
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
File: _v9e0ddTW8-gPh8oisLHdWobEWA.mft (raw, json)
Hash identifier: GsO+a/cey9+SF6nLeA/DSrmH572Ljw8VuOIYTTcwBH4=
Subject key identifier: D8:E2:99:D7:08:16:DC:34:C3:AF:36:46:28:04:CC:84:AF:BB:7C:0F
Authority key identifier: FE:FF:5E:D1:D7:53:5B:CF:A0:3E:1F:28:8A:C2:C7:75:6A:1B:11:60
Certificate issuer: /CN=feff5ed1d7535bcfa03e1f288ac2c7756a1b1160
Certificate serial: 0199233149C9D12E81E96E00C5ED820C1E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
Manifest number: 0126
Signing time: Sun 07 Sep 2025 08:00:56 +0000
Manifest this update: Sun 07 Sep 2025 08:00:56 +0000
Manifest next update: Mon 08 Sep 2025 08:00:56 +0000
Files and hashes: 1: _v9e0ddTW8-gPh8oisLHdWobEWA.crl (hash: IbHotajCiPsFoL3TtS/jg8/p4LMfXcN1ki4Gbnw9A5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:49:c9:d1:2e:81:e9:6e:00:c5:ed:82:0c:1e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feff5ed1d7535bcfa03e1f288ac2c7756a1b1160
Validity
Not Before: Sep 7 08:00:56 2025 GMT
Not After : Sep 8 08:00:56 2025 GMT
Subject: CN=d8e299d70816dc34c3af36462804cc84afbb7c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:1a:7c:d8:31:00:aa:b8:06:33:17:80:eb:
33:2d:a9:11:2f:ae:a2:c2:f5:be:87:1e:08:8c:84:
c7:65:32:9d:12:f3:92:be:8c:21:21:76:33:a8:02:
cb:6f:60:cf:12:8f:a6:e6:2f:4f:6f:15:6c:08:58:
44:0b:92:39:22:dc:73:68:e9:65:a3:55:a3:15:7d:
3e:52:dc:08:55:b7:1a:97:d8:09:26:42:62:b7:12:
68:80:49:94:f3:cf:2f:97:fd:79:60:1b:1a:ce:1e:
d0:13:bc:77:b7:85:d8:42:1c:28:5f:e6:aa:46:a5:
fc:3c:d2:8a:45:35:fd:90:3b:d4:c3:5b:a4:80:3e:
61:76:c0:5f:66:15:4e:d9:0c:57:ea:43:54:82:b2:
bc:cf:ca:02:1b:b8:0e:1d:94:55:1c:4d:7e:35:1e:
8b:c3:59:bb:17:78:18:17:37:d5:bd:8f:51:c9:84:
cc:98:8f:c4:08:d7:fe:f3:16:9d:61:0e:c8:df:c8:
9d:77:e3:d9:5d:39:f1:38:79:e6:67:81:ba:9a:d2:
6c:60:f8:c3:3d:57:57:b9:b0:8f:5f:52:c3:1c:ad:
cc:0c:c8:a2:18:db:09:12:60:82:94:b9:32:b2:ae:
39:fa:39:3a:2f:54:9b:3e:d5:15:f0:a6:58:6a:38:
68:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E2:99:D7:08:16:DC:34:C3:AF:36:46:28:04:CC:84:AF:BB:7C:0F
X509v3 Authority Key Identifier:
keyid:FE:FF:5E:D1:D7:53:5B:CF:A0:3E:1F:28:8A:C2:C7:75:6A:1B:11:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4f:59:6f:6e:c5:b9:a4:f5:07:dd:8a:6f:de:d8:48:9e:4e:
82:11:96:24:08:a0:78:ad:ae:ab:dd:77:28:e3:16:33:33:6a:
fb:62:01:4d:c8:b9:57:33:40:a4:c3:1f:79:53:2d:27:a7:71:
88:58:12:dc:8e:c6:eb:c1:62:f4:91:0b:f8:d2:40:aa:5e:61:
7f:27:9b:cf:78:9f:3f:a1:84:bc:b6:ea:3d:83:92:c9:f0:fb:
ac:0b:3e:91:49:2c:5e:06:da:d3:7d:20:88:7b:01:81:e2:73:
a7:2f:c9:e4:1c:fb:fe:4e:cd:d1:6d:99:0a:0b:12:b3:d2:f3:
b2:55:61:05:68:fb:82:a5:13:35:98:cc:cb:04:be:7a:25:1c:
48:97:29:c3:a8:b2:fe:fc:e3:ab:83:10:1e:af:4a:1d:25:ca:
69:eb:94:6c:0f:43:43:bc:07:75:bb:11:1b:be:75:4e:73:ff:
4b:6d:7d:eb:10:97:af:70:4b:f4:b3:78:9c:5b:06:16:08:9f:
99:c8:30:93:c8:ff:cb:da:65:63:c9:12:38:10:d1:2a:75:f6:
25:12:27:05:5e:b2:d4:3b:4d:89:fc:37:75:6f:da:1d:c0:b8:
c4:d4:ac:d6:8e:8b:94:30:6d:81:78:9d:4a:a0:2b:07:a4:b0:
6d:ca:52:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:09 2025 by rpki-client