Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
File: moI9HNrrg3dfH7vV-frkGsXfFxk.mft (raw, json)
Hash identifier: CbDyUcWm1llDS+5okKyHmx9S5k2yPPtCgVV2Bte4OQ8=
Subject key identifier: 3B:C7:3E:67:77:B6:03:34:DF:50:47:B1:A5:7B:9D:6B:4D:2C:F6:F1
Authority key identifier: 9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19
Certificate issuer: /CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719
Certificate serial: 0199221E819485C1DA9A6E8E972A197A6F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
Manifest number: 06A9
Signing time: Sun 07 Sep 2025 03:00:48 +0000
Manifest this update: Sun 07 Sep 2025 03:00:48 +0000
Manifest next update: Mon 08 Sep 2025 03:00:48 +0000
Files and hashes: 1: moI9HNrrg3dfH7vV-frkGsXfFxk.crl (hash: 7WUHL1HWcwg8JDguWuvoVFZ7ym1o7IC+b/ts3x071SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:81:94:85:c1:da:9a:6e:8e:97:2a:19:7a:6f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719
Validity
Not Before: Sep 7 03:00:48 2025 GMT
Not After : Sep 8 03:00:48 2025 GMT
Subject: CN=3bc73e6777b60334df5047b1a57b9d6b4d2cf6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:10:7b:6d:1c:08:0d:4a:17:48:0c:0d:71:68:
55:17:77:b8:a7:8f:19:88:ba:c0:2b:8c:82:e9:b5:
9e:42:4e:fa:35:f5:c6:2f:9b:56:98:c9:aa:85:8c:
a0:3f:25:30:4d:9d:4f:83:25:dc:a3:f1:52:5a:15:
fa:d7:68:1d:7e:64:74:9a:b4:3d:57:a1:03:f5:3e:
02:e1:4c:64:5b:0d:4c:88:4a:bb:9c:a2:7f:da:d2:
89:dd:0d:97:1b:12:4a:c2:e5:4c:4e:e9:15:b4:7f:
65:28:d9:f2:1a:d1:7a:c7:29:8b:d6:39:9d:98:9c:
56:59:ae:07:f0:ce:e6:e7:70:b0:80:05:2a:ee:35:
03:35:31:3d:0b:af:af:90:b4:8c:c3:05:d2:c5:36:
06:27:f1:31:fe:3a:4b:24:1c:61:8b:8f:00:ac:97:
14:97:c2:49:8e:d1:4c:8e:23:e3:af:06:48:ce:b9:
4c:7b:9c:c7:98:2b:bd:3a:da:72:da:33:29:cb:cd:
18:fa:3c:e6:be:74:c2:a7:cc:86:93:56:52:a2:76:
44:af:6a:bd:93:be:2d:b4:e9:77:57:28:f7:c4:ec:
20:a6:f0:13:8f:9f:42:20:a7:9a:f7:a7:b6:84:c5:
05:6b:67:2d:d8:15:1b:d5:58:a2:66:a4:78:7a:f5:
2a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C7:3E:67:77:B6:03:34:DF:50:47:B1:A5:7B:9D:6B:4D:2C:F6:F1
X509v3 Authority Key Identifier:
keyid:9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:95:f9:54:32:f3:e6:e5:d9:69:4a:31:d8:91:5c:c3:0f:3f:
3e:e1:c7:08:45:6e:e4:97:89:2d:47:51:ad:f5:65:1b:29:bb:
bf:d6:a3:a2:8e:a4:fe:d1:f0:66:f9:0d:2d:20:7e:77:c8:10:
5e:6e:e7:90:e8:24:28:a1:13:45:95:18:3a:c6:99:c9:cd:4c:
48:8f:f8:7e:fc:97:2e:ca:77:07:bb:5e:79:97:20:48:be:f3:
61:fc:01:a5:52:41:3e:3d:35:85:a6:02:67:4e:29:ae:6e:ef:
a5:f9:cb:94:ea:8d:d7:1e:f9:ca:66:7f:c0:6a:2d:b5:9e:45:
fd:f0:16:69:84:ef:6a:97:ab:0f:48:ea:7f:83:d1:80:cb:5d:
19:ab:8e:b2:35:0c:4e:b3:78:97:4d:b3:2c:b1:22:6c:b9:89:
42:d4:e0:0e:1d:9c:ba:30:c2:f0:03:f0:19:75:36:f2:c3:65:
53:3a:7f:29:7d:62:7a:ee:11:b0:99:28:78:ce:94:f1:3d:af:
7b:4e:9a:f2:eb:e4:c8:95:eb:d0:25:9d:40:dd:ce:e1:79:52:
af:4e:7d:97:76:9e:f6:82:60:8e:5f:85:d5:a7:82:88:89:0f:
7e:33:b9:09:1c:68:6c:f2:5f:0c:0c:5f:24:cf:44:2b:02:17:
b5:4c:01:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:08 2025 by rpki-client