Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.mft
File: n34J7YuBilTMw-tCb2elWhOKuH0.mft (raw, json)
Hash identifier: meZOxtSQLYWOdOyG0jVFxV7aY7xMRAESwtHbGQ8PR6M=
Subject key identifier: D0:89:C9:D2:92:42:0E:96:8C:1B:80:FF:F7:85:87:18:19:B8:EB:BA
Authority key identifier: 9F:7E:09:ED:8B:81:8A:54:CC:C3:EB:42:6F:67:A5:5A:13:8A:B8:7D
Certificate issuer: /CN=9f7e09ed8b818a54ccc3eb426f67a55a138ab87d
Certificate serial: 01993313CF67951D383CAE2BAAF0812A8BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n34J7YuBilTMw-tCb2elWhOKuH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.mft
Manifest number: 0A86
Signing time: Wed 10 Sep 2025 10:02:40 +0000
Manifest this update: Wed 10 Sep 2025 10:02:40 +0000
Manifest next update: Thu 11 Sep 2025 10:02:40 +0000
Files and hashes: 1: n34J7YuBilTMw-tCb2elWhOKuH0.crl (hash: OIYktElNU+fYD9qgp8v9NNpsxNQimFw9WLDhYGtmpWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/n34J7YuBilTMw-tCb2elWhOKuH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:13:cf:67:95:1d:38:3c:ae:2b:aa:f0:81:2a:8b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f7e09ed8b818a54ccc3eb426f67a55a138ab87d
Validity
Not Before: Sep 10 10:02:40 2025 GMT
Not After : Sep 11 10:02:40 2025 GMT
Subject: CN=d089c9d292420e968c1b80fff785871819b8ebba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:24:e5:be:1b:a3:3a:1a:72:84:aa:72:94:
79:11:d3:b4:63:05:1d:64:85:ed:56:f5:e8:b2:2a:
bb:3a:ba:73:12:4e:fe:bb:df:09:00:90:b4:de:c8:
ef:2f:42:a1:69:94:25:27:f9:a3:fc:0a:e5:68:45:
c6:85:e1:26:0e:00:31:a1:ec:07:70:91:89:3a:aa:
bd:d5:b8:6c:d1:3a:d2:89:31:6a:c5:7c:33:e5:f8:
47:94:8c:8d:42:67:da:d9:a3:b9:7b:a7:48:39:3f:
47:68:8d:b9:d9:91:a1:5b:0c:b4:fe:81:7c:9c:be:
8f:90:47:58:16:ce:00:36:b8:0d:f6:c5:46:f1:81:
44:73:71:99:45:7d:4e:5a:88:dd:68:4f:8f:9b:1e:
07:f3:b0:63:59:48:67:10:98:5a:04:4f:e5:0a:da:
ff:86:a6:85:7d:6b:cc:56:82:be:4c:f3:99:28:02:
d5:f3:02:9b:89:55:2c:87:f0:f3:cf:c7:ae:3e:ac:
b1:37:6d:df:8c:92:8e:a1:a6:09:71:82:b9:50:87:
88:52:2d:d1:05:03:3a:43:18:44:67:f4:45:7c:fa:
8b:b0:9b:66:b5:d2:38:35:22:fb:23:cb:f0:d5:30:
e4:04:47:3e:f1:cd:c4:33:1e:f1:aa:a6:dc:79:ef:
b3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:89:C9:D2:92:42:0E:96:8C:1B:80:FF:F7:85:87:18:19:B8:EB:BA
X509v3 Authority Key Identifier:
keyid:9F:7E:09:ED:8B:81:8A:54:CC:C3:EB:42:6F:67:A5:5A:13:8A:B8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n34J7YuBilTMw-tCb2elWhOKuH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ca:e6:95:98:fe:86:4f:f1:f2:93:02:b2:9d:ec:25:d1:6a:
46:e3:b6:f7:02:1b:08:52:5a:9a:5a:1d:f6:52:57:7b:19:86:
36:3f:f8:b0:19:6e:7f:42:56:63:d4:71:04:f9:26:34:c6:6c:
7f:e0:fd:85:50:35:82:3a:b3:d9:cc:1b:ce:c9:1d:ca:0e:2f:
fa:dc:01:28:5c:4d:b2:41:94:4c:71:cd:a3:4a:31:d1:86:a8:
5e:5d:88:ed:f8:33:c3:68:17:7f:e7:06:b6:4f:eb:7c:80:97:
00:a0:fd:d2:43:44:d1:25:38:b4:fb:97:84:2e:00:b4:47:d5:
44:be:76:5f:cf:7d:a0:0c:25:12:c2:5d:39:b3:60:cc:2c:b3:
69:0d:ef:4b:be:53:6b:a0:ac:8c:c1:5d:6b:b0:eb:df:a5:05:
71:f1:62:9e:a8:e1:f1:cf:49:62:04:bb:e1:0e:4c:81:10:a9:
18:a4:91:a0:2a:b4:bb:f0:35:ae:e9:35:3a:38:fa:47:65:3f:
1e:ac:26:a0:f5:04:f7:28:7e:f1:47:32:94:89:ba:c7:69:c4:
f6:ad:16:57:cf:86:8b:c6:47:d2:ed:45:c3:28:62:df:8c:76:
ee:3d:54:88:43:ba:31:56:7e:d6:b3:3e:54:fc:5a:9d:60:4d:
6e:a9:07:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:17:58 2025 by rpki-client