Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
File: 9yR1sGTeionxUD6u_H1yrczzihY.mft (raw, json)
Hash identifier: apMWAaLsDJToPqd81WG42gMo1j5W9LV5gFFaXhpslHU=
Subject key identifier: 9F:FA:8B:25:06:60:B0:E0:9A:E9:82:BC:B8:FD:A1:EC:24:50:0D:BD
Authority key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
Certificate issuer: /CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Certificate serial: 019848C06173F01689E6E2E0E0D766BF065B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
Manifest number: 15FC
Signing time: Sat 26 Jul 2025 22:00:23 +0000
Manifest this update: Sat 26 Jul 2025 22:00:23 +0000
Manifest next update: Sun 27 Jul 2025 22:00:23 +0000
Files and hashes: 1: 9yR1sGTeionxUD6u_H1yrczzihY.crl (hash: p8IlYNwfHhN6G//0/2i5+89FQMXIq0yL/MjFuHM3ndc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:61:73:f0:16:89:e6:e2:e0:e0:d7:66:bf:06:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Validity
Not Before: Jul 26 22:00:23 2025 GMT
Not After : Jul 27 22:00:23 2025 GMT
Subject: CN=9ffa8b250660b0e09ae982bcb8fda1ec24500dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9b:c7:de:64:85:cf:1e:fc:5a:6c:e6:43:f2:
4e:08:f7:e0:24:48:21:3b:52:01:34:02:90:3c:7a:
89:44:a6:c4:1c:e2:ad:d3:31:70:64:b4:a8:63:6d:
95:55:c8:33:49:b1:85:3c:33:d5:f4:4e:6b:c1:86:
b6:71:cc:97:b1:d4:2c:b6:6f:b5:26:38:9a:77:6a:
88:4e:65:b0:d0:0d:61:06:2d:6f:f9:e8:60:5c:fa:
f7:44:be:23:7e:56:84:62:23:c2:e4:47:94:7e:41:
96:68:20:28:57:51:ca:4e:a1:25:35:df:97:18:a3:
e5:36:13:b3:a3:53:0c:df:89:58:b6:ee:d0:2b:e6:
40:8a:9f:3e:83:d5:ce:79:ec:68:13:8d:7b:8d:d0:
8b:e8:a8:62:54:79:c7:dd:6f:eb:db:de:8e:40:43:
31:21:37:3b:d5:2f:13:03:00:a0:c0:7c:ef:4c:20:
f3:06:57:77:fb:59:a5:b6:4c:74:4f:5d:21:33:f8:
d9:d0:9d:f5:8d:a4:bc:95:bb:8d:47:e4:c5:18:e5:
30:33:ca:93:c7:29:3b:8c:68:c8:94:73:11:82:eb:
a7:ae:10:2b:30:4f:b8:90:52:83:98:95:46:39:59:
91:eb:48:a6:f9:18:d4:a2:48:f4:49:bf:7d:f4:84:
5a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FA:8B:25:06:60:B0:E0:9A:E9:82:BC:B8:FD:A1:EC:24:50:0D:BD
X509v3 Authority Key Identifier:
keyid:F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e5:d6:55:4a:5b:e2:8a:66:9e:f8:f4:10:73:02:4e:09:0f:
7d:34:48:d9:bc:8c:0c:b2:b8:c4:d5:7b:0d:e7:d7:f3:28:1a:
bc:80:58:64:af:ad:b6:10:44:fa:bd:75:3e:66:bb:b0:54:a0:
04:49:f6:88:97:38:8c:39:56:51:4b:21:75:a9:b7:d7:bb:ad:
b3:fa:43:c5:e8:31:a7:15:3c:61:e6:cc:84:fc:b4:f0:13:77:
8e:c7:43:6b:5b:1c:1e:81:19:02:9a:db:41:cd:12:67:54:9d:
d6:6b:8b:5c:d4:d5:77:26:b7:cb:49:25:4a:72:f4:37:60:9b:
af:33:1f:ec:77:28:cc:2b:32:c1:af:df:d1:3e:ed:3a:a6:91:
ab:77:16:e6:b7:bd:48:fa:40:f4:d4:c9:f2:5d:55:1b:77:ed:
ce:96:ed:ed:2c:6d:11:43:0e:61:34:7c:18:a1:35:66:71:5a:
5d:05:62:ee:cf:03:64:b9:16:85:fd:34:97:cf:f3:18:ae:7d:
22:05:09:67:3a:c2:95:4f:b8:52:14:62:7f:16:bd:76:05:de:
4e:30:f7:18:9f:bf:23:6c:ab:4c:3c:48:db:ef:74:8d:15:e3:
42:df:c2:cc:4f:bd:64:bb:3e:97:9d:96:61:b7:5e:73:53:23:
08:30:32:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:22:55 2025 by rpki-client