Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
File: 9rES1L7bpvNYUoqDcUG3SwkphZM.mft (raw, json)
Hash identifier: UdZxc/gthKLviodkYoYH4LJ80M2hmtm6UHbvwoqkVbo=
Subject key identifier: F4:DF:62:79:5C:69:C1:DB:9A:F0:17:1E:D5:09:CC:55:FE:B2:EA:43
Authority key identifier: F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
Certificate issuer: /CN=f6b112d4bedba6f358528a837141b74b09298593
Certificate serial: 0198D7A89D6DE6B8C81E25F78A79C09F87F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
Manifest number: 159A
Signing time: Sat 23 Aug 2025 16:00:08 +0000
Manifest this update: Sat 23 Aug 2025 16:00:08 +0000
Manifest next update: Sun 24 Aug 2025 16:00:08 +0000
Files and hashes: 1: 9rES1L7bpvNYUoqDcUG3SwkphZM.crl (hash: NZ/LjhV3YrHBK4vWvHRvTeNEdN+Gzl5ZNfvdM+BUtK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:9d:6d:e6:b8:c8:1e:25:f7:8a:79:c0:9f:87:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b112d4bedba6f358528a837141b74b09298593
Validity
Not Before: Aug 23 16:00:08 2025 GMT
Not After : Aug 24 16:00:08 2025 GMT
Subject: CN=f4df62795c69c1db9af0171ed509cc55feb2ea43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ad:9d:22:3f:b2:a5:55:45:22:65:f6:f6:8b:
34:a6:64:f3:c7:7a:5a:09:a7:15:cf:d5:e6:82:c8:
2a:89:cd:cc:c4:91:96:a1:5f:55:a2:0a:2d:dc:41:
b1:5f:43:bd:4d:53:3e:bf:81:94:a6:aa:e6:34:28:
78:3c:53:03:52:16:f3:b6:62:6c:90:1a:7e:4f:29:
91:c3:64:ee:53:cc:57:23:13:45:cc:2e:55:31:9c:
31:9f:57:9f:3c:18:bf:6c:a0:54:d7:cd:82:36:45:
93:50:7d:7d:b2:a5:e4:46:80:0e:2e:b3:8a:49:bd:
92:52:0e:ce:8a:c6:ff:57:7f:7a:ac:2e:0e:99:c8:
48:bc:3c:d6:a7:90:b2:1c:fa:b8:ed:45:01:68:d0:
0f:1a:ba:10:9c:5e:cb:01:f1:d0:4b:49:18:91:eb:
3a:b3:9f:e1:56:d0:1a:f4:e1:bb:a8:48:03:f6:a5:
3c:5c:fe:c1:47:66:9f:7b:ec:b4:59:8d:4e:29:d0:
66:5a:9f:67:b2:18:c6:b0:eb:8a:ba:86:e3:74:60:
24:d5:9a:b5:81:3f:e9:c8:7f:3a:1c:62:43:3f:b4:
5c:44:16:f8:06:54:d0:a0:f2:90:3e:95:f0:95:da:
57:2a:14:63:87:85:d5:43:af:21:77:da:b5:8a:25:
76:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DF:62:79:5C:69:C1:DB:9A:F0:17:1E:D5:09:CC:55:FE:B2:EA:43
X509v3 Authority Key Identifier:
keyid:F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:dc:0a:54:51:8f:ac:42:6f:bd:10:13:ef:1d:cc:02:8d:27:
7f:51:49:52:4b:7c:ce:8c:68:6c:10:80:db:3b:19:8e:68:be:
31:0b:40:d1:c8:11:b7:a7:c0:94:ad:41:4f:2f:3e:cd:9e:bc:
45:ad:80:31:2c:1c:0f:c0:18:5d:84:17:19:58:a2:f9:40:13:
c6:8e:c9:36:d0:41:ae:92:dd:73:be:d4:18:e5:d6:5a:ff:98:
d3:5b:e1:a2:7b:99:be:6c:02:ac:96:6f:18:50:28:01:5d:f1:
80:4c:2e:59:47:56:39:93:bc:4b:84:5e:5f:9e:b5:05:6a:00:
4f:83:cc:42:4d:9f:fe:1e:8c:83:b2:62:77:6c:3d:10:65:8f:
8b:f7:64:29:50:4d:d7:8e:3e:8a:ce:49:29:6a:0f:59:6a:e5:
e7:80:be:ed:0d:3d:c5:32:e3:da:e6:cf:44:4a:f6:13:87:0d:
97:f1:b5:9c:5d:7d:29:ac:99:c2:e7:67:0d:cf:8d:08:1e:0c:
bd:e4:79:93:a7:b5:14:d9:03:f6:03:7d:37:b0:7d:27:dc:51:
41:d7:95:27:8c:38:a5:15:31:82:8a:41:df:cb:da:ec:a7:77:
bf:08:d5:d3:d5:8c:e2:07:33:01:a3:26:16:0d:be:41:1e:cc:
6c:81:e6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:37:22 2025 by rpki-client