Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/971231-83af-4f82-b10c-b6bb7eb04b25/1/I6ec9SWGV3ZHm825K0L81ZANT9Y.mft
File: I6ec9SWGV3ZHm825K0L81ZANT9Y.mft (raw, json)
Hash identifier: 11Zx8+hzUrieRv++W9xHu0VXqaMI9kkzkOzxHJJeafQ=
Subject key identifier: 69:49:0D:BE:0B:AD:1D:50:D1:B5:50:4F:09:7C:C6:7E:14:73:25:FA
Authority key identifier: 23:A7:9C:F5:25:86:57:76:47:9B:CD:B9:2B:42:FC:D5:90:0D:4F:D6
Certificate issuer: /CN=23a79cf525865776479bcdb92b42fcd5900d4fd6
Certificate serial: 019924B202FE969AF91391831056E404BCD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6ec9SWGV3ZHm825K0L81ZANT9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/971231-83af-4f82-b10c-b6bb7eb04b25/1/I6ec9SWGV3ZHm825K0L81ZANT9Y.mft
Manifest number: 33
Signing time: Sun 07 Sep 2025 15:01:09 +0000
Manifest this update: Sun 07 Sep 2025 15:01:09 +0000
Manifest next update: Mon 08 Sep 2025 15:01:09 +0000
Files and hashes: 1: I6ec9SWGV3ZHm825K0L81ZANT9Y.crl (hash: o5J3H8+dflyS8GBcSs1RpYhp4SC1zNI9V42xR8aZSLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/971231-83af-4f82-b10c-b6bb7eb04b25/1/I6ec9SWGV3ZHm825K0L81ZANT9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/971231-83af-4f82-b10c-b6bb7eb04b25/1/I6ec9SWGV3ZHm825K0L81ZANT9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6ec9SWGV3ZHm825K0L81ZANT9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:b2:02:fe:96:9a:f9:13:91:83:10:56:e4:04:bc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a79cf525865776479bcdb92b42fcd5900d4fd6
Validity
Not Before: Sep 7 15:01:09 2025 GMT
Not After : Sep 8 15:01:09 2025 GMT
Subject: CN=69490dbe0bad1d50d1b5504f097cc67e147325fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:dc:c7:f3:6e:10:bf:55:c2:33:d0:64:b5:
83:07:d4:9f:f7:b0:41:97:92:2e:4e:6b:7a:f3:51:
3d:a5:99:74:75:a4:d8:69:4f:73:ba:17:dc:a1:b7:
1c:d5:6b:f2:8a:c6:cf:d6:63:7e:fb:f6:04:e3:88:
40:d7:d3:47:45:55:74:22:df:c9:31:a1:4d:6b:9b:
8c:f1:c4:c5:fb:3c:ff:f1:3a:44:3a:22:a5:1f:3a:
41:e4:31:9c:12:e1:74:98:68:7d:0c:ba:ea:08:9b:
df:a6:41:49:ae:00:d8:b6:d1:ea:d2:9c:71:f6:ab:
3f:42:74:8c:2a:0f:cc:cd:b9:2f:89:e4:45:15:95:
32:6d:31:6e:f6:b2:f5:9f:56:d1:d0:0a:99:cc:cf:
6d:74:51:bd:d0:75:e3:af:78:03:19:90:16:0c:c5:
30:bd:3f:e9:21:b3:29:1d:af:4d:10:22:f8:e3:75:
fd:80:e9:af:ac:03:5f:01:c3:ba:38:16:0b:75:8b:
3f:67:1c:28:c8:66:79:f7:61:67:7c:3a:99:6d:85:
ac:18:24:d3:95:58:52:fc:49:c8:f4:c0:ef:ff:30:
43:45:9e:2a:25:8a:99:61:05:5e:11:13:0b:d5:8c:
34:6a:2f:92:89:26:a1:69:7f:69:2d:3f:a0:5b:2f:
a4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:49:0D:BE:0B:AD:1D:50:D1:B5:50:4F:09:7C:C6:7E:14:73:25:FA
X509v3 Authority Key Identifier:
keyid:23:A7:9C:F5:25:86:57:76:47:9B:CD:B9:2B:42:FC:D5:90:0D:4F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6ec9SWGV3ZHm825K0L81ZANT9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/971231-83af-4f82-b10c-b6bb7eb04b25/1/I6ec9SWGV3ZHm825K0L81ZANT9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/971231-83af-4f82-b10c-b6bb7eb04b25/1/I6ec9SWGV3ZHm825K0L81ZANT9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:fb:a8:c7:98:44:6a:e4:d8:45:f6:9e:76:ce:51:7d:f7:16:
ea:e4:d1:0e:97:88:ff:e0:a7:f8:6b:76:c3:72:9d:6f:6e:be:
2f:17:1a:77:f6:42:eb:78:a3:17:c6:2e:9b:03:dd:be:75:06:
2b:cf:cb:ed:46:5e:24:f4:6b:c5:fe:c3:c0:43:1c:93:a3:e5:
8e:6f:a6:0e:49:f8:9e:ab:b3:58:b0:55:61:c4:1e:e7:ac:f9:
42:40:0b:4b:5f:96:70:9a:3f:9a:86:3f:ed:ea:5a:f9:e4:1a:
0f:11:14:1f:ba:b0:4b:62:f5:c0:fc:ef:a7:b8:8f:75:0a:a4:
f1:e2:89:16:fb:52:31:2f:4b:35:54:93:25:c7:37:f9:34:11:
c6:1a:02:15:65:23:51:2f:ee:cc:f5:bf:2f:bd:1a:ac:7c:b5:
6f:f9:49:52:a0:96:a0:fd:3a:41:37:55:74:55:21:56:91:a9:
4a:0a:5d:50:4a:ba:b3:6a:25:2f:f2:57:39:f3:06:06:8c:8a:
72:5f:fc:33:e3:0e:0c:09:ce:88:3e:74:af:d6:43:ab:50:d4:
71:96:59:90:22:96:17:ef:7e:b9:1e:d2:8d:30:b5:db:44:b3:
bf:23:77:df:90:94:8f:8c:f4:42:e8:3d:9f:2b:06:3c:6f:6c:
58:cb:00:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 16:08:02 2025 by rpki-client