Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft
File: 9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft (raw, json)
Hash identifier: 9krr5uG9PXJ8TD0DJYdPjJvcqUprzXkxwHStQHhuBjw=
Subject key identifier: D4:D8:CA:8A:B8:C1:CD:7C:9E:D7:22:06:32:2C:B0:0F:EF:93:30:39
Authority key identifier: F7:14:3E:85:7E:21:54:30:FE:0C:B5:2C:2D:F4:CB:ED:1B:34:73:8D
Certificate issuer: /CN=f7143e857e215430fe0cb52c2df4cbed1b34738d
Certificate serial: 019923312208621E5BA8D55B899DA09B864B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft
Manifest number: 14
Signing time: Sun 07 Sep 2025 08:00:46 +0000
Manifest this update: Sun 07 Sep 2025 08:00:46 +0000
Manifest next update: Mon 08 Sep 2025 08:00:46 +0000
Files and hashes: 1: 9xQ-hX4hVDD-DLUsLfTL7Rs0c40.crl (hash: yTiDIky45ckkMB0hs4aQDqYOMfh3oAxXi6/jKfhiC5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:22:08:62:1e:5b:a8:d5:5b:89:9d:a0:9b:86:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7143e857e215430fe0cb52c2df4cbed1b34738d
Validity
Not Before: Sep 7 08:00:46 2025 GMT
Not After : Sep 8 08:00:46 2025 GMT
Subject: CN=d4d8ca8ab8c1cd7c9ed72206322cb00fef933039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:b8:b2:ce:2d:4f:9a:10:ae:c4:ce:e3:78:
1d:52:f7:ad:a1:45:9d:10:f5:19:2d:d2:39:ef:6e:
6c:e6:ab:c5:c0:dc:af:99:fc:48:55:f1:76:ca:a4:
84:92:b1:80:d3:c0:14:8c:2c:ef:21:00:bd:2b:61:
14:d0:a0:60:7f:e1:b2:d9:da:9c:19:2c:2d:58:3c:
8f:c2:e9:df:23:03:67:9f:e1:f4:bd:0f:f1:3b:2d:
c1:55:f8:4f:cb:40:d8:14:2a:de:49:5f:96:d1:c4:
7d:97:4b:17:e2:67:00:87:be:97:be:0a:d3:9c:d5:
a9:62:63:7c:84:9f:64:9e:5c:cd:b9:07:41:5d:db:
16:2d:02:6b:13:ce:3e:db:21:0f:0e:81:16:c1:3e:
c5:71:07:56:5a:42:ad:3f:73:65:27:70:9c:86:e7:
ef:88:54:f2:6b:bf:20:b4:b1:d0:29:9e:c7:f6:28:
1b:ee:b1:84:fd:75:77:ac:f9:b7:80:c3:74:25:f7:
99:23:a3:84:0d:db:24:7c:43:a5:80:6d:89:0f:d1:
2a:de:d0:4c:a0:b1:ff:80:fe:6e:f0:96:ad:44:4d:
08:5b:58:80:8b:c8:4c:5c:a0:e3:ac:f1:bd:4e:97:
be:2b:32:c3:75:49:fa:86:0e:90:90:10:a5:65:9f:
6b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D8:CA:8A:B8:C1:CD:7C:9E:D7:22:06:32:2C:B0:0F:EF:93:30:39
X509v3 Authority Key Identifier:
keyid:F7:14:3E:85:7E:21:54:30:FE:0C:B5:2C:2D:F4:CB:ED:1B:34:73:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:eb:c5:fc:c9:7f:98:72:f9:d0:d9:e5:28:41:c9:49:bd:4f:
42:c2:89:6a:67:64:c6:7a:9d:88:2a:de:a2:74:3e:17:3d:59:
64:87:55:51:2c:d3:e9:e2:f4:4d:a0:84:17:2e:81:c3:b3:1c:
98:e4:40:e9:ff:df:6d:66:4b:07:e1:f7:76:4c:72:0e:61:db:
61:ad:15:bb:f1:e9:d0:41:53:f6:38:cf:fe:f6:21:f7:01:7a:
09:67:9a:8d:da:c1:69:c1:22:96:1f:be:ec:ff:64:56:8a:22:
94:e0:74:c3:cc:c0:00:d0:1e:c1:d0:f7:43:bb:58:b6:b1:b5:
b1:1f:95:8a:35:06:ca:f5:a0:2d:91:67:a7:2d:bf:48:87:38:
35:d2:84:d2:3d:75:21:31:23:89:0c:37:4a:66:96:e7:72:12:
4e:10:a6:44:00:8f:de:11:1b:45:31:8c:d3:f4:44:ee:c5:9f:
61:a8:fc:8b:7d:2e:c5:12:38:11:15:13:c7:fe:2c:52:be:8f:
86:37:c2:db:b5:ab:f3:2e:d2:bf:d7:bd:8f:ef:31:f2:b5:f5:
5b:31:4f:b9:2a:cd:1f:ae:7a:93:ef:63:ee:2f:4b:c2:38:37:
d3:a2:32:1f:16:18:0d:7d:50:49:44:04:dc:6a:e4:d4:62:82:
63:37:2c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:28 2025 by rpki-client