Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
File: r03WWsHW2oS6m4HCCeCnYXNF6iM.mft (raw, json)
Hash identifier: 79Jr2qbXMJm5UTnvqBFAY4NqIaZsLj/T4H6QA7TVNug=
Subject key identifier: 54:D9:DF:C5:6A:56:A8:DE:09:5A:D1:55:CA:90:D0:2D:26:57:CF:67
Authority key identifier: AF:4D:D6:5A:C1:D6:DA:84:BA:9B:81:C2:09:E0:A7:61:73:45:EA:23
Certificate issuer: /CN=af4dd65ac1d6da84ba9b81c209e0a7617345ea23
Certificate serial: 019923A05E97DCA150391B476E4EF5C2543C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
Manifest number: 09A4
Signing time: Sun 07 Sep 2025 10:02:16 +0000
Manifest this update: Sun 07 Sep 2025 10:02:16 +0000
Manifest next update: Mon 08 Sep 2025 10:02:16 +0000
Files and hashes: 1: r03WWsHW2oS6m4HCCeCnYXNF6iM.crl (hash: hKVNk6QBkJLDCVAb+D6mQBwxz30u1DSxzU2Xmo8G13I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:5e:97:dc:a1:50:39:1b:47:6e:4e:f5:c2:54:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4dd65ac1d6da84ba9b81c209e0a7617345ea23
Validity
Not Before: Sep 7 10:02:16 2025 GMT
Not After : Sep 8 10:02:16 2025 GMT
Subject: CN=54d9dfc56a56a8de095ad155ca90d02d2657cf67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3f:f3:c1:82:a6:8c:c0:2d:f3:e0:b8:b5:b0:
f8:51:5c:ba:1d:0c:76:64:8d:5b:6a:c6:85:32:8e:
bf:ad:27:5c:d9:79:81:cb:3f:1f:d3:a5:64:c9:e0:
4f:77:32:34:71:5c:92:dc:51:ee:ef:4d:00:01:d8:
b7:04:18:b3:0e:88:31:47:f5:5d:87:6b:88:1d:a1:
da:2b:e4:04:73:33:68:38:57:76:8d:d2:11:80:9c:
8d:50:b6:34:9f:89:35:5a:40:7e:67:a6:c9:7d:39:
e6:72:03:c0:91:0f:fc:a0:8d:6c:5f:fa:45:f5:95:
4f:82:40:55:d2:11:70:d6:14:30:bd:fa:f2:ff:56:
a4:4d:f9:31:0e:76:57:99:89:1b:32:72:20:ac:51:
64:ca:c9:7c:bd:f2:d6:ce:dd:97:eb:55:ea:23:c0:
a7:8e:01:10:f1:f8:77:f0:8d:4e:28:7f:ff:4b:61:
d0:5a:3b:62:03:df:f2:d2:78:b4:65:0a:dd:3a:6f:
63:61:ea:f9:37:be:05:6d:d4:4a:e4:80:4a:ca:a5:
65:0f:30:69:0d:cd:2b:0f:22:cb:8d:19:07:48:a5:
53:73:02:8b:70:a9:ee:23:fc:a9:16:fb:af:39:32:
5f:94:19:70:fa:1a:e9:6e:7e:a8:64:94:01:d3:f0:
8d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D9:DF:C5:6A:56:A8:DE:09:5A:D1:55:CA:90:D0:2D:26:57:CF:67
X509v3 Authority Key Identifier:
keyid:AF:4D:D6:5A:C1:D6:DA:84:BA:9B:81:C2:09:E0:A7:61:73:45:EA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:21:9c:99:e4:89:e2:6c:20:af:55:93:47:b4:2b:b8:a1:d0:
ba:41:24:26:ee:d0:fb:96:56:e0:e5:9d:61:a6:bd:dd:dc:8e:
cc:ac:3e:2e:7f:b7:48:a3:68:52:97:2b:87:f1:7d:5f:b7:bc:
fb:7f:84:38:76:b4:f3:18:25:f8:11:d1:42:80:4c:e8:b9:de:
14:74:78:58:f6:bb:60:2a:4d:08:d1:30:a3:62:09:33:77:cc:
95:dd:2e:0c:78:04:d6:f4:11:bd:20:3f:9f:54:47:3b:47:6c:
ee:ec:3c:d0:60:ea:a2:d1:48:c7:40:74:d0:42:93:02:d7:24:
25:d1:95:1b:d6:0c:75:b8:ea:68:de:0f:d2:be:a1:2c:ad:c5:
d0:ad:d9:a9:11:16:a5:b5:76:31:d7:2e:c1:d5:10:54:26:14:
4a:df:91:8f:65:ff:22:ab:68:80:35:89:60:a1:0f:3c:d9:22:
1e:82:27:29:0b:9a:34:8a:b0:7d:79:5a:c0:44:97:34:98:e6:
ec:b3:64:61:6e:25:7f:df:2b:e2:89:8d:ba:30:98:ab:4e:ce:
40:8a:91:79:8b:86:5e:da:11:58:cd:f7:cd:13:14:01:a8:46:
7b:87:f3:1f:ab:9f:3d:22:c5:3b:f1:79:82:6e:c3:3d:7f:76:
ba:b3:ee:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 16:08:07 2025 by rpki-client