Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
File: sXeHrvys6kKsZDmUmlaPDf_nd-0.mft (raw, json)
Hash identifier: o0nbZiGL4FUqM5jlcXzKnJbTmeVcWU9AEXfssfr2cpY=
Subject key identifier: 05:9B:C6:67:FD:E5:9D:32:BD:28:6F:AA:1F:30:61:72:77:D4:FA:45
Authority key identifier: B1:77:87:AE:FC:AC:EA:42:AC:64:39:94:9A:56:8F:0D:FF:E7:77:ED
Certificate issuer: /CN=b17787aefcacea42ac6439949a568f0dffe777ed
Certificate serial: 0199228D343E44A1D737DFFC287B3230CA3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
Manifest number: 0F85
Signing time: Sun 07 Sep 2025 05:01:43 +0000
Manifest this update: Sun 07 Sep 2025 05:01:43 +0000
Manifest next update: Mon 08 Sep 2025 05:01:43 +0000
Files and hashes: 1: sXeHrvys6kKsZDmUmlaPDf_nd-0.crl (hash: +A3BOBdggvDNofpAkmNWTvX+57czJoGSjwMNJSETv+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:34:3e:44:a1:d7:37:df:fc:28:7b:32:30:ca:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17787aefcacea42ac6439949a568f0dffe777ed
Validity
Not Before: Sep 7 05:01:43 2025 GMT
Not After : Sep 8 05:01:43 2025 GMT
Subject: CN=059bc667fde59d32bd286faa1f30617277d4fa45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8c:72:67:1f:46:0c:cb:2b:62:22:a0:57:25:
c1:6f:49:05:46:f6:ad:de:f5:4f:69:d7:30:73:81:
03:f4:09:07:c5:18:39:52:a9:39:24:ec:fb:d9:e0:
3a:2e:23:9c:4e:86:aa:91:45:03:7f:24:3a:87:38:
51:a8:8a:29:f1:83:14:d5:e0:c1:1e:80:73:71:78:
68:00:ff:0d:d0:7c:51:d8:2d:55:b3:f8:9e:92:5a:
d0:a8:f6:f5:88:bb:74:0b:84:69:cf:92:00:36:f2:
75:87:80:da:3b:ed:72:a5:52:ea:9d:19:6c:60:5a:
ef:eb:71:4d:de:2d:f8:8a:56:cf:26:f7:a5:11:57:
67:02:2c:82:93:b6:2f:16:54:da:74:32:44:5a:39:
94:6a:90:a4:49:08:28:fe:54:6c:97:ae:4f:36:6e:
e6:c4:7b:93:e7:97:28:71:7e:05:1c:22:84:b3:8b:
81:df:b5:8b:07:95:75:27:d6:b1:b8:c7:7b:f8:e0:
53:38:e1:b9:7b:6f:ef:e9:d3:85:a9:cb:09:9e:66:
e7:44:28:bc:02:82:d5:32:5f:63:60:c3:b7:1e:29:
4f:07:fd:70:6a:7d:06:3a:34:86:f9:8b:82:fb:66:
47:4d:a7:5f:5f:52:5d:df:7b:c7:cd:41:16:e3:bb:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9B:C6:67:FD:E5:9D:32:BD:28:6F:AA:1F:30:61:72:77:D4:FA:45
X509v3 Authority Key Identifier:
keyid:B1:77:87:AE:FC:AC:EA:42:AC:64:39:94:9A:56:8F:0D:FF:E7:77:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7f:76:1b:da:83:72:11:ba:b0:0e:84:34:1c:ea:74:eb:a8:
16:a2:09:36:8a:07:8f:0b:a1:8d:c3:81:09:97:7b:9f:9b:b7:
79:37:f8:5b:54:fd:71:11:d1:d8:2e:4f:28:ba:b9:e7:23:d9:
31:a6:42:5c:22:19:b8:7b:fa:10:29:35:6b:75:7f:c0:2f:a3:
6a:a7:74:dc:cb:9c:c1:dc:e3:1a:a1:f6:50:ae:09:ea:70:ad:
5e:ad:98:8f:30:0f:0b:cb:a4:ea:ec:50:a1:a3:f4:10:38:5f:
11:0d:00:8f:a1:de:1d:21:98:8f:7b:fe:28:63:de:b3:df:0d:
86:cd:28:84:80:e5:ad:e4:da:89:a4:a7:05:9e:1e:41:cc:3b:
2d:c7:5a:49:ae:fa:bd:e1:82:3c:f7:9b:4a:a2:9f:a7:7f:72:
f1:9e:9d:a6:21:b3:c4:f0:a5:ba:72:6c:4c:a6:7f:86:01:33:
6f:0a:d5:21:e4:4f:52:69:4a:ca:93:18:a4:c8:0c:18:34:ff:
5c:75:e0:eb:68:2a:20:93:25:28:5a:28:b6:63:fc:f3:3e:03:
f1:59:b8:9b:b1:64:cd:56:bd:8a:c3:5a:df:23:10:9c:63:6d:
dd:c0:63:68:8c:38:ff:a2:27:3d:84:47:4b:b9:f6:89:55:ac:
0e:d4:58:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:38 2025 by rpki-client