Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
File: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft (raw, json)
Hash identifier: tP6eSFApGxx5RGaHRT1gDddd2Z4BaqTLQmi8TMdhQAw=
Subject key identifier: 1F:9A:63:9A:8A:31:65:51:D4:9A:39:AB:E5:EC:71:05:6C:2E:09:EB
Authority key identifier: D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
Certificate issuer: /CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Certificate serial: 0199239EE7BC896AFB4A01FEACA04ABD706B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
Manifest number: 1170
Signing time: Sun 07 Sep 2025 10:00:40 +0000
Manifest this update: Sun 07 Sep 2025 10:00:40 +0000
Manifest next update: Mon 08 Sep 2025 10:00:40 +0000
Files and hashes: 1: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl (hash: UFBk28z2KNzYdpiJ827q5jxthnMGvoTi/5PG7+LMnMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:e7:bc:89:6a:fb:4a:01:fe:ac:a0:4a:bd:70:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Validity
Not Before: Sep 7 10:00:40 2025 GMT
Not After : Sep 8 10:00:40 2025 GMT
Subject: CN=1f9a639a8a316551d49a39abe5ec71056c2e09eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:54:7d:8e:41:1a:a5:c9:e3:ad:00:97:db:32:
a3:44:30:9a:ad:65:e3:fb:24:2a:6e:3e:3d:7d:f1:
c9:97:f8:8f:02:7c:5f:b7:8a:85:8e:a5:e6:96:e7:
41:83:cb:2e:79:1b:b4:9e:79:86:67:1c:38:2f:57:
9c:a5:96:02:91:2a:23:3d:da:7f:8d:8e:bd:51:3f:
48:0a:ec:4d:c4:71:82:49:39:1e:ef:22:6d:a9:b3:
55:5e:be:d4:2d:bd:fd:89:ee:5e:2e:0f:50:ef:bc:
7b:b0:55:bb:f7:16:7e:9b:19:46:c6:6b:e0:7c:ff:
59:1d:d6:7c:a2:30:52:f1:e7:a6:c5:f9:bf:1b:52:
32:0a:3c:34:45:8a:eb:fe:59:1e:8d:5c:10:c2:03:
eb:60:97:51:61:c7:9e:f8:ba:c4:c2:29:d8:08:ef:
cf:d1:c6:99:85:01:23:fd:58:a9:27:1f:dd:ad:7a:
4c:cb:c3:d7:c3:1a:61:fc:f6:4e:e6:c3:f9:8c:7c:
7d:70:34:a6:ec:b0:d0:7a:24:c2:44:dd:5a:4c:1d:
ed:5f:f2:de:d1:20:b2:c1:a4:1d:9d:46:08:bd:18:
35:8b:8a:d5:de:1e:44:d0:e8:60:f5:07:ea:73:7e:
c4:e7:f2:fb:b6:61:21:57:fb:6e:78:3e:d9:89:f9:
67:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9A:63:9A:8A:31:65:51:D4:9A:39:AB:E5:EC:71:05:6C:2E:09:EB
X509v3 Authority Key Identifier:
keyid:D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d8:78:6d:b1:3c:b1:d5:1f:d7:b0:90:15:d2:a7:35:24:78:
5e:de:97:b6:f0:c3:ad:15:2e:b2:71:1d:3b:2e:72:3b:db:19:
ec:f8:56:4a:2b:d4:2a:ac:3a:b7:11:6b:fe:6f:66:57:64:35:
d2:55:b4:e6:6f:d6:f0:21:80:44:39:4a:fb:c4:fc:1f:08:38:
36:c2:1d:2f:41:d9:c9:9d:e1:02:c8:69:bc:46:25:ee:81:50:
d5:16:f2:c4:a9:4b:d2:74:a7:f2:4d:68:88:ae:6c:a3:5a:e8:
3b:00:37:1c:98:11:5e:a3:c7:28:20:8d:ef:2b:f1:64:51:1c:
ef:b6:35:7f:e3:8f:ec:c3:67:b1:a5:38:35:33:7c:ca:1d:e0:
ff:c8:cf:b9:35:33:e3:e5:75:9e:25:52:c6:88:59:11:fa:91:
24:78:d9:6b:16:58:82:c1:46:79:c2:00:91:de:73:13:7b:a0:
3f:12:90:c1:2e:20:2c:99:97:13:9b:9d:af:3c:2f:45:d6:e5:
16:0c:56:35:76:db:da:97:93:71:3f:65:18:a8:2b:05:88:15:
7e:b8:4f:0f:fa:a7:37:6e:c1:d1:b4:de:3d:b8:93:da:0d:d8:
3b:3f:59:a9:1f:0e:bd:71:aa:19:b0:f3:67:99:a8:39:a5:3c:
62:11:14:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:29 2025 by rpki-client