Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
File: 9l95H50M9str44nJRWjId0BeUUQ.mft (raw, json)
Hash identifier: 2812FQcJqIHvhiW/neFj2y0V3TeCvqeqOaLoqEBgxfs=
Subject key identifier: B2:40:6D:34:40:D7:B5:83:7D:24:F7:5D:5E:27:2A:F4:F9:99:FC:6B
Authority key identifier: F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
Certificate issuer: /CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Certificate serial: 0199221EE54597301AF346C1C54E389BA404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
Manifest number: 05DB
Signing time: Sun 07 Sep 2025 03:01:14 +0000
Manifest this update: Sun 07 Sep 2025 03:01:14 +0000
Manifest next update: Mon 08 Sep 2025 03:01:14 +0000
Files and hashes: 1: 9l95H50M9str44nJRWjId0BeUUQ.crl (hash: /fEBKrXRUh+2/gI57mKMRgupO1Lz3h1x2AdqKGVhqck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:e5:45:97:30:1a:f3:46:c1:c5:4e:38:9b:a4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Validity
Not Before: Sep 7 03:01:14 2025 GMT
Not After : Sep 8 03:01:14 2025 GMT
Subject: CN=b2406d3440d7b5837d24f75d5e272af4f999fc6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:f1:34:8e:aa:58:99:0d:63:3e:a2:f3:2c:
da:d8:cd:25:dd:ca:96:7f:a2:d1:8d:15:5c:b9:ac:
e5:04:a4:ba:c5:b6:15:45:47:7e:fb:53:90:3c:c3:
d8:24:97:c6:ab:e4:d3:b2:a3:62:d9:63:b8:fa:70:
56:aa:8d:59:7f:b7:e0:37:d4:98:9f:b7:3b:68:e2:
d1:7f:8f:e0:19:df:ef:b8:da:48:64:5f:1e:5c:33:
3b:2b:85:a4:7f:d9:a5:a5:fc:fe:fa:21:84:01:c0:
8b:20:7f:ad:87:35:07:39:c8:52:d2:0e:c5:b9:b6:
63:6b:73:46:7b:4c:ab:ff:8b:1a:46:cb:45:43:ae:
fc:fc:61:0b:ec:f8:08:74:6c:29:ba:be:0f:47:34:
d0:58:df:71:d1:c8:d1:96:38:23:e5:f7:52:77:6d:
06:64:86:8a:50:3f:37:e6:77:ca:02:8f:e9:f8:f8:
65:ce:55:f5:35:48:b3:d3:9f:0e:5b:05:f2:c5:18:
51:ed:f7:05:9a:be:1d:07:c6:c3:ce:0b:98:69:c2:
3a:bc:d3:b2:a4:f6:da:7a:7a:4c:19:5e:9e:3e:b9:
4d:74:2e:64:9a:e0:cd:ab:91:58:a2:66:8e:c8:24:
c5:51:56:a7:b8:1f:33:fa:30:ae:d7:20:95:c0:2d:
17:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:40:6D:34:40:D7:B5:83:7D:24:F7:5D:5E:27:2A:F4:F9:99:FC:6B
X509v3 Authority Key Identifier:
keyid:F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2b:5d:39:df:5f:f0:68:11:ed:4a:b2:59:3a:b7:74:9a:43:
de:eb:ac:03:3f:47:b2:75:5f:d7:5f:27:d4:00:33:c7:36:cd:
6d:b8:cf:3e:28:08:28:0a:91:77:e9:70:1f:2e:21:f2:1a:5b:
f1:1c:f1:70:d8:96:bd:be:9c:85:34:92:40:44:90:48:1a:6e:
1d:df:27:fd:0e:cf:f0:66:00:26:d3:dc:45:69:d4:49:ec:b4:
8a:4d:32:85:e5:e5:2e:52:e0:6a:83:94:2d:9c:25:c8:6e:b8:
e3:7c:22:27:93:ae:35:5e:45:4d:eb:79:c2:07:fd:f3:6e:32:
b5:cf:fa:9a:b0:33:dd:e1:3d:49:6b:3d:e6:2c:ad:7d:0d:0d:
39:fe:c9:1a:2b:0d:3c:b3:46:28:a0:b9:8e:8e:66:ba:0c:d2:
f6:59:b3:ea:25:a0:b1:d9:14:bc:b8:b2:10:52:8f:2f:dd:da:
12:c6:28:7d:d6:5d:80:52:fb:98:53:b9:11:71:17:43:ba:f5:
79:eb:d8:e0:e6:f0:5a:05:0e:5d:60:61:29:35:c3:85:aa:5d:
07:09:0d:27:45:aa:24:e7:dc:56:ca:9b:77:84:87:7a:60:c8:
5c:1f:a1:83:7f:5e:de:8f:95:9f:59:bf:5d:b5:3c:77:22:f4:
b3:f8:12:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:36 2025 by rpki-client