Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft
File: s9nxe5jDqWQThWY7jNW3X-HwpJg.mft (raw, json)
Hash identifier: C5Xx9AV2VVScZuwlUfxYgAXCItwemIXRxPRcgrCnacI=
Subject key identifier: BA:D4:BF:22:F3:D0:87:DB:F3:F3:BC:C7:E1:2B:2D:5F:55:39:5F:45
Authority key identifier: B3:D9:F1:7B:98:C3:A9:64:13:85:66:3B:8C:D5:B7:5F:E1:F0:A4:98
Certificate issuer: /CN=b3d9f17b98c3a9641385663b8cd5b75fe1f0a498
Certificate serial: 0198D65F81EA38483A3BC2E6618770F53EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9nxe5jDqWQThWY7jNW3X-HwpJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 10:00:39 +0000
Manifest this update: Sat 23 Aug 2025 10:00:39 +0000
Manifest next update: Sun 24 Aug 2025 10:00:39 +0000
Files and hashes: 1: s9nxe5jDqWQThWY7jNW3X-HwpJg.crl (hash: aE1NXC2y9Awwcw0gTafu69zW40PNvCnVoL19RKFG960=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9nxe5jDqWQThWY7jNW3X-HwpJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:81:ea:38:48:3a:3b:c2:e6:61:87:70:f5:3e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d9f17b98c3a9641385663b8cd5b75fe1f0a498
Validity
Not Before: Aug 23 10:00:39 2025 GMT
Not After : Aug 24 10:00:39 2025 GMT
Subject: CN=bad4bf22f3d087dbf3f3bcc7e12b2d5f55395f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0f:36:f0:ef:3b:6b:94:b1:fd:14:8a:eb:2b:
c2:88:9b:95:5c:66:e4:2f:eb:b5:4c:c0:f3:dd:cd:
ff:01:d5:79:a9:e7:5e:82:0c:e2:f7:0d:df:13:39:
99:e5:7d:c8:48:2e:58:ad:61:48:44:1f:db:95:fa:
b7:ae:d3:cb:9c:3a:9a:b9:eb:1b:6a:e0:60:ae:c7:
3b:1f:9c:9a:ed:20:2c:6b:63:f8:47:15:5b:85:bc:
d6:76:ec:42:2c:14:c6:06:90:c0:13:f8:64:ef:a8:
a1:ec:6e:9d:2c:93:97:d8:db:b0:c8:54:3c:97:5a:
7b:96:5e:df:88:de:0d:23:f3:7c:6d:94:bd:37:52:
bd:9a:49:00:a4:cb:2f:9e:0c:99:86:5c:38:5f:f1:
cf:e0:30:81:e0:e0:ad:87:ed:e1:f2:6b:fc:da:0a:
0f:f0:1b:09:98:1b:53:fd:31:65:ee:89:4d:ef:ac:
da:01:3a:90:33:78:5f:7e:28:f2:98:8c:ad:d2:28:
53:59:f7:3b:ce:18:fd:90:f6:06:81:47:97:07:fa:
ff:60:72:99:68:0e:55:97:6f:03:41:a5:c6:3e:b5:
01:29:a7:7f:d3:77:e4:40:dc:c7:18:3a:2a:53:51:
20:c5:73:65:ac:db:c6:c7:b3:a4:66:48:21:06:d8:
ba:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D4:BF:22:F3:D0:87:DB:F3:F3:BC:C7:E1:2B:2D:5F:55:39:5F:45
X509v3 Authority Key Identifier:
keyid:B3:D9:F1:7B:98:C3:A9:64:13:85:66:3B:8C:D5:B7:5F:E1:F0:A4:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9nxe5jDqWQThWY7jNW3X-HwpJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6f:f2:5f:52:9c:76:00:92:75:ad:43:66:51:fd:bb:60:aa:
07:3b:74:80:ad:d8:12:cf:52:2b:84:bc:10:ae:f2:94:8d:db:
07:74:52:c2:0f:d9:67:62:94:41:81:43:7a:5e:2e:8b:1a:0d:
40:cd:9e:15:83:82:55:be:b8:f0:f4:e9:c0:8c:20:fb:00:4e:
97:31:27:a9:5e:79:09:20:31:cc:38:16:11:50:83:40:2f:4d:
b5:29:f7:e2:2e:6d:2e:3b:74:df:85:61:e5:1c:c8:31:0d:5c:
da:62:42:16:31:61:e1:39:fb:f4:3b:45:e4:22:05:dc:ac:67:
1e:ae:59:08:cf:e1:4a:c7:19:1c:6b:6f:f5:93:00:2a:66:eb:
5f:2d:da:7d:2e:ff:30:73:5c:99:aa:20:ff:c7:3a:b2:3b:48:
33:6e:e6:b7:89:73:e9:08:11:d7:e6:34:97:79:88:58:2b:ad:
33:ed:07:a4:29:0b:73:3d:a6:9e:ce:21:2a:8a:d7:1d:24:bb:
47:c1:23:41:cb:38:f4:38:04:2b:55:b9:c6:69:0c:79:68:9d:
44:9a:d3:4b:07:b2:4a:85:71:27:53:e9:3f:06:d6:8c:69:ab:
9a:fd:b0:c5:52:f6:b6:1a:9a:0f:d0:14:96:55:59:43:3f:68:
7e:78:31:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:10:19 2025 by rpki-client