e3:12:d2:04:62:d9:1b:65:d0:f1:8f:0f:e9:0f:d0:
52:aa:b4:c7:65:d6:a6:b8:02:11:01:39:90:e8:97:6b:d0:13:
5b:d0:9a:1d:22:45:e5:37:df:5f:73:10:ed:0e:f9:e6:08:58:
f9:02:1b:2e:97:3e:18:3d:a0:e6:c7:1c:37:3f:83:33:62:55:
c1:4b:44:1c:93:c6:8d:36:17:31:b3:ea:e6:f9:d1:42:b2:1c:
af:0c:c7:d1:0b:73:6e:4f:10:24:22:17:8f:3e:2b:d1:84:d8:
ae:80:5d:de:00:cf:5e:b4:da:8e:fd:92:62:ed:a0:b9:0d:04:
6a:f3:5d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:26:49 2025 by rpki-client