Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
File: sl8gfyfZGpE36LZdKQEpmHGqOh0.mft (raw, json)
Hash identifier: HHvfRoem301gqbgalCiIlOHd8lId8QQY0nPQpKGyxJs=
Subject key identifier: 22:ED:84:D6:D9:28:57:22:1F:CA:A3:1B:B2:62:06:11:54:16:73:AD
Authority key identifier: B2:5F:20:7F:27:D9:1A:91:37:E8:B6:5D:29:01:29:98:71:AA:3A:1D
Certificate issuer: /CN=b25f207f27d91a9137e8b65d2901299871aa3a1d
Certificate serial: 0199239FD8E60BDDAD8928DEC9AF6FC2E819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sl8gfyfZGpE36LZdKQEpmHGqOh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
Manifest number: 01A9
Signing time: Sun 07 Sep 2025 10:01:42 +0000
Manifest this update: Sun 07 Sep 2025 10:01:42 +0000
Manifest next update: Mon 08 Sep 2025 10:01:42 +0000
Files and hashes: 1: sl8gfyfZGpE36LZdKQEpmHGqOh0.crl (hash: hMX0uDdLIjTRfw8aSgGV/n/mcHP+Z7a3Ci+pO6uYfRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sl8gfyfZGpE36LZdKQEpmHGqOh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:d8:e6:0b:dd:ad:89:28:de:c9:af:6f:c2:e8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25f207f27d91a9137e8b65d2901299871aa3a1d
Validity
Not Before: Sep 7 10:01:42 2025 GMT
Not After : Sep 8 10:01:42 2025 GMT
Subject: CN=22ed84d6d92857221fcaa31bb2620611541673ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:a5:63:c1:7c:f6:20:39:f1:34:6f:3c:22:
92:23:d9:90:f0:70:3f:a5:99:4d:3d:56:0c:65:6d:
ad:60:0a:58:ff:b5:be:e8:df:d5:98:cf:7e:a6:4d:
a0:ea:31:e3:fd:33:1f:51:ba:4e:42:d0:16:f3:49:
45:ac:6a:cc:22:e7:07:92:28:9d:46:30:6c:bc:b3:
17:37:92:4b:f3:76:c3:19:29:a0:8e:0b:d4:de:fd:
97:57:dd:b9:02:eb:41:8b:ac:cc:59:00:76:f7:be:
be:20:f6:cf:a6:3e:86:e5:03:24:7a:3c:26:c9:40:
fc:d5:c9:5a:05:88:a0:7e:ac:3d:ff:c1:80:e1:e5:
79:3e:a1:b0:23:72:b1:62:29:41:47:69:17:6b:c5:
04:00:6a:de:dd:d8:f0:96:15:d3:6d:e7:a5:bf:57:
96:00:aa:b1:b8:ce:bb:fd:3d:1f:48:75:2a:81:5e:
23:c8:e0:90:0e:af:70:40:ff:53:7b:3f:9c:24:ac:
d2:34:a3:30:a0:a5:fe:29:d0:fb:3f:06:e5:57:75:
89:4b:4f:cd:b2:7c:ea:e5:b3:fb:52:19:07:34:62:
56:34:36:10:e5:67:d7:bd:c4:83:cb:e7:7c:4e:79:
ee:76:c8:5b:a4:ad:32:d2:9e:73:51:0b:e5:46:92:
8b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:ED:84:D6:D9:28:57:22:1F:CA:A3:1B:B2:62:06:11:54:16:73:AD
X509v3 Authority Key Identifier:
keyid:B2:5F:20:7F:27:D9:1A:91:37:E8:B6:5D:29:01:29:98:71:AA:3A:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sl8gfyfZGpE36LZdKQEpmHGqOh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f1:35:84:08:b7:a5:d3:a1:02:29:79:c1:e3:bc:27:e2:e3:
ff:eb:47:bf:5e:7b:aa:81:d8:55:26:86:e7:fa:95:0c:3e:ee:
c9:a6:85:67:a0:af:c0:2f:07:af:96:7d:3d:d4:30:95:f3:f6:
a3:6d:1e:aa:2e:b9:d5:b4:1a:c4:d4:a7:15:45:cc:06:f0:0c:
33:1a:de:1c:ea:ef:63:83:3f:3e:76:0a:d3:7e:67:77:7e:35:
c3:b2:58:13:46:3a:a2:4e:73:a6:85:4d:7e:13:a0:0c:a7:20:
38:df:eb:c5:5c:55:d4:8e:64:9e:f0:ee:39:9a:c1:9a:49:fa:
24:04:c7:79:df:71:2c:03:07:ec:8d:a9:5b:c8:23:17:5f:ff:
31:59:96:6c:5a:a9:ef:57:9e:d5:0f:b5:f1:20:a2:7d:5f:aa:
0d:5b:27:ee:95:3e:91:09:8b:5f:c6:41:93:8c:72:88:56:c3:
12:72:06:fe:79:39:73:b7:7c:90:e5:2b:83:82:36:d3:b0:cd:
b0:69:44:c7:1e:df:6a:2b:0c:91:13:20:1a:0c:38:59:4a:63:
01:36:7f:fd:e9:e0:fa:62:20:13:20:df:24:02:be:ea:01:2a:
3a:29:b4:1e:82:d3:d8:fd:ff:2b:fb:5b:ad:45:f2:ff:af:18:
8d:0c:6b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:22 2025 by rpki-client