Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
File: m5TSR2sxUeHn8DYNzk84USXu1fs.mft (raw, json)
Hash identifier: bwNniTDK5Y3XahrUHoQOLl1D1US05OrPM7X18YWpknk=
Subject key identifier: 66:7D:99:30:4A:13:75:99:89:B7:CE:94:5B:A1:46:DD:51:BD:21:AD
Authority key identifier: 9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB
Certificate issuer: /CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb
Certificate serial: 0199240D8B257E9CB0038D8957674A05D7EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 12:01:31 +0000
Manifest this update: Sun 07 Sep 2025 12:01:31 +0000
Manifest next update: Mon 08 Sep 2025 12:01:31 +0000
Files and hashes: 1: m5TSR2sxUeHn8DYNzk84USXu1fs.crl (hash: 0u6Eb9SZyMUqH8TIKgBzY+gRji06gBkzspSfwx0FGH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:8b:25:7e:9c:b0:03:8d:89:57:67:4a:05:d7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb
Validity
Not Before: Sep 7 12:01:31 2025 GMT
Not After : Sep 8 12:01:31 2025 GMT
Subject: CN=667d99304a13759989b7ce945ba146dd51bd21ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ad:b6:b3:f0:eb:17:57:b2:b4:98:82:76:de:
26:44:2a:7a:b0:a5:c0:47:d1:57:dc:c3:be:7f:d3:
bc:75:b9:6a:00:1f:07:c2:65:a7:16:f6:2f:a8:8a:
09:57:6d:7e:c1:f3:16:9b:5f:d9:d6:86:92:bd:c9:
35:ea:73:ce:a3:9c:05:ef:d5:94:32:5b:64:9c:95:
1f:f1:a9:0c:86:07:6d:ee:73:db:e3:78:c6:d1:ed:
0f:05:15:8f:d9:12:b9:b4:46:61:bf:73:07:9f:3f:
9a:47:23:81:e5:8c:68:f0:fe:c2:33:d2:40:8f:12:
84:fa:a2:3a:f3:6a:a4:d4:12:71:1f:e8:69:89:33:
31:9b:2b:f0:62:15:b0:f1:f4:33:a0:b0:af:5d:09:
c1:8e:ff:87:fa:2a:db:c1:a9:d6:da:2c:2b:3b:5a:
7c:a4:ef:2c:ff:95:74:50:8a:a7:ca:a7:e7:0e:01:
69:e1:4e:28:ee:c3:e6:e9:0a:cd:7c:fa:d0:98:aa:
db:ac:91:32:d6:70:c4:cb:27:39:34:7c:b8:79:fb:
c8:b5:f6:b2:bb:86:59:9c:7e:35:f8:89:eb:2e:ac:
2a:d1:54:e4:ea:2f:37:94:18:3c:e9:24:84:15:6e:
26:a4:9f:9b:f5:69:ef:47:fc:33:eb:b1:6f:21:2b:
c8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7D:99:30:4A:13:75:99:89:B7:CE:94:5B:A1:46:DD:51:BD:21:AD
X509v3 Authority Key Identifier:
keyid:9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8d:ef:93:a3:28:0a:2f:19:7e:bb:8a:e6:6f:e9:ca:6a:48:
22:43:6a:ff:e4:d6:6c:ce:4d:d5:43:ab:0e:00:ad:5f:5d:dc:
6a:e4:1d:c0:cf:35:20:97:e7:ee:8d:34:89:3b:ae:22:77:bb:
5a:ae:8b:19:a7:b3:e0:bf:f0:35:08:d1:25:35:50:6d:3b:4d:
bf:bd:16:c7:84:a0:95:a2:b5:8a:54:6c:bd:31:37:35:11:4b:
a5:e5:51:57:b8:be:b0:e5:59:ef:59:11:86:3d:e1:d2:11:5c:
d9:c8:24:63:e3:e4:d1:18:8e:12:53:06:f6:2b:55:9c:15:90:
c9:40:6a:6d:bd:bf:82:e6:67:ae:c3:22:0a:56:7e:16:8a:45:
78:40:e4:86:e5:96:bb:ec:fc:c3:3a:04:17:0b:6d:02:7b:04:
11:58:59:11:34:f5:04:83:23:33:26:44:8f:56:18:51:9d:ce:
a6:45:67:20:c9:7a:34:ed:7d:13:27:aa:0e:60:47:32:f9:8b:
de:dd:64:52:97:c0:00:6f:01:a9:a6:39:75:17:b8:6a:e6:fe:
0f:68:c0:5e:82:a3:de:ff:76:7a:12:e1:f5:53:b9:6c:c8:28:
8e:84:5e:11:ce:04:02:c3:5c:23:dd:16:6a:15:40:b9:83:40:
f2:ef:14:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:11 2025 by rpki-client