Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
File: 249r9UNKqjLT5fETsAxbsUAvZ_Y.mft (raw, json)
Hash identifier: Y76jUU9EO5c/E0nPq7S6mAIRG4vnco4dSHToIhxK+LY=
Subject key identifier: F2:98:90:71:A1:3D:88:F8:A5:B1:5E:6F:AF:61:3F:3A:0A:68:0A:F2
Authority key identifier: DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6
Certificate issuer: /CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6
Certificate serial: 019922FA2FDEDB09D8B08F2FC6F95D1562A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
Manifest number: 0766
Signing time: Sun 07 Sep 2025 07:00:45 +0000
Manifest this update: Sun 07 Sep 2025 07:00:45 +0000
Manifest next update: Mon 08 Sep 2025 07:00:45 +0000
Files and hashes: 1: 249r9UNKqjLT5fETsAxbsUAvZ_Y.crl (hash: DkSh35smlQspJ3EAV9xw6vFQ0yx0RGw17SiWXDGZeQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:2f:de:db:09:d8:b0:8f:2f:c6:f9:5d:15:62:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6
Validity
Not Before: Sep 7 07:00:45 2025 GMT
Not After : Sep 8 07:00:45 2025 GMT
Subject: CN=f2989071a13d88f8a5b15e6faf613f3a0a680af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:88:b5:e1:0d:8e:22:f8:d6:45:db:cb:ec:
b4:51:d1:31:85:81:c3:1f:1c:49:6f:19:5f:20:65:
09:5e:ce:51:77:85:27:f7:13:cb:88:99:6c:cd:44:
08:0f:61:72:66:58:fd:53:4b:fc:27:95:a9:db:6f:
05:b5:a0:83:85:16:17:32:70:98:06:f7:fd:06:ef:
00:5b:19:a3:17:f5:1d:33:42:7d:58:b9:df:7e:ee:
a5:b9:ae:e4:c3:3b:27:07:94:ab:8e:4a:6c:16:45:
de:3c:fa:e0:7d:35:ce:f1:bd:7b:27:fb:47:63:c4:
70:07:eb:d1:02:92:69:7f:9b:2f:78:e7:82:f8:e0:
c2:8f:09:26:5d:25:3c:c7:07:8a:84:bd:46:1b:17:
35:c8:c8:7c:ab:f7:92:bf:0c:aa:1a:4b:86:17:7d:
a6:6f:60:ea:e9:0d:e4:91:0b:b7:7d:ef:b8:cd:8d:
0a:f0:61:ec:5f:44:ed:4a:20:c1:b3:d1:c6:10:0f:
c1:85:a2:9f:4b:fd:b1:99:77:87:70:ef:b3:f6:ea:
ff:c9:d2:01:50:f8:68:92:98:6a:72:58:f1:aa:6f:
09:df:09:f5:07:a2:82:78:75:c6:db:33:7b:9d:03:
71:82:d1:41:5b:c8:a2:4d:f3:16:07:a3:d3:07:15:
4a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:98:90:71:A1:3D:88:F8:A5:B1:5E:6F:AF:61:3F:3A:0A:68:0A:F2
X509v3 Authority Key Identifier:
keyid:DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:57:96:47:4d:b2:db:37:2e:f8:52:84:49:d1:da:1f:4b:28:
4d:a9:01:9f:ec:a4:0f:6e:c5:19:9a:f4:6e:bf:20:08:c9:59:
7b:33:32:96:bd:e1:fa:88:23:6c:46:56:55:ee:0b:9c:9b:28:
72:ce:26:26:21:23:a1:7d:6d:e3:49:bb:d7:b1:91:40:0f:37:
31:3e:32:d9:c1:2f:eb:68:e9:c0:51:5a:39:cf:e6:a9:1b:0e:
15:10:9f:4f:03:cd:4a:e5:f8:02:30:ae:ce:90:d6:58:eb:b9:
1f:cf:37:a8:55:db:b7:32:3b:f7:bd:5c:18:37:65:ee:1f:ae:
0a:52:d4:cf:2b:48:ea:89:37:01:04:ea:10:e1:b5:70:c3:3e:
31:37:be:0f:14:9c:36:bc:34:af:49:2c:24:10:b3:12:ab:d6:
7c:f2:5a:0b:33:7d:a1:d2:fe:c5:ac:3b:5d:f3:b2:9d:80:4a:
6e:24:be:c8:1f:25:41:9a:98:49:07:e5:3b:c2:d5:90:89:d3:
42:f5:7f:e2:8a:bd:e8:7c:ab:c8:5d:83:a3:79:0a:88:a2:54:
47:19:8a:98:6f:cc:45:76:f3:44:cd:f1:df:b2:15:c1:1b:8e:
90:8e:cf:3e:c1:a1:84:8a:2f:e8:1a:e7:a5:64:f4:6b:d5:0b:
a0:22:12:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:18 2025 by rpki-client