Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
File: h3YEKrfwcZWY6znlPvkuCsz6T6M.mft (raw, json)
Hash identifier: Rkcu/QLPLsj5TDFB8QObeFhJbOO5LHRV+I//sWDX20Y=
Subject key identifier: 5A:9B:86:3A:82:6D:C3:92:06:27:8B:28:A8:0F:65:FF:17:15:1C:9E
Authority key identifier: 87:76:04:2A:B7:F0:71:95:98:EB:39:E5:3E:F9:2E:0A:CC:FA:4F:A3
Certificate issuer: /CN=8776042ab7f0719598eb39e53ef92e0accfa4fa3
Certificate serial: 0199239FD6EFA6332C31132E0CD930D522B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
Manifest number: 0A73
Signing time: Sun 07 Sep 2025 10:01:41 +0000
Manifest this update: Sun 07 Sep 2025 10:01:41 +0000
Manifest next update: Mon 08 Sep 2025 10:01:41 +0000
Files and hashes: 1: h3YEKrfwcZWY6znlPvkuCsz6T6M.crl (hash: yIIdhH3dIEN2Wd1nNHu08qzOcpKfNnUPsZWjxDn7M78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:d6:ef:a6:33:2c:31:13:2e:0c:d9:30:d5:22:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8776042ab7f0719598eb39e53ef92e0accfa4fa3
Validity
Not Before: Sep 7 10:01:41 2025 GMT
Not After : Sep 8 10:01:41 2025 GMT
Subject: CN=5a9b863a826dc39206278b28a80f65ff17151c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:89:a4:eb:f6:13:91:dd:64:57:bb:e7:0b:7e:
c3:de:b0:96:45:48:1b:8d:7a:19:c6:d7:e2:d1:6a:
e2:db:40:a9:55:5d:ed:ab:99:0c:ae:a8:4a:03:e1:
88:ae:fc:91:58:3c:c2:4e:50:db:dc:d4:54:09:85:
bc:25:d6:6f:03:bd:53:d7:af:47:c6:2c:f1:00:4a:
a9:0b:0f:47:1b:40:92:66:a8:57:93:66:45:2f:72:
8e:5c:d1:25:35:34:58:fd:8d:c5:09:e8:94:e1:4c:
59:13:f7:38:43:7c:45:f7:10:70:ef:d9:50:94:c9:
22:7f:95:81:18:de:06:7a:66:d6:41:03:95:c1:6e:
14:46:ac:82:29:a5:2e:4e:17:2f:cf:4c:f9:e5:ed:
cd:fe:eb:5d:68:1a:3d:ab:fe:90:f0:bb:d8:15:f8:
57:8b:c1:65:5a:7c:0f:72:2c:58:0f:0b:e5:83:6a:
ab:d5:da:04:79:50:a0:b4:5b:0c:79:22:83:03:d1:
4e:59:28:1b:08:6c:45:5a:54:cd:30:bd:ac:a4:d2:
66:f4:78:f3:9a:cb:91:16:91:22:cd:c9:23:a7:0c:
20:6b:c7:9f:b3:59:3d:d1:85:4b:6e:1c:fb:ef:f5:
1d:b6:d9:89:0d:01:d9:c5:63:54:c3:f5:da:80:2a:
6a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9B:86:3A:82:6D:C3:92:06:27:8B:28:A8:0F:65:FF:17:15:1C:9E
X509v3 Authority Key Identifier:
keyid:87:76:04:2A:B7:F0:71:95:98:EB:39:E5:3E:F9:2E:0A:CC:FA:4F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:83:b4:44:26:53:2b:2f:1e:30:01:55:0a:60:1c:d5:24:9c:
b7:2f:bf:97:e9:fd:3e:42:34:c4:1b:6f:d3:f4:af:35:2c:d5:
67:ae:83:38:d8:4e:76:c4:42:cd:79:5c:75:43:73:58:14:a3:
38:d0:bd:87:5a:f9:e9:5d:a8:13:75:5d:df:69:55:b9:a8:69:
5d:3e:5c:1e:51:8c:c7:95:6f:12:03:a2:99:5f:28:cd:88:a8:
26:73:1c:49:8e:e3:92:9a:89:17:bf:2d:3d:dc:14:e8:2b:4b:
d8:f4:e3:c2:e7:f1:d6:d4:f5:a7:ec:24:00:a4:00:b6:56:5a:
aa:b2:a3:7d:4b:d2:17:74:b5:6e:c2:94:a3:35:92:d0:eb:fb:
e8:68:4c:05:be:09:fc:7d:ff:90:74:b1:c5:9a:19:68:fc:0d:
27:4a:b7:e8:d2:41:ba:46:55:b9:ec:77:c6:f9:4f:63:98:19:
19:a5:50:33:93:49:04:67:0f:42:76:43:d6:94:50:6b:de:50:
46:b3:ce:0b:fc:b6:ca:95:f7:ee:82:e7:9c:02:7b:ca:b9:48:
0f:db:d6:8a:ae:d3:66:0c:60:31:80:18:8a:3b:43:72:e9:2c:
f3:fa:04:28:bf:b1:e5:bf:15:d7:40:ac:30:17:94:86:71:bc:
be:67:fd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 16:12:22 2025 by rpki-client