Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
File: CRX548KQJHXCTNRcaSmRvHH_ZkM.mft (raw, json)
Hash identifier: gIaCbxKb182PthpIWT6uVOCj39XDPBgsH7go5yaAyGY=
Subject key identifier: 9A:33:3C:42:1E:31:98:D2:15:9A:80:56:9E:44:44:29:DC:7A:9D:7E
Authority key identifier: 09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
Certificate issuer: /CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Certificate serial: 019922FA745732DE740899EE6554F3B029F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
Manifest number: 3F
Signing time: Sun 07 Sep 2025 07:01:03 +0000
Manifest this update: Sun 07 Sep 2025 07:01:03 +0000
Manifest next update: Mon 08 Sep 2025 07:01:03 +0000
Files and hashes: 1: CRX548KQJHXCTNRcaSmRvHH_ZkM.crl (hash: JGyGPVHIqQLi1fCWajLBCRUgD0vpkEpDPaUA2T46pIk=)
2: feLtnRMkzU1rqe5DPxi47-2h3dM.roa (hash: x685XsSKo/9+h/ObOY3HT9WaSelNcUDDImrGBWSa8eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:74:57:32:de:74:08:99:ee:65:54:f3:b0:29:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Validity
Not Before: Sep 7 07:01:03 2025 GMT
Not After : Sep 8 07:01:03 2025 GMT
Subject: CN=9a333c421e3198d2159a80569e444429dc7a9d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0f:e2:e4:da:14:0b:75:e7:b2:50:67:ea:7b:
25:b4:fd:88:fd:73:92:a5:47:48:3e:52:17:04:73:
9a:56:44:e5:51:04:88:7d:f9:aa:75:a0:dd:93:0d:
08:79:ca:78:dd:0c:5b:22:98:72:1a:6d:0d:f5:97:
4e:46:f7:26:a9:b6:fa:06:8a:da:3e:6e:18:3b:6f:
61:38:f3:19:df:b9:65:70:3a:10:df:93:e7:1d:f2:
c2:c6:25:bd:11:5f:e5:cd:1a:52:22:82:52:3a:f7:
34:86:67:43:ce:40:4e:e6:53:34:1c:fc:f9:b6:64:
a8:3d:ca:97:88:9f:3c:74:cd:b7:b5:bb:8b:01:e0:
b2:24:00:63:c4:85:a9:08:18:23:fd:c8:b3:dc:49:
04:33:6e:a6:d2:c9:0e:2a:3b:aa:f0:7c:db:57:7e:
61:9f:e4:9e:3e:47:e6:ce:96:cc:d3:84:1d:74:95:
09:b3:58:b5:ca:d3:05:6f:1f:c8:0c:00:b7:b6:31:
b9:27:13:91:20:cf:82:bc:a1:b6:ff:f6:84:77:29:
c4:01:71:15:6a:b8:c4:de:b5:26:ab:63:e3:b0:3f:
d5:45:a3:e3:da:3b:a7:6d:df:1e:5c:8b:59:ee:d2:
e5:4b:1f:35:57:f0:87:b4:60:2b:65:96:d7:45:f2:
f3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:33:3C:42:1E:31:98:D2:15:9A:80:56:9E:44:44:29:DC:7A:9D:7E
X509v3 Authority Key Identifier:
keyid:09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:0e:cb:ee:e1:60:d7:ad:fb:42:1f:81:7e:8c:a3:97:f7:92:
b7:f1:bb:c9:0a:08:3c:84:33:56:c2:dc:88:e5:fd:72:01:13:
c2:1d:e5:04:7f:94:88:41:73:8d:f8:ee:6a:f5:c7:39:8d:2c:
00:71:9b:dd:6f:5f:07:7b:4e:56:db:b8:11:b3:e3:03:07:0a:
97:ea:95:a7:dd:c7:74:00:32:8d:8a:9c:af:ba:7b:e4:51:00:
12:0c:12:94:42:19:89:d5:f4:62:dd:95:d8:f6:34:a9:f5:7e:
5d:20:ca:b7:f9:96:38:41:7c:2c:b2:45:94:9e:d0:74:c7:9f:
cd:cb:6d:da:c8:71:95:3f:52:a5:26:0a:ce:e8:08:e4:9e:66:
3a:5e:1e:1d:b3:8a:4a:23:e9:7d:ae:9f:d8:65:9f:6e:b7:43:
4a:65:ae:cb:21:e7:e7:54:17:1f:3d:66:2c:f9:ff:62:a7:ff:
68:ce:fc:67:fb:92:b5:53:f0:5c:3c:8a:7b:70:19:b1:1c:25:
8c:72:79:61:bf:99:af:4e:65:1d:d6:67:d0:bb:e8:90:4d:00:
10:ee:e6:4f:bc:7f:e5:fd:a6:37:5b:db:a8:21:71:1f:7c:a2:
f8:8d:69:c5:1a:85:8b:8e:44:a6:6d:10:2f:c0:58:65:06:63:
97:90:a5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:50 2025 by rpki-client