Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
File: pO9xMrnCMYeert1cpNwysWXwx_M.mft (raw, json)
Hash identifier: W6S/NEm++Wxc/OoyytvXzDfRU4A9Pg9PTTKRgTh4Zls=
Subject key identifier: EE:1D:38:FD:A4:BA:A9:FC:1D:36:D3:62:FF:CB:49:37:91:1E:32:59
Authority key identifier: A4:EF:71:32:B9:C2:31:87:9E:AE:DD:5C:A4:DC:32:B1:65:F0:C7:F3
Certificate issuer: /CN=a4ef7132b9c231879eaedd5ca4dc32b165f0c7f3
Certificate serial: 0198D705BCAC56F20164FFACF45776997C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
Manifest number: 0D83
Signing time: Sat 23 Aug 2025 13:02:14 +0000
Manifest this update: Sat 23 Aug 2025 13:02:14 +0000
Manifest next update: Sun 24 Aug 2025 13:02:14 +0000
Files and hashes: 1: pO9xMrnCMYeert1cpNwysWXwx_M.crl (hash: nOkAPyzbEsBL+CH/np4Z5Eh23SwV0mCTGq+SoVf6z+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:bc:ac:56:f2:01:64:ff:ac:f4:57:76:99:7c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ef7132b9c231879eaedd5ca4dc32b165f0c7f3
Validity
Not Before: Aug 23 13:02:14 2025 GMT
Not After : Aug 24 13:02:14 2025 GMT
Subject: CN=ee1d38fda4baa9fc1d36d362ffcb4937911e3259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:59:4c:1b:4f:e1:5b:c4:ea:21:79:21:00:2d:
83:f3:70:e8:13:81:4c:9a:3e:90:cf:df:1a:18:95:
e7:8e:e6:c3:2d:44:df:2d:98:c9:15:97:c6:7b:5c:
3a:03:56:72:b6:bd:5c:4f:1f:97:8f:c6:d9:9c:63:
b9:15:34:e1:63:2b:1d:bf:56:6c:6e:05:2c:68:5b:
00:f5:02:2e:62:b5:3c:55:e9:3f:b8:18:98:09:2f:
00:29:ef:bd:51:13:44:ae:3f:9f:03:15:58:7c:1a:
8d:6e:98:d8:d6:c6:90:fe:3f:94:c0:0d:88:08:ae:
40:d8:6e:08:64:13:c4:70:bd:22:69:85:83:df:06:
8b:22:b1:32:37:55:99:76:da:8d:d6:be:29:b8:4d:
e8:2f:7e:1a:68:b3:f2:3b:00:b6:9f:a8:0b:03:3d:
6f:1b:8d:6c:2e:75:6f:42:34:08:63:aa:07:1e:c3:
59:8c:ac:77:00:03:58:57:2b:6c:c6:f5:29:d5:10:
b8:5c:4a:55:d6:44:66:fa:2c:a0:ab:ec:e5:ed:f6:
3f:58:c4:22:d2:2c:75:69:18:05:39:73:b7:7d:01:
14:77:3d:0b:99:7e:a8:d1:59:bc:23:f2:d8:c4:3f:
06:7c:84:35:8d:f5:8b:f0:a9:1a:36:99:09:b9:15:
78:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1D:38:FD:A4:BA:A9:FC:1D:36:D3:62:FF:CB:49:37:91:1E:32:59
X509v3 Authority Key Identifier:
keyid:A4:EF:71:32:B9:C2:31:87:9E:AE:DD:5C:A4:DC:32:B1:65:F0:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:02:26:69:fc:7f:4c:c7:d7:8e:fb:20:6f:45:fa:c4:e1:99:
62:47:15:5c:c4:e6:93:7a:71:89:1a:15:69:bd:09:cc:c7:c8:
91:54:a1:07:3d:8d:c3:12:c9:31:98:0e:8f:21:41:18:e9:af:
6f:51:03:8a:9b:03:f7:2a:41:a4:ee:b2:87:e9:1f:98:33:c8:
30:5c:5c:5b:34:08:9f:bb:5c:e7:9c:e1:27:44:b4:13:6d:c0:
42:cb:30:71:f1:e9:1b:3a:1b:14:11:a1:e1:9e:a4:3d:6e:cc:
78:a7:a1:a7:8a:91:52:af:45:fd:3d:ac:31:6a:37:a9:f3:ad:
d0:d3:f9:e6:5d:78:0f:af:1e:94:6c:cd:28:f8:8d:97:1c:8e:
b6:bc:1a:e5:7f:4c:8a:18:c8:3f:d9:75:47:87:7b:8d:a8:45:
f6:a7:8c:f0:56:7e:d7:94:be:45:d0:23:a6:6f:fd:35:f0:c6:
31:91:76:c3:10:e9:d1:af:9b:34:d0:bf:f5:f0:28:a7:3b:66:
2a:cb:55:c9:86:9b:35:58:c1:3c:c1:d6:2e:e5:24:71:f3:76:
3d:e3:08:9f:ff:70:a4:8d:0e:ef:cd:e1:3f:c7:35:0a:a4:67:
85:07:56:df:61:4c:b0:6e:91:ef:d0:95:27:02:21:4c:16:a4:
19:bd:37:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:18:40 2025 by rpki-client