Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
File: m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft (raw, json)
Hash identifier: u99tkBN6QLXUQTyiZ3/9ODeE5GCa8mb59ZmqhCAcTXI=
Subject key identifier: 29:9A:93:57:A7:0C:69:F8:C2:F8:94:91:2B:E0:E6:2A:FF:FE:44:A0
Authority key identifier: 9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
Certificate issuer: /CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Certificate serial: 0199228C45DD9B4DAD8A2324516A72BF987D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
Manifest number: 08D7
Signing time: Sun 07 Sep 2025 05:00:42 +0000
Manifest this update: Sun 07 Sep 2025 05:00:42 +0000
Manifest next update: Mon 08 Sep 2025 05:00:42 +0000
Files and hashes: 1: m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl (hash: 1FOSdSqimq3N1SV+A2PWIFuhdYpqtLO5Y7xFsIQQzAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:45:dd:9b:4d:ad:8a:23:24:51:6a:72:bf:98:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Validity
Not Before: Sep 7 05:00:42 2025 GMT
Not After : Sep 8 05:00:42 2025 GMT
Subject: CN=299a9357a70c69f8c2f894912be0e62afffe44a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:73:aa:cf:ea:d8:46:76:36:da:03:31:e0:cf:
f2:00:c8:84:69:e4:7f:05:23:76:8e:c2:c2:3e:fb:
0e:46:8d:a7:22:39:ec:fc:b7:20:39:6d:78:7f:6a:
d3:ed:4a:21:df:8f:ed:73:43:1f:54:f7:56:21:01:
e7:b4:6c:dd:7c:b7:4c:59:0a:a8:55:09:bb:da:73:
b8:8b:d7:0e:0b:e0:41:80:e0:92:c4:fe:0c:98:51:
cb:a7:73:e2:34:da:7b:50:e8:f7:9a:52:e0:13:ca:
76:af:3a:e5:51:22:88:12:25:1b:ed:d0:68:ed:13:
9b:01:95:d8:d9:38:80:8d:1e:46:b8:da:a3:8c:fa:
af:cc:9c:fa:75:76:9b:4b:8d:8f:8c:89:c2:4a:a3:
c8:6f:88:ad:e0:6c:5f:26:a6:47:eb:6c:00:02:03:
fe:a6:b0:7e:6c:fc:50:8e:e6:df:aa:ef:7f:96:80:
99:31:82:9d:6d:c4:07:da:2c:cd:8d:a2:aa:45:e4:
5d:3e:18:b2:40:bc:0f:8c:81:ad:ea:49:da:1c:f2:
50:da:12:47:24:fc:f1:5a:ae:4e:01:61:02:66:b5:
6c:a0:6e:8e:08:07:1f:b9:fa:02:ae:63:10:27:b5:
2d:c2:6f:13:06:dc:eb:af:52:8b:31:91:43:68:f6:
90:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9A:93:57:A7:0C:69:F8:C2:F8:94:91:2B:E0:E6:2A:FF:FE:44:A0
X509v3 Authority Key Identifier:
keyid:9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:53:1e:a3:15:16:4b:25:ea:47:17:19:f8:54:f4:a6:fb:d2:
a0:4a:f7:16:95:f3:f6:c3:ac:e6:27:61:fb:49:d6:c6:9a:94:
6a:67:f2:f7:5d:5d:36:72:76:e3:39:0e:87:80:e0:79:4d:e5:
b3:f8:6d:32:29:cf:a9:b3:9f:76:07:56:0f:0c:8e:eb:d8:c2:
cc:34:9c:40:a4:ce:f5:b9:8d:1e:8f:74:56:bb:98:86:f7:c7:
0f:20:a4:ab:2c:8f:ce:d4:0b:8e:5f:58:85:6d:19:f7:cb:01:
61:21:fd:4f:83:81:80:a4:f5:38:c2:59:10:94:d8:8e:b4:03:
db:b6:cb:dc:f4:a2:17:cc:d3:77:33:94:93:1e:60:ec:cb:68:
05:75:78:b4:26:b5:fa:75:d2:fc:90:fe:a6:a1:f8:a8:af:0b:
6a:f1:17:ed:96:86:df:28:e9:2d:a7:b4:62:2b:6d:79:a7:0a:
5d:e3:a1:4e:d4:a9:e3:67:08:78:0d:6d:08:20:c7:b3:02:01:
25:5c:9f:31:47:e2:b9:6e:31:50:0f:90:57:f9:d9:a9:4e:58:
00:cf:b8:24:99:e9:fd:c4:f5:e4:3e:ef:85:bb:53:a1:c2:6e:
c5:6d:b9:f3:6e:15:33:5b:60:b0:e6:84:90:d1:fe:0d:8f:3a:
04:de:38:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:36 2025 by rpki-client