Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
File: 9bMQ6dROhHDWzYAJWQZssA8pHvo.mft (raw, json)
Hash identifier: olL7AQRssyfc3XpycdfxNJbDuWQv1TfjiWP63XRQfc0=
Subject key identifier: 57:7F:48:9C:85:2F:24:34:11:7A:D7:E8:76:10:7A:91:44:F5:D9:58
Authority key identifier: F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA
Certificate issuer: /CN=f5b310e9d44e8470d6cd800959066cb00f291efa
Certificate serial: 0198D6605CE7FA46540F227BB364499A37FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
Manifest number: 10AE
Signing time: Sat 23 Aug 2025 10:01:36 +0000
Manifest this update: Sat 23 Aug 2025 10:01:36 +0000
Manifest next update: Sun 24 Aug 2025 10:01:36 +0000
Files and hashes: 1: 9bMQ6dROhHDWzYAJWQZssA8pHvo.crl (hash: ws00V1DriLO9VAcRGYKYNjC4Uz1M8HaM75Er6K/S4a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:5c:e7:fa:46:54:0f:22:7b:b3:64:49:9a:37:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b310e9d44e8470d6cd800959066cb00f291efa
Validity
Not Before: Aug 23 10:01:36 2025 GMT
Not After : Aug 24 10:01:36 2025 GMT
Subject: CN=577f489c852f2434117ad7e876107a9144f5d958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:a3:c0:1a:23:e3:74:ff:ed:5d:f6:22:e0:
a7:88:ab:43:b4:14:ff:7d:f7:42:f4:43:19:d4:72:
44:98:e6:16:2b:44:b9:0a:6c:82:75:98:51:8b:64:
64:65:c2:d2:fd:b5:45:c2:f3:1e:c4:85:54:2d:b5:
8b:21:de:3b:03:ee:65:18:54:d4:07:44:51:74:c9:
a4:41:34:10:cc:93:c2:cc:2f:2c:8e:6d:b6:19:b0:
8d:fe:da:4f:ae:0a:65:13:c8:c7:76:58:3a:57:1f:
80:8e:7f:f6:cf:2f:03:bb:db:1a:e0:c8:64:5f:48:
41:d4:34:02:7a:e3:09:a2:96:2b:57:12:8b:0a:6d:
2d:bf:d6:a1:f3:57:96:21:03:d8:91:7f:3b:b2:7d:
34:5f:05:df:0d:42:5d:e3:61:4f:f9:83:ec:98:ac:
29:71:66:d2:5b:c3:70:aa:b2:ef:03:5f:bc:d3:d1:
e7:73:0c:98:bf:ce:67:f8:b4:eb:b6:3e:b0:da:0d:
5b:1d:0d:36:d8:08:d0:da:e7:f8:23:4b:5f:3c:ff:
aa:c2:88:75:c2:d2:70:ad:0b:8e:cc:3c:78:06:fa:
6f:11:cb:7a:87:a6:f2:4b:0a:2c:bc:47:dd:e7:40:
83:a2:46:8f:9d:57:3c:07:3d:10:2d:8a:ff:63:83:
f7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7F:48:9C:85:2F:24:34:11:7A:D7:E8:76:10:7A:91:44:F5:D9:58
X509v3 Authority Key Identifier:
keyid:F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:09:c9:63:4a:0a:e8:67:fc:7f:56:7a:78:66:1c:7d:c4:ad:
aa:32:c4:73:ca:f7:71:47:4b:ae:3e:05:16:17:fb:40:bc:c7:
9c:cb:2c:e3:ac:5f:e5:3f:93:74:00:38:04:1a:83:14:99:e9:
01:2f:24:0a:f1:2f:f8:d3:f8:3d:c2:f4:04:a6:0e:1e:c9:c7:
56:e5:09:f1:94:fa:a3:d3:4a:cc:54:6a:9a:a0:1f:5c:67:3b:
79:c4:74:3d:d7:8d:ca:e7:42:ce:a7:6c:ca:ed:ab:e0:a9:fa:
d5:cf:da:b7:6b:b2:63:d8:35:5c:53:ec:b8:24:d8:9d:33:9a:
be:ed:5f:1f:f7:d2:f4:c0:be:fb:31:4f:26:e7:80:3b:50:31:
5e:d1:65:1f:16:ed:71:52:a9:af:87:7a:02:c2:10:e0:a3:b7:
be:40:3e:dd:6d:a4:7b:ef:02:0c:cb:e3:3f:1c:f9:d5:09:d8:
93:3e:c3:ca:7c:70:e5:10:62:7a:0d:35:33:e2:15:80:e1:cd:
86:c8:50:29:3c:51:82:99:76:69:29:14:b8:66:89:ba:b3:7e:
87:ef:3e:87:6f:27:ef:52:89:85:54:dc:85:a7:f1:5a:5e:d9:
71:7f:18:93:cf:e2:04:6a:88:0b:32:f6:d0:50:ee:0b:c6:7d:
36:16:ae:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:43:20 2025 by rpki-client