Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
File: 1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft (raw, json)
Hash identifier: w1Hft+w18rhP24cxV3AhY9QJcdm/g1THnhRY8vmScmw=
Subject key identifier: CD:F0:3C:2E:2B:02:5C:55:25:2C:45:22:24:7C:17:74:3F:E9:D8:92
Authority key identifier: F8:9E:88:22:76:F8:0E:67:50:49:0E:EF:00:6D:E9:43:DA:CB:6E:0F
Certificate issuer: /CN=f89e882276f80e6750490eef006de943dacb6e0f
Certificate serial: 01992255F547E687EC8B3918D57884B90CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
Manifest number: 0922
Signing time: Sun 07 Sep 2025 04:01:22 +0000
Manifest this update: Sun 07 Sep 2025 04:01:22 +0000
Manifest next update: Mon 08 Sep 2025 04:01:22 +0000
Files and hashes: 1: 1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl (hash: HDXOJR7p1bZFcdpDriYQyQ04Ih8siDANr1MBTXM2N0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:f5:47:e6:87:ec:8b:39:18:d5:78:84:b9:0c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89e882276f80e6750490eef006de943dacb6e0f
Validity
Not Before: Sep 7 04:01:22 2025 GMT
Not After : Sep 8 04:01:22 2025 GMT
Subject: CN=cdf03c2e2b025c55252c4522247c17743fe9d892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:62:71:45:0e:37:97:e3:ab:6d:4f:fd:9b:ee:
69:fc:0c:90:2d:bb:e2:fa:c4:71:dc:40:ea:50:84:
ce:11:01:0a:75:b9:18:b4:67:6c:75:05:17:28:37:
8b:b6:89:20:0f:9e:1d:3a:6c:dd:42:00:a2:1e:91:
0a:76:27:d9:e7:7e:8c:05:87:8f:d7:98:b1:13:cb:
79:1b:1b:1a:7f:a5:46:d2:64:fd:ac:60:80:4a:cc:
e8:87:e4:83:b6:18:76:98:64:f1:38:b3:4f:67:9a:
c5:59:cc:12:68:73:8e:f9:38:92:51:ed:b4:f3:fa:
c0:38:8b:9a:08:d4:21:4f:8a:41:ef:2c:bb:49:60:
2a:8c:d6:f0:3e:ed:24:e5:fd:71:c2:e0:20:17:41:
09:26:63:d1:74:dc:23:0d:cc:8d:5b:c9:91:a3:d4:
28:2d:59:79:09:86:e7:b7:99:c2:ec:4f:3b:ce:6c:
a4:4d:b2:78:ec:42:a6:4a:67:53:3e:09:be:c1:71:
3a:3b:ab:43:8b:26:bf:2d:cd:75:a4:69:de:91:8e:
f1:84:90:a4:8c:0e:97:86:67:d3:69:41:db:4b:84:
5c:30:f5:c5:49:e0:ff:ba:c4:b9:ba:42:8c:60:a4:
dc:bb:79:e6:6e:78:5d:fa:cb:b1:63:21:7b:d0:90:
b3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F0:3C:2E:2B:02:5C:55:25:2C:45:22:24:7C:17:74:3F:E9:D8:92
X509v3 Authority Key Identifier:
keyid:F8:9E:88:22:76:F8:0E:67:50:49:0E:EF:00:6D:E9:43:DA:CB:6E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:58:8b:52:0f:50:34:3a:e7:f2:44:26:ec:61:ec:82:03:1d:
20:ba:8f:ff:65:9f:91:93:f9:f1:30:75:ca:9f:6b:13:ce:55:
5f:3b:80:5a:c1:17:fb:64:e6:06:ca:1b:7a:08:fe:a7:56:5e:
f8:c2:40:40:45:4d:b9:1c:24:25:a9:2e:5a:c1:d2:db:ba:92:
e2:4c:54:0e:3b:4c:10:22:c8:3e:b9:16:94:5a:5a:47:5e:00:
5d:76:64:ad:2f:87:25:43:08:29:c4:57:7e:de:c2:9a:ef:f3:
ff:78:0b:da:b3:f1:10:a9:7e:eb:07:67:16:6f:f7:7b:8b:56:
29:9c:16:3d:70:81:3c:ce:f4:2b:a6:8d:b7:c4:1d:22:3a:cd:
4b:a1:d7:c1:52:30:90:ff:61:67:a9:23:38:ec:c3:80:ea:a9:
8e:99:ce:94:49:72:fe:a9:17:ed:d2:a2:25:c7:f5:8b:51:79:
5a:28:24:29:db:b4:27:c1:57:22:95:7a:ff:5a:0d:7a:df:6a:
55:98:43:fd:ee:ff:ce:f6:60:f0:28:6a:88:c6:5f:19:f5:d9:
02:fc:2e:79:c7:7f:90:24:63:7e:75:29:9f:de:29:c6:37:5c:
d7:a3:70:9d:c9:4f:cd:5c:fb:07:7f:b5:47:72:42:7b:2a:fa:
e4:87:ab:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:30 2025 by rpki-client