Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.mft
File: gXS2uiCeYit5ihT86qlEdi-nYpo.mft (raw, json)
Hash identifier: JsdlTzinYqH0zNmcaeqQRxLGLaEXRnc6bXLZExanOyY=
Subject key identifier: C8:61:11:A8:40:90:2F:67:9A:DF:88:B6:27:55:B6:35:E3:BC:0B:8A
Authority key identifier: 81:74:B6:BA:20:9E:62:2B:79:8A:14:FC:EA:A9:44:76:2F:A7:62:9A
Certificate issuer: /CN=8174b6ba209e622b798a14fceaa944762fa7629a
Certificate serial: 019922554E8BD0787EAA25C81B98383C454B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXS2uiCeYit5ihT86qlEdi-nYpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.mft
Manifest number: 0130
Signing time: Sun 07 Sep 2025 04:00:39 +0000
Manifest this update: Sun 07 Sep 2025 04:00:39 +0000
Manifest next update: Mon 08 Sep 2025 04:00:39 +0000
Files and hashes: 1: gXS2uiCeYit5ihT86qlEdi-nYpo.crl (hash: NNWs7ByKm2yv46O18jWtgChm5promByqyfM5TcFi7pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXS2uiCeYit5ihT86qlEdi-nYpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:4e:8b:d0:78:7e:aa:25:c8:1b:98:38:3c:45:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174b6ba209e622b798a14fceaa944762fa7629a
Validity
Not Before: Sep 7 04:00:39 2025 GMT
Not After : Sep 8 04:00:39 2025 GMT
Subject: CN=c86111a840902f679adf88b62755b635e3bc0b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:84:2d:5b:a0:9d:a3:bf:55:71:31:35:07:90:
6b:d2:0f:3e:b7:15:02:8f:91:29:3f:f9:26:d8:89:
d8:49:99:42:12:fa:a3:b6:83:ce:2d:c1:11:ec:60:
d3:89:e6:c4:c6:15:73:19:31:e5:12:b3:8a:6c:f8:
b1:df:a3:dc:7c:8d:c5:22:58:98:02:aa:8d:99:76:
ee:ff:bb:f7:59:50:22:e4:10:11:dd:b8:a5:d8:b7:
1e:91:6a:03:e3:dd:d6:ee:97:51:94:d9:1f:7f:dd:
92:3f:99:de:63:93:90:01:eb:0f:b7:2d:d9:8d:1f:
89:a8:a3:92:19:eb:e2:ee:7e:11:dc:f9:61:6c:5c:
7b:34:c8:d4:0b:97:99:ca:c6:98:88:c0:26:fd:f8:
67:31:f9:dd:59:5e:22:d8:8e:f7:be:e9:f5:df:71:
e3:8c:a2:5d:3c:fd:1b:41:47:46:74:59:85:72:2d:
37:1c:fe:a4:9f:5f:65:ba:45:e8:99:88:cc:e8:a3:
ae:48:38:31:d8:80:59:99:56:a0:27:d2:69:e5:36:
35:7a:63:f6:b4:c9:6c:5a:2a:ab:e1:6d:bf:ec:ba:
0b:e0:4d:af:76:93:da:09:56:be:4f:18:f6:d5:21:
10:81:79:0c:33:80:ab:b8:61:5d:35:0c:0e:0b:b6:
00:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:61:11:A8:40:90:2F:67:9A:DF:88:B6:27:55:B6:35:E3:BC:0B:8A
X509v3 Authority Key Identifier:
keyid:81:74:B6:BA:20:9E:62:2B:79:8A:14:FC:EA:A9:44:76:2F:A7:62:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXS2uiCeYit5ihT86qlEdi-nYpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7a:6a:4d:2a:93:c8:7d:58:50:88:34:9a:10:e5:2f:f6:5d:
dc:6e:14:a9:a1:37:d2:ea:21:ba:d3:c5:50:69:a7:63:38:8b:
05:7c:f3:90:6f:59:4f:7b:3b:31:02:06:6b:98:92:8c:cc:54:
23:2d:d2:90:bd:5a:7f:1b:4e:36:92:7d:d1:ab:0a:fe:d2:2d:
17:ee:d0:e8:51:b9:6c:29:69:64:6e:d1:f3:a1:d5:06:11:1f:
f1:65:e9:ec:1c:ea:05:ce:0c:24:8a:dd:f0:19:74:2a:aa:63:
89:e3:18:8b:94:51:69:cc:82:75:38:b8:de:61:8e:ad:48:14:
ab:e8:6b:62:7a:f3:29:f0:af:f6:ab:00:fd:7f:57:35:28:bd:
73:4a:5e:23:36:18:92:4d:fa:7c:2b:a0:e6:06:1b:8f:c8:6e:
9f:4d:01:bc:8a:9f:ff:eb:bd:69:11:2f:a1:1f:37:d7:61:40:
7c:96:5a:4c:01:ff:db:bd:4e:bd:3b:b7:fc:2b:1f:c5:0f:0a:
94:15:86:a2:5f:77:7a:c2:ae:56:34:f3:50:7e:fd:04:a0:1d:
89:22:20:44:3e:aa:74:de:da:c8:fd:f2:f9:0a:96:f8:4f:03:
1c:92:14:fb:2b:88:dc:2f:b3:2d:f6:3a:4a:70:89:b2:c2:ec:
ff:ba:d1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:15 2025 by rpki-client