Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
File: 9URgWW1tUyQB3jE9-JA2blN21gI.mft (raw, json)
Hash identifier: dPtXNynAuJ5WtNOAoCdPnrr+E5up52+H0ItWFUP9xSE=
Subject key identifier: D7:65:9D:FB:C1:80:AD:17:0E:22:2C:47:2C:52:EE:74:BC:22:F9:CE
Authority key identifier: F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
Certificate issuer: /CN=f54460596d6d532401de313df890366e5376d602
Certificate serial: 0199221EFB2824DC6AD5D467FD7151D05E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
Manifest number: 0643
Signing time: Sun 07 Sep 2025 03:01:19 +0000
Manifest this update: Sun 07 Sep 2025 03:01:19 +0000
Manifest next update: Mon 08 Sep 2025 03:01:19 +0000
Files and hashes: 1: 9URgWW1tUyQB3jE9-JA2blN21gI.crl (hash: aO4Ej1W9/L72smWJ1Ciux2QPc0fS4rDlZ0CTBg+NDh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:fb:28:24:dc:6a:d5:d4:67:fd:71:51:d0:5e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54460596d6d532401de313df890366e5376d602
Validity
Not Before: Sep 7 03:01:19 2025 GMT
Not After : Sep 8 03:01:19 2025 GMT
Subject: CN=d7659dfbc180ad170e222c472c52ee74bc22f9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:fd:79:af:18:96:c7:ae:35:9f:0f:99:10:
43:ac:55:ae:a7:fa:31:3b:4e:e2:d6:74:63:e9:02:
56:9f:fb:7f:dc:71:7c:d1:aa:fd:5c:0b:b3:a0:31:
45:60:b8:68:3e:a7:1b:26:50:dc:a9:c8:03:ae:6e:
f6:c2:6a:87:bc:da:7b:3c:3f:67:37:5a:14:58:57:
46:c7:e0:5a:b6:f6:74:46:16:5a:4f:b1:63:dd:26:
7a:a9:e1:c4:e8:16:25:30:34:8c:30:99:2e:0b:bd:
a2:d6:33:8c:b8:66:48:19:99:f5:d3:be:15:b4:3b:
4b:30:c9:67:e2:0d:da:5c:ac:50:35:70:80:45:77:
e9:ca:e8:80:c6:85:af:ca:a0:7c:06:66:5d:ee:7f:
1d:25:80:f1:9b:96:dd:19:dd:e1:0c:d2:37:3f:8d:
be:b7:20:eb:db:a9:bf:d3:b8:1b:1c:02:d0:0d:bd:
45:10:34:17:26:40:a2:be:6a:d3:10:6c:6d:19:b4:
f5:d1:52:af:24:7a:26:f9:80:39:dc:ce:90:b9:a1:
81:45:a4:53:cf:e3:65:49:2a:63:28:b0:0b:d5:a7:
5f:90:2a:42:d4:62:0e:70:2a:9a:a9:0d:7c:a6:83:
6f:71:a4:98:ec:43:89:10:0f:0d:6f:5a:a1:58:08:
06:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:65:9D:FB:C1:80:AD:17:0E:22:2C:47:2C:52:EE:74:BC:22:F9:CE
X509v3 Authority Key Identifier:
keyid:F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:79:ab:60:34:b2:65:18:23:ff:72:22:6d:0d:81:b4:ed:ec:
a3:5f:36:a2:15:89:28:9a:4a:fd:ea:14:ae:54:3c:c0:e3:98:
5a:82:20:55:ae:de:2f:83:1d:aa:f9:af:ce:d6:c4:ce:bd:27:
e4:b6:ec:ab:9a:29:30:6b:fd:fb:99:55:d3:06:16:19:59:2d:
65:0f:48:0d:0d:a5:e8:e0:6b:59:8d:be:5a:ac:9c:75:a7:a7:
62:b9:f8:15:50:18:bc:38:fb:60:f7:45:1d:f2:8f:d3:08:36:
bc:96:57:9c:b0:4d:db:04:7a:f6:28:9e:42:8e:41:c7:1f:5a:
74:ef:b0:fa:2f:1c:37:d9:bf:bc:e6:1a:69:d3:9e:03:8a:16:
b0:d4:a5:6e:a9:10:f8:1e:a3:6d:c2:df:38:fc:6f:47:ac:e9:
bc:46:ce:0a:fe:60:d0:7a:ec:ac:76:3b:c1:6c:5a:58:63:3f:
82:28:ae:29:f5:2d:0e:d3:dd:7b:7e:bb:a7:7f:13:32:b4:30:
3f:05:f3:6d:bf:98:9b:5d:aa:52:2a:59:2e:9e:95:f2:3d:73:
08:61:17:d1:fe:f6:12:ca:cc:32:24:38:3e:3e:49:2c:63:60:
e7:af:24:35:c1:76:25:5e:43:97:78:11:96:bf:d2:53:cf:f6:
38:17:76:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:55:27 2025 by rpki-client