Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
File: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft (raw, json)
Hash identifier: MefgN0q3xVJms65kPE8/dCxr7e2Sn9hsaFjKGjul62o=
Subject key identifier: B5:4F:AD:89:49:76:BB:37:09:3B:CB:70:CD:9A:7D:01:53:08:CE:48
Authority key identifier: F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
Certificate issuer: /CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Certificate serial: 0199240D1393D5C0C90053BEB2426243AFAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 12:01:00 +0000
Manifest this update: Sun 07 Sep 2025 12:01:00 +0000
Manifest next update: Mon 08 Sep 2025 12:01:00 +0000
Files and hashes: 1: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl (hash: WN6eIjxgfw1tPcmi4Tts+lOQSdniLkoMvDYRFAcNNgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:13:93:d5:c0:c9:00:53:be:b2:42:62:43:af:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Validity
Not Before: Sep 7 12:01:00 2025 GMT
Not After : Sep 8 12:01:00 2025 GMT
Subject: CN=b54fad894976bb37093bcb70cd9a7d015308ce48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:4d:c7:1c:69:e0:86:59:d1:e5:99:fb:1c:
b6:17:1b:8d:0d:3b:a9:5c:e6:2e:8a:54:76:de:07:
db:d8:9f:32:12:0d:bb:3a:7e:02:d5:55:ee:67:7d:
a9:dd:6d:3a:96:fc:2c:90:b2:8d:57:86:1d:ff:ba:
7d:d6:56:a6:66:02:fc:bb:24:de:6f:10:24:85:07:
6d:81:f4:d1:32:d8:bb:71:4e:e8:99:49:ab:7e:9b:
1f:cf:02:d8:f4:c2:ae:c4:53:58:37:06:f9:06:f3:
c5:91:8a:e3:b3:b3:24:7a:8b:ff:3d:5a:ac:3a:ee:
c0:d9:bd:72:9b:a9:c0:1b:05:57:2b:86:f4:6a:5f:
90:1c:89:88:19:3a:70:32:3c:4e:08:20:5f:91:31:
51:d6:89:b7:17:35:67:04:31:d2:e3:c9:dc:54:cd:
62:bf:d6:44:9e:c6:2e:95:68:a8:8c:60:3e:d0:50:
16:e3:a6:f4:3b:ab:47:77:4f:bf:aa:70:22:bd:8c:
d5:73:8d:da:37:39:ab:9c:78:5c:88:e1:33:bc:81:
be:ea:f9:cf:c0:db:ec:45:79:31:e0:88:56:3e:bf:
a4:36:46:b6:b7:2d:63:fe:3c:62:07:ae:19:32:61:
04:72:9c:b6:97:9e:69:f9:2b:43:b8:79:50:d6:b4:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4F:AD:89:49:76:BB:37:09:3B:CB:70:CD:9A:7D:01:53:08:CE:48
X509v3 Authority Key Identifier:
keyid:F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ae:f9:d2:f7:8b:cd:98:23:f6:1c:15:55:9c:32:c1:3f:3d:
fc:ac:36:bf:ea:fb:9b:7c:53:42:a9:38:66:3c:3a:b0:5c:64:
f1:36:29:a1:30:74:03:84:f0:d3:d9:01:5d:2d:64:d9:df:47:
06:ad:46:f2:f4:c7:b4:9e:e5:bb:0a:63:e8:61:96:66:ea:ea:
e2:cd:25:7c:4d:51:2e:ed:c2:f9:32:a8:63:b4:be:c7:99:fd:
a1:ac:04:74:93:69:85:2f:87:a7:4a:34:f9:0f:0c:4f:f4:06:
79:1e:a0:48:f1:86:ef:4f:ea:91:1f:ca:7e:98:3c:f6:6d:83:
bd:eb:a2:6e:17:0c:bf:f8:12:83:e8:bf:87:ce:87:93:c1:e3:
7b:f6:86:95:34:6b:ea:67:f7:21:42:35:12:12:30:4a:b9:62:
42:3e:ed:7b:06:42:f8:a8:35:1a:40:63:f8:be:7e:f1:ab:b3:
23:b3:85:40:e5:bc:d3:84:91:57:4e:0d:98:b3:a2:b9:7a:d6:
a0:b0:56:75:ca:00:d2:39:53:80:7c:90:c8:d8:33:65:e7:cd:
cc:96:fd:78:f9:91:11:1f:2b:b7:f0:73:93:af:b9:8a:00:ca:
0e:de:8a:ed:ef:28:ef:8f:91:13:e1:6d:09:f2:3c:6c:2a:9e:
d6:ef:26:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:36 2025 by rpki-client