Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
File: fZ9lKePCbtCMlfdP5j17Lush9XE.mft (raw, json)
Hash identifier: 98LuOVckAp8kxDvNZC92IvutXO5EWpa361U4wifbsb0=
Subject key identifier: 6F:B9:F7:AF:2E:F6:F2:F6:51:D1:FA:47:63:DA:9A:28:D6:4D:0A:5F
Authority key identifier: 7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71
Certificate issuer: /CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
Certificate serial: 019923A0A5596D90C956CE79A85E1B532A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
Manifest number: 0305
Signing time: Sun 07 Sep 2025 10:02:34 +0000
Manifest this update: Sun 07 Sep 2025 10:02:34 +0000
Manifest next update: Mon 08 Sep 2025 10:02:34 +0000
Files and hashes: 1: fZ9lKePCbtCMlfdP5j17Lush9XE.crl (hash: eh007Ugm5ED83PeDs7Psaj8UBo/S2zEP5I0vjAvTtyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:a5:59:6d:90:c9:56:ce:79:a8:5e:1b:53:2a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
Validity
Not Before: Sep 7 10:02:34 2025 GMT
Not After : Sep 8 10:02:34 2025 GMT
Subject: CN=6fb9f7af2ef6f2f651d1fa4763da9a28d64d0a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2d:65:ac:00:85:ee:fd:9d:c0:46:52:fe:be:
c9:5c:e9:ea:e4:9d:d2:e5:05:1d:08:f8:c7:eb:d4:
45:5d:02:4d:8c:9b:05:8c:4f:04:62:83:10:e0:38:
10:ae:5b:42:98:4b:68:70:a4:04:c8:ab:be:52:88:
f4:fd:d1:b1:22:26:ff:d1:3b:b2:08:67:f3:30:40:
2d:fd:bb:b4:27:f1:05:47:24:9f:25:06:dc:6a:1a:
33:6f:d7:aa:81:e9:ff:13:87:d0:03:9c:fa:36:9b:
fb:fb:52:b4:dc:10:c2:a4:d5:11:1f:1d:74:13:16:
d6:66:03:84:44:37:d7:7d:12:88:57:67:a5:79:dd:
4c:bb:fb:a0:58:60:f0:8e:22:34:d4:a0:6c:d9:d8:
b1:7d:07:19:28:ed:e3:8f:3b:52:95:df:3a:df:b2:
43:8f:4d:70:ec:ad:7c:b1:b1:ad:60:82:2d:42:95:
b9:a2:0d:bd:a1:56:6a:c1:90:dd:68:c9:42:ad:80:
fa:51:c5:95:b1:92:e7:da:10:15:5e:23:b7:6c:ea:
1e:ab:61:bf:e4:30:e4:2c:49:e9:df:e0:e5:a7:70:
ee:d3:7f:e0:80:c4:d0:55:0a:9f:98:df:98:d5:c0:
9a:a0:44:a9:12:77:80:2b:8f:05:f7:5a:4f:32:fe:
49:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B9:F7:AF:2E:F6:F2:F6:51:D1:FA:47:63:DA:9A:28:D6:4D:0A:5F
X509v3 Authority Key Identifier:
keyid:7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e9:18:0f:1b:67:7b:f6:c5:f6:1e:cc:67:84:53:63:cc:6a:
40:a8:61:42:87:d5:9e:21:d3:74:2b:b9:d3:3f:43:1c:8c:ab:
a1:c3:64:50:34:2f:bc:ab:3a:57:12:fa:a6:6b:da:37:4e:08:
f0:8e:29:1a:cf:9d:58:c3:7e:23:11:66:96:56:3d:77:a9:de:
0c:7f:70:23:67:31:35:b7:70:a1:15:0e:8d:b3:88:11:6a:ab:
c2:5d:be:69:0b:39:8c:27:80:53:81:41:a9:19:3c:f7:c1:84:
4d:62:77:f1:79:91:52:1b:40:b7:b8:79:4a:b0:bc:5b:4a:a5:
7d:e0:69:84:fb:c0:93:71:14:37:16:58:aa:b4:b3:a0:ec:5e:
38:ba:32:1c:c3:4d:7c:24:88:2f:d1:e3:a6:b3:c1:7b:52:74:
3d:3c:f0:c0:b5:24:21:a3:05:61:3e:64:11:30:b8:0b:c4:a6:
64:6c:0d:c8:3e:dc:54:59:64:c0:2f:d4:b2:d4:56:39:48:91:
34:35:ae:a9:6e:c7:7c:d3:4c:3e:86:ab:5a:d4:17:95:74:a0:
82:1c:ec:40:9a:a3:80:aa:70:c3:d3:66:ab:66:7d:9f:45:51:
56:6f:87:6f:38:cf:fc:bf:87:72:4d:5c:71:fb:a5:b5:f0:ea:
fb:cf:6e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:33 2025 by rpki-client