Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
File: Eht9Dci8pP9OdTa9OANAJCLo4mw.mft (raw, json)
Hash identifier: 6mB4w7xRCgzYqOLJqeHKnoVu7YRgWZEdB+bNFXZ+aLk=
Subject key identifier: 34:54:E5:C8:AE:73:69:2C:61:E6:E7:02:28:EA:DF:B7:F1:4F:C6:56
Authority key identifier: 12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
Certificate issuer: /CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Certificate serial: 01992255C207ABB9C7F2AA38502D6238C5D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
Manifest number: 09F0
Signing time: Sun 07 Sep 2025 04:01:09 +0000
Manifest this update: Sun 07 Sep 2025 04:01:09 +0000
Manifest next update: Mon 08 Sep 2025 04:01:09 +0000
Files and hashes: 1: Eht9Dci8pP9OdTa9OANAJCLo4mw.crl (hash: eGttbNojqg0om/642YrQXP2bAjoVtP7Smd9lgwooUoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:c2:07:ab:b9:c7:f2:aa:38:50:2d:62:38:c5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Validity
Not Before: Sep 7 04:01:09 2025 GMT
Not After : Sep 8 04:01:09 2025 GMT
Subject: CN=3454e5c8ae73692c61e6e70228eadfb7f14fc656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:2d:1c:17:af:e4:ec:ee:55:47:d9:99:92:
23:16:62:92:24:96:5a:d2:5b:89:0f:10:ec:6f:60:
54:89:ab:d8:4d:80:c7:65:7f:5e:d4:05:8f:4d:72:
93:34:59:a3:c2:49:0e:f0:2a:bf:7b:80:53:05:b3:
b7:77:df:90:f8:1e:7c:09:04:41:80:14:ac:ba:c8:
94:48:34:ee:db:34:2a:ec:8b:b0:76:43:e2:b0:ea:
ab:e6:b3:bf:0b:f6:3c:63:c6:63:25:63:58:72:c1:
27:85:c3:88:bf:b8:a1:31:32:a7:db:eb:46:21:e3:
17:fd:49:4a:45:b7:cf:f4:4e:25:37:0c:4b:3a:5c:
19:10:7c:cd:71:96:26:55:ff:fc:71:85:c1:bb:6e:
08:b5:3b:65:ae:93:f7:db:19:24:2f:7a:3c:0f:2b:
f0:98:62:16:53:09:34:58:ed:7c:f2:04:03:dd:b0:
ad:56:81:5c:10:f8:1c:6d:a6:c9:31:ab:86:0c:a9:
91:b2:96:cb:a6:84:e5:a0:42:7e:55:f3:e8:a3:b9:
8b:51:72:cb:b0:36:fe:f0:73:b7:95:84:de:77:5b:
bd:be:45:14:47:bd:8c:bd:5b:6f:68:a7:be:33:70:
ce:86:61:5f:90:cb:47:a7:18:93:7d:f3:bb:50:46:
11:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:54:E5:C8:AE:73:69:2C:61:E6:E7:02:28:EA:DF:B7:F1:4F:C6:56
X509v3 Authority Key Identifier:
keyid:12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:74:6f:ff:49:e5:54:f9:37:2e:e8:67:db:e3:36:12:59:93:
a5:6e:bb:00:a0:81:61:97:d5:36:8d:e8:9f:a4:07:5c:e6:b0:
00:ef:54:93:ff:13:b7:11:06:38:64:53:35:3f:5b:f3:ae:3f:
c8:da:56:84:9e:57:de:5e:c8:46:4d:c4:77:f6:6d:04:2b:2c:
aa:78:b1:22:e5:6f:30:06:44:c7:fa:b0:46:3e:24:46:75:02:
7b:f8:53:d4:c8:3b:e6:ca:f8:e9:09:c2:c1:a2:ae:ad:45:f3:
f2:35:b1:e5:6d:ed:ef:6c:8d:20:a4:59:c9:4a:7e:90:c4:92:
22:66:00:77:14:9a:a0:a2:bb:d1:50:1e:07:12:d8:7d:78:5f:
30:d2:42:64:3c:54:01:b1:be:49:16:ed:fe:ef:21:cc:8c:94:
ed:68:23:db:b5:ab:d9:67:92:ec:f7:c5:79:12:e8:68:cb:b5:
81:7a:4e:16:2a:79:2d:04:02:ef:46:07:74:59:c7:fe:24:99:
ad:80:05:fa:c2:13:72:ed:40:9c:c0:31:a0:64:0b:42:26:9b:
ee:8c:14:7b:0e:44:29:16:45:8d:05:dd:a0:ce:5c:9d:87:4c:
24:de:80:f9:5b:e0:d2:ae:58:69:fa:ab:4d:a4:51:71:fe:6a:
3b:d3:cb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:54:03 2025 by rpki-client