
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
File: 9Y-A0jqdiu1P4xH3IiCcldqarUY.mft (raw, json)
Hash identifier: gQLxTsgR3gOWnhineVVgbIobRmU2lnAevVFfRadsiEU=
Subject key identifier: C6:F8:A1:47:2D:AF:AB:38:5C:F9:CB:BB:10:9E:FC:48:DC:F7:BB:84
Authority key identifier: F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
Certificate issuer: /CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Certificate serial: 019922FA6FEF4AF2104815F75BDB5087056B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
Manifest number: 0D4F
Signing time: Sun 07 Sep 2025 07:01:01 +0000
Manifest this update: Sun 07 Sep 2025 07:01:01 +0000
Manifest next update: Mon 08 Sep 2025 07:01:01 +0000
Files and hashes: 1: 9Y-A0jqdiu1P4xH3IiCcldqarUY.crl (hash: mvK0Aq5Jj9r4KPXYkUE4jmOaFAW5VkKEaT4JaGmFeCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:6f:ef:4a:f2:10:48:15:f7:5b:db:50:87:05:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Validity
Not Before: Sep 7 07:01:01 2025 GMT
Not After : Sep 8 07:01:01 2025 GMT
Subject: CN=c6f8a1472dafab385cf9cbbb109efc48dcf7bb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1c:56:0e:ac:d0:94:1e:3f:46:f1:07:12:95:
6d:9a:b8:54:e0:c0:15:9a:fd:77:e0:0b:92:40:60:
1d:ee:cb:41:78:34:c0:6b:80:29:8f:e1:06:b4:c6:
eb:f9:7c:a6:e5:ba:b6:3f:eb:55:54:2f:ca:94:89:
00:5d:a2:d0:b0:84:46:f5:8b:38:62:43:1c:a4:0e:
ea:78:ee:ac:a2:11:80:01:b6:d5:ea:25:15:ee:c2:
62:cb:53:5c:a5:53:41:d2:4f:41:8a:9a:b0:f5:45:
ba:ac:03:d8:e5:d8:fb:34:34:05:0b:57:0a:64:69:
31:f6:6d:e9:55:e3:90:d7:ab:3e:2f:ac:31:cf:5c:
cf:68:0b:4b:16:b5:dd:5a:61:e0:1b:a5:6f:09:16:
c7:31:04:96:d1:e3:0f:63:c7:dc:bc:06:4c:b4:c6:
3d:85:71:72:db:47:65:45:a3:fc:1e:7a:7e:88:1f:
17:01:97:93:55:b7:d1:e2:72:a1:62:a6:0b:60:a4:
03:ec:d0:19:88:eb:86:40:71:15:6a:c2:7c:73:f1:
7b:80:0a:2e:95:f4:ca:43:34:90:9c:6a:9b:82:a2:
35:21:85:b2:b0:5d:1a:a5:6e:16:5e:cd:9b:9b:df:
fb:8e:21:e5:b9:20:16:ac:54:50:f5:0a:78:67:9a:
13:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F8:A1:47:2D:AF:AB:38:5C:F9:CB:BB:10:9E:FC:48:DC:F7:BB:84
X509v3 Authority Key Identifier:
keyid:F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:61:81:65:14:93:cd:67:ee:c8:9f:c3:20:ee:bf:56:6e:8e:
cb:62:07:c5:1e:97:58:f3:ee:19:17:0f:25:d3:22:25:3e:15:
cd:00:8c:7e:a8:fb:e8:e3:3a:98:91:6c:24:65:18:da:9f:dd:
17:b9:02:1b:a5:90:93:0f:94:40:d9:8e:b2:c2:4f:e5:41:fb:
05:d5:65:b3:b6:9e:7c:b3:18:03:1d:86:53:69:22:9c:76:1c:
74:4f:41:6f:aa:16:6e:24:02:6e:55:f6:29:b1:0b:82:e5:cc:
7a:a8:1e:a5:12:da:27:d8:d2:1f:d1:04:b1:37:0f:25:07:5b:
e4:de:ef:ef:c6:ff:09:15:17:2f:74:9f:6b:cc:e8:09:7b:db:
11:a7:04:72:ac:90:6d:5e:8f:39:83:4d:93:23:fd:85:e7:18:
64:f2:b0:c6:95:b7:b2:68:65:c6:3e:6e:e5:6f:4a:3d:85:b6:
37:e5:27:7b:24:93:2d:b9:aa:75:e5:fd:af:5e:b3:a4:b5:9e:
24:2e:8b:14:a2:3b:1c:e7:7e:e4:18:ec:07:09:7b:00:dc:33:
fd:47:1a:92:44:82:5f:da:2e:8d:75:03:a1:a2:f7:17:9b:c5:
82:f4:fb:3d:1e:98:b8:e2:22:c4:05:2b:14:49:14:2d:86:09:
c6:9e:22:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:48 2025 by rpki-client