
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
File: fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft (raw, json)
Hash identifier: gDUdqANoV5wndgWmX0k9wpf+WVVVB+mLZx+odika6Cg=
Subject key identifier: 9F:0D:82:A0:24:F3:A7:6C:85:43:2E:9C:D8:A2:5F:E9:BD:9E:0E:60
Authority key identifier: 7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D
Certificate issuer: /CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d
Certificate serial: 0199221E926F3BA5C78870438F812D94B0A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 03:00:52 +0000
Manifest this update: Sun 07 Sep 2025 03:00:52 +0000
Manifest next update: Mon 08 Sep 2025 03:00:52 +0000
Files and hashes: 1: fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl (hash: DERES+PODrICGJWNQ/VIPrWaDmhXlLRm2RtqOWb2Qao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:92:6f:3b:a5:c7:88:70:43:8f:81:2d:94:b0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d
Validity
Not Before: Sep 7 03:00:52 2025 GMT
Not After : Sep 8 03:00:52 2025 GMT
Subject: CN=9f0d82a024f3a76c85432e9cd8a25fe9bd9e0e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:52:ee:45:79:8a:25:2a:c7:27:5b:3f:6a:37:
09:5d:80:c6:3d:77:8a:22:ed:b6:ef:6f:20:9a:64:
2b:6c:cf:b5:21:20:25:01:be:46:00:e4:e9:dc:59:
d2:7f:c6:db:a1:51:5a:eb:93:e0:7c:fb:6a:7d:20:
46:60:0c:a7:c3:b1:fd:47:25:43:95:f9:f8:bd:71:
b8:4f:fc:a2:5e:e0:cb:c7:10:b8:03:aa:92:aa:3c:
fb:3c:e1:e5:21:31:bc:04:21:a8:e1:12:85:9e:54:
a7:f5:75:cc:6b:25:e1:15:3a:2b:a5:ba:ac:39:cc:
7a:b7:f9:fe:23:95:64:dd:86:1b:2e:c7:89:f8:d8:
59:f9:8d:4e:52:40:49:29:13:c8:0f:c5:4f:99:46:
88:ee:d1:5c:33:71:54:b2:c1:9e:6a:c1:5f:7a:e9:
6b:e1:97:44:93:cb:ba:2f:03:eb:9d:88:ee:46:b2:
91:73:e3:a2:e7:a1:4f:af:16:ee:b3:81:12:c0:a7:
6c:98:69:11:18:08:22:a7:fb:28:6f:47:6c:cd:0e:
3c:bb:ac:af:6f:9a:0b:b9:e2:6c:5e:4e:1c:07:19:
f2:10:02:ad:30:69:2f:a2:bf:38:f0:d3:89:f1:7f:
27:23:69:10:45:ee:4e:1b:ba:f8:d8:35:1e:31:30:
80:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0D:82:A0:24:F3:A7:6C:85:43:2E:9C:D8:A2:5F:E9:BD:9E:0E:60
X509v3 Authority Key Identifier:
keyid:7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:eb:b5:89:ed:92:16:fc:ee:eb:3c:43:e2:eb:ac:5f:8f:0c:
41:81:0a:fa:44:b6:1f:c2:2f:4b:8f:12:1b:0b:24:b4:99:55:
87:eb:7d:c4:62:c2:c0:12:4b:6f:4f:d5:ea:c9:4c:f9:9b:95:
8a:fe:f4:bf:c3:e8:00:31:d3:21:69:b2:5f:04:c7:59:29:44:
db:53:9e:4b:22:f3:5c:93:ca:75:fc:14:1a:2f:4e:6d:1a:4f:
6a:b2:a3:1b:76:c8:93:ca:5c:df:db:7f:41:d5:98:92:6f:18:
ba:d8:b2:02:f9:3d:e1:7e:aa:4e:df:07:83:8d:2f:a6:50:8f:
db:8d:ba:40:3f:4e:d2:50:51:ed:a9:a2:69:e9:38:68:d9:6c:
30:7f:47:b3:61:0f:8e:65:f8:c8:25:bd:a1:bd:0b:ac:4e:dd:
c7:05:00:d6:eb:73:53:9e:26:4f:04:6e:a8:00:33:bf:93:ec:
81:9c:67:5f:95:25:b4:2f:8b:83:ba:bd:c7:94:7e:ef:39:4b:
67:59:83:12:fc:fa:69:0a:fb:f1:bc:dd:e6:18:d7:ac:39:90:
ec:06:76:d5:5e:f7:58:35:cd:10:7e:a6:77:ff:0c:ec:e0:92:
5a:f4:e7:92:7d:59:de:37:39:10:34:12:af:cc:27:07:68:b7:
d7:e8:b8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:16:31 2025 by rpki-client