Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
File: 1peKb6yHM4CG9TacW0AhsIBhHlc.mft (raw, json)
Hash identifier: cAzij0ctb0epF9KfQCwwkrJoPdUhut7FXqdxoHyZ9uY=
Subject key identifier: 44:13:E3:C7:19:40:B1:FE:33:FA:9D:8B:68:1E:54:49:C5:4D:87:6A
Authority key identifier: D6:97:8A:6F:AC:87:33:80:86:F5:36:9C:5B:40:21:B0:80:61:1E:57
Certificate issuer: /CN=d6978a6fac87338086f5369c5b4021b080611e57
Certificate serial: 01992444215A7213E9F817ED1806631A5DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
Manifest number: 02AA
Signing time: Sun 07 Sep 2025 13:01:08 +0000
Manifest this update: Sun 07 Sep 2025 13:01:08 +0000
Manifest next update: Mon 08 Sep 2025 13:01:08 +0000
Files and hashes: 1: 1peKb6yHM4CG9TacW0AhsIBhHlc.crl (hash: R/bmrldxyCQNz0M4IVPrIWvO79AqXoB2hr2l1D1cPLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:44:21:5a:72:13:e9:f8:17:ed:18:06:63:1a:5d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6978a6fac87338086f5369c5b4021b080611e57
Validity
Not Before: Sep 7 13:01:08 2025 GMT
Not After : Sep 8 13:01:08 2025 GMT
Subject: CN=4413e3c71940b1fe33fa9d8b681e5449c54d876a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9f:7b:57:89:47:2a:9a:11:f5:29:20:59:24:
4b:d8:d5:68:56:74:f1:0d:4c:33:c0:60:a1:3d:c4:
58:ed:76:6e:5f:36:1f:e9:11:d0:61:26:4f:b5:7b:
b7:a7:d4:ac:37:d3:b1:82:75:25:4c:65:98:f9:3d:
be:1b:b0:af:ee:85:e6:42:9d:70:69:d1:42:1a:e4:
cf:55:70:27:03:f9:53:bd:a8:ce:9d:7c:8c:a3:95:
51:df:4d:5f:89:04:e6:5d:e4:ac:9b:c0:02:11:45:
06:88:d5:6d:ec:7d:db:9e:53:81:cc:98:d3:31:8c:
75:19:b0:8c:10:15:b1:8d:9c:43:fc:17:36:be:13:
2e:04:9a:ab:ee:8b:3f:e1:b9:8f:d1:50:3a:8c:ee:
cb:ed:56:1b:b4:01:3f:32:59:f9:9e:1b:d9:a7:53:
ca:cb:be:1e:d0:9b:2b:85:46:c7:24:04:0a:0a:72:
e6:fd:53:95:74:55:48:1a:0d:7c:41:84:ac:b5:69:
54:1e:5d:79:a1:14:39:75:5f:f1:fa:16:9f:8a:3a:
55:7f:07:20:5c:63:60:70:12:37:08:14:93:bb:2e:
2f:9e:94:ff:86:19:b0:48:b2:d0:7d:aa:ce:8d:97:
31:3b:d1:fa:a5:16:12:ac:6d:e6:29:d5:0b:d9:b4:
de:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:13:E3:C7:19:40:B1:FE:33:FA:9D:8B:68:1E:54:49:C5:4D:87:6A
X509v3 Authority Key Identifier:
keyid:D6:97:8A:6F:AC:87:33:80:86:F5:36:9C:5B:40:21:B0:80:61:1E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:21:04:3d:80:0d:88:fa:23:77:01:07:f1:e7:cf:ee:e1:99:
96:4f:40:00:a5:f7:be:02:31:05:60:20:b5:eb:fe:b3:80:92:
35:54:fd:23:fe:30:69:dd:3f:9f:23:f8:8e:a3:88:cf:5a:55:
af:33:80:08:65:9e:b6:8f:49:21:6e:2f:78:d6:be:9f:8a:22:
3c:0a:bb:5c:76:b9:12:49:65:09:87:34:63:2c:1d:00:9b:5e:
c7:ab:6c:88:76:7b:92:31:55:5c:f2:2d:e0:46:d4:11:c9:e3:
e7:3b:9c:1a:90:50:7e:7d:87:96:8c:9e:97:0d:45:99:12:1f:
07:72:d9:c8:ce:5b:ea:67:34:c5:1f:da:b1:f5:f3:f5:4d:57:
39:c9:b4:58:71:01:fc:ba:91:8c:d8:5a:8c:f6:e4:39:28:e0:
9c:86:40:a8:bb:9c:cb:80:df:5e:20:be:71:9e:c6:7d:02:e3:
75:d9:e1:19:78:33:2a:e7:d9:30:84:d9:ad:e8:5e:5d:ed:3d:
64:ec:35:c3:41:95:63:ca:b3:4e:67:7d:4d:64:37:08:61:01:
b8:95:52:07:29:c3:c4:66:04:01:92:ac:62:b4:4a:54:c5:7f:
49:50:df:47:0c:7f:8f:9a:e3:e7:56:94:1d:25:69:b7:6a:56:
a4:6d:c0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:08:42 2025 by rpki-client