
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
File: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft (raw, json)
Hash identifier: jSTt0BXNIqcoNzxt+F0RtTjl2T9dSmdz4VJvDqWdV/M=
Subject key identifier: 1F:51:EF:0F:A0:3D:D9:0A:73:6E:D5:6A:0A:A2:51:13:CD:0B:C8:50
Authority key identifier: 9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
Certificate issuer: /CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Certificate serial: 019922FA1734FAF0007CCA4E92C20C0639B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
Manifest number: 0518
Signing time: Sun 07 Sep 2025 07:00:39 +0000
Manifest this update: Sun 07 Sep 2025 07:00:39 +0000
Manifest next update: Mon 08 Sep 2025 07:00:39 +0000
Files and hashes: 1: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl (hash: w+4qIr1JFg831dCU3NA/+4yjA3sKrrIwF3quXel78bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:17:34:fa:f0:00:7c:ca:4e:92:c2:0c:06:39:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Validity
Not Before: Sep 7 07:00:39 2025 GMT
Not After : Sep 8 07:00:39 2025 GMT
Subject: CN=1f51ef0fa03dd90a736ed56a0aa25113cd0bc850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a4:d3:0f:25:9c:af:b8:ae:71:d3:eb:20:ad:
8e:ce:17:72:7c:26:aa:4f:df:f0:8c:2a:3b:09:fc:
3b:1f:dc:55:44:9a:b4:68:96:16:ca:17:ca:7a:d5:
3d:c7:1c:da:2c:9d:33:2f:0a:98:82:8a:92:51:cf:
df:62:75:a4:c7:57:6c:37:88:c2:e9:0f:6b:ad:f1:
ac:a8:e7:17:7e:5e:9d:64:b6:18:be:df:81:a9:6d:
af:c4:42:84:bb:01:46:8c:53:c9:10:bf:f3:38:93:
72:0a:62:10:6f:08:75:53:b4:b2:ac:29:e9:65:94:
53:df:6c:ab:f3:84:28:3f:d5:77:39:48:12:eb:a3:
8d:08:e5:61:4f:ff:dc:85:7c:e1:e6:80:bb:0c:86:
3a:ee:9c:86:88:07:12:41:2a:d6:2f:05:ed:be:1e:
73:ec:be:bd:2d:48:5b:a2:9a:36:21:7b:26:d7:8c:
0b:7b:67:1f:c2:e7:8b:9f:f4:64:b3:13:02:28:43:
21:a6:d6:cb:0b:55:af:63:d6:76:ea:0d:9b:e1:f7:
d3:9e:d1:9b:f4:92:af:f4:f1:bd:35:df:9c:2c:ad:
14:49:81:8c:c8:f5:64:de:27:50:11:6c:a5:bd:93:
0f:9d:1a:83:29:52:63:28:9c:4f:26:e7:f4:05:94:
04:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:51:EF:0F:A0:3D:D9:0A:73:6E:D5:6A:0A:A2:51:13:CD:0B:C8:50
X509v3 Authority Key Identifier:
keyid:9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:21:31:d3:51:07:05:c6:9c:31:63:a0:33:ca:fb:c6:ca:a0:
ba:c9:e9:bc:e6:4a:13:55:a6:d8:80:ae:d1:7f:de:51:67:05:
d9:e1:4e:cf:ac:92:f5:a2:77:a8:1f:73:2c:18:db:1e:52:65:
7d:3c:fc:52:40:a6:1d:c5:01:86:57:35:58:f2:cd:e1:e2:15:
9b:e8:e4:6e:5b:73:e1:51:86:e7:fc:0c:58:ba:57:2a:c7:fb:
ff:fc:1a:06:8a:e0:1b:bf:0f:3f:f2:e0:be:24:fc:20:43:3b:
58:21:94:2b:59:8a:24:c1:86:c3:b4:87:9b:64:8a:fc:cd:ae:
c4:e4:9e:a1:58:6a:cd:50:34:4e:d9:e0:8c:d4:0d:c9:6a:e9:
58:60:a5:df:3e:ed:f0:d7:cc:59:5b:77:f7:f2:99:98:e1:87:
78:ca:a6:ca:11:86:cc:2c:a9:2d:b4:ab:e9:cf:32:68:cb:a2:
29:ce:59:f9:41:5d:02:47:65:0c:ac:58:4d:13:da:44:79:ff:
69:6e:e8:fa:bc:c0:ed:b4:f3:78:9c:6f:90:5b:e3:a2:33:a0:
17:bd:a8:08:48:10:73:01:e1:b8:17:41:a6:dd:c7:6a:b1:c3:
21:43:2a:e1:cd:75:4d:48:5f:74:c8:e3:19:23:e7:b3:06:71:
48:ae:9e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:39 2025 by rpki-client