Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
File: 9rG5O-fUO4bWT4tLljvJFWJfI_I.mft (raw, json)
Hash identifier: VqRioHhvzS1N6Dz+AhtA2CNo4Sy7NBgwLg/p/lMdY5Y=
Subject key identifier: 01:8F:CB:93:4C:CE:A4:B5:A6:6B:E8:B8:9F:27:E8:A5:9F:E2:CB:31
Authority key identifier: F6:B1:B9:3B:E7:D4:3B:86:D6:4F:8B:4B:96:3B:C9:15:62:5F:23:F2
Certificate issuer: /CN=f6b1b93be7d43b86d64f8b4b963bc915625f23f2
Certificate serial: 019923A0922CC1824E3EB5D8E3C75F2414A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
Manifest number: 0303
Signing time: Sun 07 Sep 2025 10:02:29 +0000
Manifest this update: Sun 07 Sep 2025 10:02:29 +0000
Manifest next update: Mon 08 Sep 2025 10:02:29 +0000
Files and hashes: 1: 9rG5O-fUO4bWT4tLljvJFWJfI_I.crl (hash: OXVuo96Q4dWLjjANuhmzIw/AoX7qk4ERrQnPBEk6CYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:92:2c:c1:82:4e:3e:b5:d8:e3:c7:5f:24:14:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b1b93be7d43b86d64f8b4b963bc915625f23f2
Validity
Not Before: Sep 7 10:02:29 2025 GMT
Not After : Sep 8 10:02:29 2025 GMT
Subject: CN=018fcb934ccea4b5a66be8b89f27e8a59fe2cb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:9a:81:98:40:eb:c2:e7:22:85:cd:eb:5f:
b5:42:5f:f1:49:39:93:42:9d:6d:38:75:7e:c2:21:
b6:aa:3e:21:ce:aa:0c:14:00:e4:8e:49:48:3e:66:
a2:a9:71:5b:91:c9:c8:b6:49:8f:e7:28:5e:89:30:
22:0c:ec:4f:d2:01:90:4a:f3:f3:1d:57:92:db:92:
e9:9b:8a:6f:50:7f:69:39:1d:b6:0d:bc:79:63:51:
2f:cd:c5:4a:ef:77:52:32:6c:41:38:be:19:62:a6:
02:52:79:7c:6c:42:c1:9a:be:d3:e1:b6:d3:af:14:
a6:b0:60:3d:01:a0:ef:87:98:d5:db:d6:f5:ff:85:
a0:b6:7f:5e:df:ba:7b:f2:0f:fe:34:ee:13:da:e9:
bd:3a:38:7a:01:a2:77:fb:26:f8:ad:e5:6e:2e:ec:
33:0a:f3:12:83:73:85:6b:df:51:ca:cf:ca:e1:fc:
17:3f:e2:7f:bd:a2:67:56:9e:64:d5:be:c0:56:43:
79:b5:05:40:5f:77:be:fd:96:44:0e:8e:98:d0:17:
dd:6b:69:21:11:1a:14:ae:18:d2:47:ea:2a:21:51:
bd:1a:c9:25:1d:12:cf:8e:9a:60:f6:ef:dc:6c:65:
be:97:17:36:d6:27:70:ce:17:65:fd:34:a0:65:7d:
81:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8F:CB:93:4C:CE:A4:B5:A6:6B:E8:B8:9F:27:E8:A5:9F:E2:CB:31
X509v3 Authority Key Identifier:
keyid:F6:B1:B9:3B:E7:D4:3B:86:D6:4F:8B:4B:96:3B:C9:15:62:5F:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0c:09:8c:8d:ef:6c:85:11:bf:75:1d:38:b7:d4:0a:bd:52:
8f:dc:bd:8d:0c:e0:11:26:6c:46:35:06:c6:26:b9:f0:ee:ec:
e7:a0:4e:62:a5:25:c8:cd:ac:9d:24:ba:c3:1a:aa:04:c3:cd:
86:8b:73:6b:b8:28:8b:9d:5c:6b:2c:10:67:46:79:fb:c0:ca:
cc:ef:9b:3a:6c:2d:d1:6d:ce:35:7f:d5:7f:40:91:76:8e:ee:
fc:f9:53:45:86:33:10:af:98:18:76:ad:4e:d2:58:ae:e1:06:
d0:31:0e:1c:1f:82:65:f1:6f:a3:0d:34:08:21:15:80:67:81:
d8:ca:c1:78:72:d4:c5:24:3b:4d:91:31:18:dd:63:8d:00:45:
bd:7e:82:b1:06:4d:06:b8:f6:e1:ca:3c:88:a7:ed:ae:82:be:
66:50:bd:0b:86:e1:a9:ae:c4:9e:48:fb:2a:61:05:72:8c:5c:
20:a8:26:e8:88:dd:7b:c9:29:a5:ce:4b:92:dc:c9:ae:b8:dd:
69:02:7f:10:5e:92:13:ab:33:a8:ab:b9:f7:c6:98:d4:2f:01:
83:c4:8d:90:9c:ad:09:d6:57:a7:6b:54:03:eb:89:43:1e:b9:
59:c3:46:aa:52:18:4e:89:53:d7:c1:6b:ee:62:fa:d3:2f:4a:
21:fe:6d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:01 2025 by rpki-client