Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
File: 9E8rYv2EXJFI4OImQldIw8bpdTk.mft (raw, json)
Hash identifier: tia8f9LBpb0LICVqaj2aEK+qF/LGWeNv2BSuRsZEKkg=
Subject key identifier: 88:D5:51:D1:43:6E:04:B5:41:4E:CC:63:44:A5:F0:1F:47:E5:6E:FC
Authority key identifier: F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
Certificate issuer: /CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Certificate serial: 019922C3A03D3135CBFDE5124FB13BF65ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
Manifest number: 05F3
Signing time: Sun 07 Sep 2025 06:01:09 +0000
Manifest this update: Sun 07 Sep 2025 06:01:09 +0000
Manifest next update: Mon 08 Sep 2025 06:01:09 +0000
Files and hashes: 1: 9E8rYv2EXJFI4OImQldIw8bpdTk.crl (hash: oMxto85jwnCOoGy/6qMoBGVzAeIZAYS1aBwJFn8HWzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:a0:3d:31:35:cb:fd:e5:12:4f:b1:3b:f6:5e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Validity
Not Before: Sep 7 06:01:09 2025 GMT
Not After : Sep 8 06:01:09 2025 GMT
Subject: CN=88d551d1436e04b5414ecc6344a5f01f47e56efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:61:9e:6f:ad:bf:be:ce:81:e1:23:1e:2e:
2e:34:63:13:8a:2e:78:98:86:ec:f4:9f:fa:b8:1e:
7b:1b:0f:64:5c:7d:17:0a:c5:fd:59:15:75:86:56:
9f:03:bb:3b:74:d5:27:dd:4e:fe:93:52:97:f5:b9:
74:97:08:92:0f:9e:30:63:0b:9e:aa:f3:6e:d3:6d:
45:3c:0e:3d:54:b0:1c:91:56:a7:24:84:73:40:c3:
93:df:11:ed:a4:3c:69:41:01:1a:cf:4b:d3:18:96:
3c:25:5c:fb:d7:4a:bf:19:d1:d8:de:8c:18:d1:a4:
f1:c2:06:e0:2d:8f:67:63:20:7b:90:75:b7:f7:96:
4a:1a:54:f0:fb:f5:91:07:cf:86:b8:f7:95:30:0a:
f2:fd:95:5b:7f:93:79:eb:8b:7c:5d:e3:a4:0d:3a:
af:52:62:52:d1:ab:a5:9e:d5:e7:9a:0e:40:97:ca:
a0:ab:9f:36:fa:d4:f4:cb:4a:5b:10:36:65:3e:32:
49:b9:99:ef:c9:40:d1:c6:db:ed:14:ea:03:46:1d:
96:10:32:d0:d0:70:ad:af:95:b2:f2:61:53:4a:be:
09:45:68:93:84:47:5b:51:89:2b:62:3d:a2:fc:2c:
50:6a:9b:a6:5c:e5:d7:9c:ec:b2:db:af:95:37:bf:
21:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D5:51:D1:43:6E:04:B5:41:4E:CC:63:44:A5:F0:1F:47:E5:6E:FC
X509v3 Authority Key Identifier:
keyid:F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ed:79:8e:0e:60:85:35:51:6b:64:02:e5:43:03:e1:69:57:
ef:e1:d8:a5:2e:31:85:ea:0e:71:43:46:a2:c1:ba:04:4e:fe:
f3:70:4c:4c:23:32:58:8e:13:09:9f:1c:ae:01:53:5f:59:14:
b0:4e:b6:b0:fb:71:c6:d1:95:1e:22:78:9d:62:82:df:1b:04:
ba:d4:5f:b5:3f:62:e2:41:b2:ac:f7:f8:03:ea:10:ed:f9:90:
28:e3:cc:8d:16:a6:cb:ae:93:ab:a1:f5:d5:35:d2:8c:92:3f:
7d:72:d5:98:3a:44:7b:48:f2:0c:b0:08:36:1f:66:89:fe:2b:
d1:7f:f9:00:41:83:18:51:d7:35:b5:4b:86:16:d2:bf:57:4a:
07:63:4b:72:5b:08:89:6e:74:f8:06:6c:b9:a4:3d:18:8d:3f:
42:f7:70:a7:43:7d:ba:bf:5c:4c:1b:06:19:6c:d7:0f:c7:c0:
58:61:d0:16:bf:61:b8:04:99:6c:5c:34:24:c2:d8:36:ae:f4:
d5:20:34:51:7b:bd:61:8f:b0:b9:8b:86:7c:12:e5:da:7c:1e:
4a:c5:c3:b5:04:06:0b:9c:33:93:1c:d3:c4:cc:0d:81:c6:6f:
7b:e7:66:ef:fe:da:43:e4:87:a4:8f:da:85:32:9e:74:ce:98:
0d:bb:56:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:12 2025 by rpki-client