Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
File: 9IOBPbTT97DwLDH4W1JDww9F4lI.mft (raw, json)
Hash identifier: 2IBabTFnZTgP6/HpkojjftbeUaOL1QgoxjywNCQ6dvc=
Subject key identifier: 31:FC:10:2B:B2:CB:35:66:FE:2F:03:77:CE:0E:59:40:07:AB:D9:45
Authority key identifier: F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52
Certificate issuer: /CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
Certificate serial: 019923A057C5A27D6C2B5DFE9441C264B990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 10:02:14 +0000
Manifest this update: Sun 07 Sep 2025 10:02:14 +0000
Manifest next update: Mon 08 Sep 2025 10:02:14 +0000
Files and hashes: 1: 9IOBPbTT97DwLDH4W1JDww9F4lI.crl (hash: Yubwc14dcObm43X4m44M2q4JOxwvcUOLBZn97oz3d6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:57:c5:a2:7d:6c:2b:5d:fe:94:41:c2:64:b9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
Validity
Not Before: Sep 7 10:02:14 2025 GMT
Not After : Sep 8 10:02:14 2025 GMT
Subject: CN=31fc102bb2cb3566fe2f0377ce0e594007abd945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:4b:da:ba:6e:d2:62:58:97:11:77:dd:72:
ef:40:7e:b4:1f:cc:33:b3:05:40:53:57:6c:f5:3f:
84:86:fd:c4:4e:4b:2a:64:a0:8d:57:e0:5b:e5:70:
2a:7f:39:c3:fb:10:43:21:99:5a:53:d6:03:aa:c9:
fd:e4:a9:b7:85:d4:7d:8f:00:80:dc:e4:b2:2b:56:
f1:da:fe:63:6e:5c:87:86:1d:68:99:e8:6a:2d:09:
a8:6b:71:3c:28:d3:be:ee:b0:0d:19:8b:46:56:c4:
2a:21:bf:cb:4a:27:e0:d4:f3:58:18:c9:e3:bc:d1:
a0:3d:b9:4a:b0:79:2a:b4:c1:98:45:87:59:72:30:
f7:45:b2:fb:de:2b:2e:a0:0d:46:c7:a3:6d:c8:e0:
b9:b3:95:86:2b:c1:f4:cc:3e:a3:4e:a3:91:6f:b2:
54:db:12:ca:c9:86:72:81:8e:04:c1:92:83:d6:8d:
bb:60:fd:5c:00:c4:ad:fa:f8:2c:3e:8c:cb:d8:36:
0e:97:59:1d:e0:19:ab:61:3c:79:66:0d:64:c0:78:
e8:ac:4e:5b:4b:1e:d7:61:bd:0b:fa:5a:fc:47:f1:
7e:3d:7c:b3:4c:0a:fa:af:1d:96:99:93:84:80:49:
f3:ab:a5:fe:51:25:d8:da:4e:06:2a:4f:5f:25:ee:
01:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FC:10:2B:B2:CB:35:66:FE:2F:03:77:CE:0E:59:40:07:AB:D9:45
X509v3 Authority Key Identifier:
keyid:F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:18:8a:24:ad:04:8a:a4:25:b0:65:12:e6:d1:c5:e0:14:1f:
c0:0c:20:44:b1:e4:61:55:ea:87:c5:df:84:69:33:52:be:79:
b7:0c:f7:fa:76:0c:48:a2:6e:22:41:0e:8a:e7:a3:ce:9e:1c:
cc:1c:32:0c:ac:78:2e:cd:0e:d7:50:53:b7:bd:c2:1f:66:fc:
0b:ac:a6:77:37:6c:79:32:32:a8:ea:69:36:2b:71:5b:9c:a5:
43:d8:bf:0f:3c:8f:96:fd:70:93:fd:43:79:ab:54:49:19:06:
42:5e:18:5c:36:94:a3:c5:b8:52:ce:1e:28:0d:ef:d4:5d:40:
02:9f:a4:fc:0c:ba:4c:42:43:6b:45:e3:02:71:d7:66:b6:4f:
78:04:6f:92:aa:11:de:23:cb:05:df:bb:f5:17:24:f6:93:69:
03:02:bd:d2:1b:dc:5e:83:24:66:56:1c:f1:9f:c5:87:27:14:
c2:f0:c8:e3:84:05:d8:80:45:4b:77:c5:ce:d3:1e:c4:19:56:
db:bb:2f:2d:98:6b:7f:13:71:fc:1b:6b:b6:b0:bc:6d:91:87:
db:da:16:eb:08:4a:27:c5:15:16:02:81:47:ca:3b:36:9b:50:
34:ba:6b:08:30:f4:5c:bd:56:d2:da:c4:59:37:d0:86:c7:9d:
a2:3f:9c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:39 2025 by rpki-client