
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
File: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft (raw, json)
Hash identifier: 1zAiWEyKuZj2qdY9POKYUQUN0mCjfB8a9IGbB2p8gQo=
Subject key identifier: 50:33:38:C0:34:54:14:D1:57:5B:07:FC:B4:20:00:11:E1:01:2F:36
Authority key identifier: B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36
Certificate issuer: /CN=b7d296d69059457be39c3c82466aceed02766836
Certificate serial: 0199221E281A9B1834E48282EE2893E39274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
Manifest number: 0763
Signing time: Sun 07 Sep 2025 03:00:25 +0000
Manifest this update: Sun 07 Sep 2025 03:00:25 +0000
Manifest next update: Mon 08 Sep 2025 03:00:25 +0000
Files and hashes: 1: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl (hash: QVZvS2j20pi0Vom5mYUzbIjGfJQrJ53vDrl3RX7/fos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:28:1a:9b:18:34:e4:82:82:ee:28:93:e3:92:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7d296d69059457be39c3c82466aceed02766836
Validity
Not Before: Sep 7 03:00:25 2025 GMT
Not After : Sep 8 03:00:25 2025 GMT
Subject: CN=503338c0345414d1575b07fcb4200011e1012f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:08:f9:2c:4c:9d:e0:e2:99:63:b5:34:8d:
74:8f:67:4f:92:ab:45:f2:66:3a:0e:71:4b:d3:68:
c7:2a:73:bf:23:db:7f:f3:64:01:f4:c5:58:0e:3b:
b1:54:97:c4:0f:7b:b5:c9:7e:09:2f:8a:d7:78:d3:
e8:20:06:e8:8f:65:99:34:0b:6c:7b:e5:05:7d:ad:
f5:aa:8f:17:ee:b3:56:8b:b8:53:8d:3d:63:e9:a4:
dc:ec:94:c4:eb:25:9b:3d:e8:f0:ab:b0:68:d3:3b:
91:d8:64:73:bf:ae:21:05:35:58:28:93:9e:e9:bf:
29:68:e3:4b:df:3a:a6:72:3a:ce:5f:f4:8d:8c:42:
35:c6:29:80:2f:70:e7:db:c6:72:bb:fe:92:b9:8d:
96:5c:00:67:7d:ad:56:8e:3b:55:ee:b2:a0:b8:f5:
95:13:23:9f:08:e0:50:8f:78:74:2c:62:d5:11:07:
38:c8:ae:81:9c:dc:01:58:d7:36:ee:e6:f4:74:5a:
7c:5f:af:86:c5:a7:94:12:2d:99:65:b5:44:ab:00:
75:60:f7:e0:fd:b4:1a:e9:d2:df:68:f7:a9:66:09:
f2:6c:4c:49:a3:cd:f0:e3:da:9b:4c:70:64:0a:08:
02:cc:f9:46:1c:9b:23:72:1c:b1:2c:98:9e:23:fd:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:33:38:C0:34:54:14:D1:57:5B:07:FC:B4:20:00:11:E1:01:2F:36
X509v3 Authority Key Identifier:
keyid:B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6c:d9:1e:aa:2a:ab:0e:e6:41:16:e8:ef:e4:af:1e:f4:6f:
d5:d5:a1:bd:f2:eb:57:25:17:52:90:a4:c6:d3:97:2a:ba:25:
1e:27:b2:13:26:d7:5e:e5:66:76:b8:07:10:09:17:9a:d2:80:
ed:d7:aa:fe:da:41:d5:98:b4:d7:4f:d3:f5:58:80:af:24:45:
9a:a5:9b:33:c3:57:76:a8:85:05:ed:6a:24:d4:18:f8:c7:3a:
84:92:64:db:7c:01:7d:d9:67:57:e5:43:3c:9f:1c:81:d8:c6:
d1:c1:b8:77:11:d3:02:dd:4e:e8:3b:c0:69:71:9f:e4:a4:98:
0e:08:7a:c6:01:ad:18:e7:81:21:bd:cb:76:10:e7:2a:51:ed:
87:6d:d2:b4:47:9a:5f:b2:69:54:29:bf:c3:cb:d0:cb:f6:fa:
a3:b5:b3:6f:a6:e6:77:2a:ff:e8:a8:df:26:d8:7d:00:9f:74:
0f:03:7d:88:7c:74:37:c5:b7:ec:3c:1d:a6:b9:19:6d:a8:64:
27:2d:a4:6b:97:d7:35:f4:f2:5b:ea:8b:95:d9:16:5e:f3:56:
20:a7:e0:72:d0:f4:50:88:88:4e:40:c6:da:f2:8a:28:fa:5c:
f6:70:43:73:a5:a6:04:7f:fc:de:7b:bb:42:fb:0d:24:60:83:
eb:34:cf:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:47 2025 by rpki-client