Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
File: 9Y-A0jqdiu1P4xH3IiCcldqarUY.mft (raw, json)
Hash identifier: 9jDM115mkTqB7P7G25CGhZmto1fI8FOIyUAZxSE0C5c=
Subject key identifier: 18:46:EF:D4:10:6E:03:C6:B7:A0:A2:50:F8:5F:C0:0A:4E:4F:62:D4
Authority key identifier: F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
Certificate issuer: /CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Certificate serial: 0197D8BF194378C6787B7D030225B71A0B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
Manifest number: 0CA4
Signing time: Sat 05 Jul 2025 04:01:31 +0000
Manifest this update: Sat 05 Jul 2025 04:01:31 +0000
Manifest next update: Sun 06 Jul 2025 04:01:31 +0000
Files and hashes: 1: 9Y-A0jqdiu1P4xH3IiCcldqarUY.crl (hash: BJQ8jM1EkRfMKuui8I1n7TdPrC0rsumwPQk01wkDswM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d8:bf:19:43:78:c6:78:7b:7d:03:02:25:b7:1a:0b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Validity
Not Before: Jul 5 04:01:31 2025 GMT
Not After : Jul 6 04:01:31 2025 GMT
Subject: CN=1846efd4106e03c6b7a0a250f85fc00a4e4f62d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:0a:7e:ea:8a:1c:21:79:49:b4:a9:cf:02:
1b:77:ff:dd:ea:0d:84:9a:ad:b8:16:c6:c0:ab:2b:
71:ad:e6:a9:fe:ff:25:b0:ac:ed:3e:93:1e:1c:ee:
6b:d4:53:87:8e:5a:cd:2a:01:1f:dd:d0:2b:bc:2d:
cc:db:c8:23:c5:e9:ab:00:eb:b7:ce:02:66:7f:91:
6c:8a:27:a9:5c:e4:7d:61:93:86:bd:55:c9:54:90:
76:15:d5:ca:c6:ee:63:58:57:fe:d4:cf:cf:4e:35:
c5:86:43:d0:26:04:c4:fd:2a:51:2d:89:07:3d:b4:
e5:5d:c9:8e:49:7c:02:1a:80:2b:c4:08:8d:29:44:
20:d6:d9:a3:65:89:33:73:44:f3:c0:6a:62:d6:fd:
52:fd:3f:14:6f:18:d6:3d:2a:ca:c8:fa:26:09:9c:
91:6c:66:b8:79:a3:3c:e1:6a:68:01:56:4f:c3:33:
82:44:9c:a3:e9:c2:5a:fe:c5:2c:b5:7e:38:31:d7:
f7:a1:d4:90:12:28:8a:a9:b5:cb:e1:95:22:29:33:
cb:f4:84:59:67:c4:06:62:1d:a9:8e:ac:7c:b9:d4:
6c:05:2d:68:d7:99:99:24:09:2a:80:9b:bb:7f:b5:
77:08:58:b8:6c:11:6b:0f:e4:7a:55:3e:4d:23:47:
09:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:46:EF:D4:10:6E:03:C6:B7:A0:A2:50:F8:5F:C0:0A:4E:4F:62:D4
X509v3 Authority Key Identifier:
keyid:F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:06:ea:8d:a7:ea:1e:94:66:d1:c3:b9:f1:d5:4b:de:a3:c8:
cd:46:7e:f3:ff:5c:fb:01:15:2b:2c:77:af:a2:fa:e0:be:fb:
f4:6b:13:d3:cd:a8:69:02:6f:ce:2b:f8:ae:66:e2:f4:64:01:
fa:e0:d5:e2:a2:2c:5c:a2:aa:bb:f3:b7:ea:ca:c8:cf:d6:9a:
23:8d:fb:c1:95:97:10:30:83:e0:eb:ee:2f:32:07:0c:48:c1:
db:85:c2:e5:9a:63:e7:39:b3:dd:3f:2b:cf:08:e3:6a:73:86:
92:81:34:d6:5e:61:f4:6f:38:6b:f8:70:69:5f:f6:eb:05:9b:
e6:82:8e:7a:26:6e:0b:2c:92:77:2f:b3:bd:1d:ee:06:b9:02:
9b:ac:f7:69:a9:15:f5:a6:2d:bb:ee:74:f4:20:aa:ac:81:3d:
ff:42:b8:13:4c:b8:c4:74:cf:3d:6a:f7:8d:bb:35:34:87:34:
23:fd:de:20:86:9f:3e:00:60:ab:d5:3d:73:9b:dc:2b:8b:d1:
13:a1:7e:95:62:01:58:34:84:86:47:0f:4b:d4:48:cb:e7:82:
69:de:84:8a:ce:84:90:ff:83:7c:82:c6:b0:01:64:d9:37:c7:
7d:aa:5a:45:f7:0b:1d:e8:31:1d:c0:1d:0f:bd:23:15:02:bd:
17:e8:b1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 07:15:28 2025 by rpki-client