Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
File: 9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft (raw, json)
Hash identifier: hkjiL0sBXZ6P/2sWu+OoHt+huNTCQ+oTRIPCJTvbSnc=
Subject key identifier: FE:23:8F:26:CF:87:52:C9:02:73:4B:EB:A0:4A:7E:26:C8:C3:10:8A
Authority key identifier: F4:FA:75:8E:E1:D3:2A:1C:BD:94:64:6F:AF:43:6D:7B:8D:80:9E:A4
Certificate issuer: /CN=f4fa758ee1d32a1cbd94646faf436d7b8d809ea4
Certificate serial: 019921B096F4DC968769491EE5E6C6DC8518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
Manifest number: 021B
Signing time: Sun 07 Sep 2025 01:00:45 +0000
Manifest this update: Sun 07 Sep 2025 01:00:45 +0000
Manifest next update: Mon 08 Sep 2025 01:00:45 +0000
Files and hashes: 1: 9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl (hash: 6UEJ6lxGoC777F121R1nzywX8Zf8Q/8p/I+LgDnxtq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:96:f4:dc:96:87:69:49:1e:e5:e6:c6:dc:85:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4fa758ee1d32a1cbd94646faf436d7b8d809ea4
Validity
Not Before: Sep 7 01:00:45 2025 GMT
Not After : Sep 8 01:00:45 2025 GMT
Subject: CN=fe238f26cf8752c902734beba04a7e26c8c3108a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:91:91:71:42:f6:20:58:8e:d8:1c:1b:ee:
a7:1f:30:48:7d:dd:cb:de:0a:7a:ae:78:98:ff:58:
c6:b3:7a:ac:87:01:f6:47:d3:4e:b4:21:43:08:74:
7e:22:88:a0:71:1f:c4:c6:6f:08:dc:93:e9:fa:b0:
da:83:13:fe:7e:48:6f:11:5b:f2:c5:40:1a:c5:f2:
55:9a:d8:88:2b:b0:0d:54:fa:f5:61:bf:f3:0c:d5:
b2:ed:11:f8:5f:15:ad:ca:c2:cf:04:cd:3f:f3:e2:
e5:51:cd:13:d1:7c:b1:f4:74:cc:d1:ae:19:3e:f7:
27:53:90:0a:cf:7c:bb:1c:43:ab:79:cc:d8:ca:92:
15:99:aa:e2:0d:04:9a:73:d5:7d:f1:26:e0:d6:c3:
84:32:08:b9:7d:eb:0e:28:32:27:40:38:31:68:33:
e8:4f:a4:4b:ff:dc:85:38:7e:00:5d:87:42:a4:14:
55:18:d6:30:34:d9:f0:be:b8:b1:e3:fa:a2:fe:29:
bd:7c:02:13:6f:94:57:17:0e:9d:26:eb:74:99:f9:
e1:f9:4b:ac:a6:90:9a:95:be:73:14:0c:4f:c7:8b:
c6:da:7f:1c:f3:18:67:2f:33:7d:ef:35:f5:e9:98:
fe:3f:80:8c:da:c0:ca:e4:90:db:38:ab:30:29:63:
b5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:23:8F:26:CF:87:52:C9:02:73:4B:EB:A0:4A:7E:26:C8:C3:10:8A
X509v3 Authority Key Identifier:
keyid:F4:FA:75:8E:E1:D3:2A:1C:BD:94:64:6F:AF:43:6D:7B:8D:80:9E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b5:1b:dc:1c:33:f3:3b:50:53:27:53:bb:2e:75:1e:7e:ac:
3d:81:ec:6f:a5:0f:3c:9c:ee:7e:af:c5:05:a9:ca:b0:d1:ae:
ba:0b:f1:30:ac:c2:96:2f:41:a8:12:24:36:f8:40:c8:5a:06:
fc:23:e9:53:0f:f4:7f:fe:66:53:11:c9:c5:24:a7:ce:8f:8b:
ed:db:3c:ea:74:ef:f2:67:e6:d2:25:df:a8:06:4b:3a:65:02:
db:f2:ee:aa:ae:55:90:83:71:e3:32:25:55:30:3d:61:70:56:
25:26:02:44:9e:40:8c:da:8d:ba:0a:ae:f2:2e:c2:b4:e6:bc:
13:26:f9:f6:88:f9:db:7f:2e:05:44:cf:a4:c0:c2:d3:66:c4:
cf:ef:ec:e8:a6:62:4e:ac:03:18:40:82:cb:58:ff:90:ce:04:
b5:7b:3c:48:e0:78:7e:7e:56:f1:fe:04:fa:5c:fd:c7:80:81:
2f:3f:11:93:b8:e3:34:0f:3a:03:60:a8:f6:d0:7f:2a:a9:fc:
72:9c:37:91:23:98:2a:65:97:ce:1f:7e:c5:85:27:28:95:bd:
97:91:15:81:78:3b:fc:24:20:c4:c3:16:c8:d8:e4:15:be:18:
f7:81:b2:e5:7c:2f:0a:8d:1b:6a:7f:30:73:08:81:bf:53:83:
36:50:52:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:29:30 2025 by rpki-client