Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
File: 9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft (raw, json)
Hash identifier: 3lRsmHAhM6bPm1hUeq+xzcb6H2D2+V+wUw/v/uRG/ug=
Subject key identifier: 92:6C:25:AE:C3:B9:D2:01:52:9F:5F:A2:9C:B0:F0:06:42:42:9C:77
Authority key identifier: F4:ED:5E:5D:BB:A1:EA:B6:D3:95:8E:59:41:82:9C:9D:A1:B2:C6:7F
Certificate issuer: /CN=f4ed5e5dbba1eab6d3958e5941829c9da1b2c67f
Certificate serial: 0197D3994A2ADB7DD488C1150E842192A5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
Manifest number: 09D0
Signing time: Fri 04 Jul 2025 04:02:07 +0000
Manifest this update: Fri 04 Jul 2025 04:02:07 +0000
Manifest next update: Sat 05 Jul 2025 04:02:07 +0000
Files and hashes: 1: 9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl (hash: 2v9bx0pmmMj6/ED9wQ+PGVS4FzCPaj7IPAFjshxldFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 04:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d3:99:4a:2a:db:7d:d4:88:c1:15:0e:84:21:92:a5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ed5e5dbba1eab6d3958e5941829c9da1b2c67f
Validity
Not Before: Jul 4 04:02:07 2025 GMT
Not After : Jul 5 04:02:07 2025 GMT
Subject: CN=926c25aec3b9d201529f5fa29cb0f00642429c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:50:24:19:f2:54:af:60:ef:00:ad:1f:e3:1f:
8c:07:60:62:71:2e:f0:0a:04:5f:8b:c8:fd:67:7b:
3e:15:d2:f2:0b:ec:5b:60:fa:cf:b4:6b:f8:2c:4e:
7f:04:94:34:9e:c9:0e:61:af:48:a8:dc:43:d7:3e:
46:c1:89:74:b9:8f:dc:29:32:73:5c:3e:40:2e:52:
b7:c5:bc:d1:45:ec:e7:a1:d8:af:9e:f5:be:83:34:
13:0c:ef:69:68:59:1f:0a:3b:90:b0:95:01:cc:0e:
37:df:a6:1b:c3:38:46:1d:f2:c5:71:70:41:58:29:
92:b9:d6:6e:3e:88:35:78:08:6a:4d:f2:a4:f9:b4:
87:09:10:02:84:79:c0:7a:4c:e9:b2:c6:d8:25:bf:
01:15:25:62:ec:fb:0e:41:9d:33:79:c8:de:0c:ff:
db:af:c3:36:e4:9c:de:5b:2c:e1:08:74:c3:71:ff:
2e:3a:29:67:a5:f3:5c:16:53:3a:b0:3b:20:4a:f8:
a2:b6:69:2b:95:7e:e8:82:bd:a6:17:06:df:79:c6:
3f:9a:2d:2b:8c:c0:3e:b3:f0:5f:26:18:0e:a1:16:
29:6c:51:ec:4d:de:bd:29:f3:a0:1d:7a:d8:c2:1e:
8b:02:06:f5:5c:af:a3:10:3a:86:1d:19:ed:09:dd:
75:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6C:25:AE:C3:B9:D2:01:52:9F:5F:A2:9C:B0:F0:06:42:42:9C:77
X509v3 Authority Key Identifier:
keyid:F4:ED:5E:5D:BB:A1:EA:B6:D3:95:8E:59:41:82:9C:9D:A1:B2:C6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:07:4c:a8:10:bf:ef:87:13:a6:bb:2a:59:07:f4:a0:08:54:
14:4a:78:bf:3a:5c:e7:b8:46:62:b0:14:3c:3f:ee:1c:59:37:
7d:99:64:cc:4a:c4:d7:f4:48:6d:d2:55:76:80:b7:4a:c5:27:
c4:9c:07:29:1d:ef:19:1a:90:94:f3:4b:9c:57:06:40:e6:c3:
2f:af:9f:29:e6:da:df:b3:22:9d:69:2e:43:d1:4c:c6:f0:83:
99:98:6a:af:5c:a5:f7:71:81:dd:6c:66:ed:90:47:21:35:cb:
e5:ba:c3:d3:9a:ed:2d:1a:29:ca:4f:36:ab:b7:b3:e3:19:b7:
df:d7:3e:27:6b:17:a8:27:5b:1c:1b:a7:0f:4f:c5:3d:fa:3c:
84:a6:61:6c:79:78:83:55:61:6d:06:65:7f:2a:f8:b9:ad:5e:
57:f6:36:66:5a:03:b4:47:cd:82:5b:94:54:a2:6a:81:94:6e:
43:1a:f0:a3:0b:65:8d:8e:af:fc:ff:0b:e4:6c:3c:e2:93:e5:
26:45:43:3a:ee:5b:81:56:29:9f:87:4f:f3:12:78:cb:18:bf:
6f:e3:dd:3e:e9:0b:c7:8b:5c:bd:50:cf:98:00:7c:c7:dd:dc:
88:38:99:fc:ab:25:2d:ae:44:0c:c4:21:0a:5e:6b:8c:4e:01:
d1:68:0d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:33:28 2025 by rpki-client