Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
File: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft (raw, json)
Hash identifier: pkfQ1tyFQlfB9mzaKbLl3CzVnjySp4JwcjnUvdlP0NM=
Subject key identifier: 76:C0:65:45:17:61:E3:B5:D4:51:AE:8B:67:0E:EB:AA:E0:FA:44:E1
Authority key identifier: F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47
Certificate issuer: /CN=f539a07ef47f805cca07c10ae187c93968808c47
Certificate serial: 0198D6987D1A463FF1FE5797760085CD1EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
Manifest number: 0420
Signing time: Sat 23 Aug 2025 11:02:54 +0000
Manifest this update: Sat 23 Aug 2025 11:02:54 +0000
Manifest next update: Sun 24 Aug 2025 11:02:54 +0000
Files and hashes: 1: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl (hash: o2i2DlwjhFsUjcGhmf2rEq4g+F5YV5IEyI08L7tah5E=)
2: hQ_4ttT47iSzyY-pXhE0Zk2VRI8.roa (hash: lla8JTSaGgyqrA7kZsNxFenXInFs3bsEJhodvXrTuiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:7d:1a:46:3f:f1:fe:57:97:76:00:85:cd:1e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f539a07ef47f805cca07c10ae187c93968808c47
Validity
Not Before: Aug 23 11:02:54 2025 GMT
Not After : Aug 24 11:02:54 2025 GMT
Subject: CN=76c065451761e3b5d451ae8b670eebaae0fa44e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:82:71:e4:47:b4:43:27:6c:58:6a:8f:5a:b9:
2a:ff:dc:1c:8e:da:0e:84:6f:15:df:74:67:b5:b4:
a9:11:60:93:9f:be:3e:be:1b:91:f4:1c:54:e6:71:
9c:5c:7d:59:d8:b9:28:41:f8:69:15:9d:27:bc:5d:
f3:90:c5:72:ce:d6:eb:aa:a6:c5:34:aa:64:5f:1a:
60:88:62:25:c2:8f:c9:76:ba:f5:87:8d:1f:be:6c:
13:08:0b:04:12:85:ec:62:ca:6a:17:bd:60:a0:00:
f9:0e:06:d1:4e:8c:a0:5c:1c:97:72:a9:e9:ae:25:
b7:05:cf:2c:f1:cd:f6:c8:d0:0a:a8:e1:72:01:17:
23:73:dc:de:d4:23:9c:d4:65:f4:28:dc:85:5f:7d:
b8:67:0f:8a:de:26:80:b6:da:57:5d:34:59:bb:41:
d7:c4:54:a1:3e:36:6f:ce:b5:47:a5:2b:c4:c0:be:
e6:f1:5f:7c:de:b9:b8:86:3f:6f:bf:4f:17:85:ef:
92:28:f1:6c:0d:c5:e7:ff:2f:12:af:fc:0d:28:8a:
10:5a:3d:40:2b:be:ea:1c:00:45:24:14:32:63:cc:
ed:62:b1:4a:f6:9d:9d:3d:6f:f7:e7:5f:ff:b5:5e:
55:83:99:76:43:75:d8:14:56:60:8b:7e:9c:d5:0f:
0f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C0:65:45:17:61:E3:B5:D4:51:AE:8B:67:0E:EB:AA:E0:FA:44:E1
X509v3 Authority Key Identifier:
keyid:F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f6:2a:2d:40:af:45:64:dc:16:46:4e:8c:9b:7a:34:ee:79:
d5:cd:75:b1:b3:08:87:4b:8d:8f:4b:f0:9a:3e:44:45:4c:37:
60:26:ea:93:17:e9:c1:5c:54:29:b7:a8:5c:3a:36:95:02:d5:
0e:0b:1f:29:72:28:bb:71:58:7e:d3:6b:ca:44:0d:16:4f:4d:
49:f0:97:a2:97:a4:12:38:ab:93:07:ac:02:d4:93:38:b1:29:
dc:ca:16:21:8e:43:b0:cd:80:2d:19:9a:df:46:09:4a:d3:2b:
75:e6:be:e8:6f:30:70:b0:f7:66:6f:59:ef:7f:8a:38:d6:d6:
6c:4b:4c:25:48:14:f0:10:e3:9c:62:81:0e:eb:fd:c3:82:44:
65:09:59:07:41:cf:7e:7b:5b:04:15:07:99:40:6c:ed:83:ad:
f4:7c:b2:c5:dc:84:2a:d4:a9:1e:5c:19:06:cb:99:52:a8:b9:
c5:f7:62:03:39:c4:1b:a7:0d:f3:a8:ff:5b:4f:d7:e7:a8:ee:
40:a3:3f:6a:a4:e0:5e:04:1a:a7:7b:00:b7:d9:8e:97:59:f1:
7a:bc:23:5b:9b:ca:71:df:1b:c8:a7:52:96:54:6b:3b:a8:18:
ee:ef:3b:ba:b0:24:78:83:cb:7c:55:bb:a9:96:49:81:8f:0a:
f8:1c:16:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:26:39 2025 by rpki-client