Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
File: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft (raw, json)
Hash identifier: jYJ1SyQS5EB0Uuxef9hRFETUHz6PnrL39ceGBB6ievY=
Subject key identifier: A7:69:9A:B9:5C:A3:CF:18:6D:EF:17:E1:FE:E7:89:0C:E1:88:7A:25
Authority key identifier: F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
Certificate issuer: /CN=f57766f0726cff8618af968258f5bb229e937c6e
Certificate serial: 0198D5BB7EA402220412F70F932A121139E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
Manifest number: 0D76
Signing time: Sat 23 Aug 2025 07:01:31 +0000
Manifest this update: Sat 23 Aug 2025 07:01:31 +0000
Manifest next update: Sun 24 Aug 2025 07:01:31 +0000
Files and hashes: 1: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl (hash: RbwZV5DzE9qfHMgTVIoJFK89Jus2xewvWBPqaZfxTlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:7e:a4:02:22:04:12:f7:0f:93:2a:12:11:39:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57766f0726cff8618af968258f5bb229e937c6e
Validity
Not Before: Aug 23 07:01:31 2025 GMT
Not After : Aug 24 07:01:31 2025 GMT
Subject: CN=a7699ab95ca3cf186def17e1fee7890ce1887a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:47:9a:33:f6:9e:05:78:99:b6:49:ae:fa:
3e:4a:0e:61:8f:10:8e:5c:0f:cf:c1:85:26:58:7e:
3f:5f:92:30:b8:bc:ca:c3:5a:fe:bb:b6:c1:83:b8:
dc:b2:a4:71:c2:b4:b9:10:e3:ea:b9:6c:e8:2e:fd:
1a:8a:60:60:ca:d3:1d:f9:99:c4:9c:d0:93:99:fd:
1f:cf:36:69:7b:54:a5:57:ff:7d:5e:e0:ad:12:5a:
d1:31:81:f0:1c:45:d3:38:c3:6b:48:85:3b:9a:82:
7b:9e:2a:dd:d1:64:62:cb:23:76:92:40:cc:52:a2:
44:e2:d0:68:dd:74:0c:76:a2:7c:6f:45:01:9b:ac:
f9:11:4b:f9:04:9d:9b:fc:f7:da:39:cf:a1:15:65:
5f:f8:17:00:f6:a5:48:e8:08:5d:4b:5c:b7:1f:29:
78:e5:03:dd:79:38:8e:fc:03:08:e5:b9:df:c6:74:
06:a0:c2:f1:9f:a3:da:30:5d:c2:ab:f9:ba:8c:61:
84:97:95:c1:aa:3b:ae:fc:79:f8:2c:01:e8:d6:d6:
1c:22:24:44:d5:eb:94:14:30:a6:5d:c7:35:b4:be:
45:23:a4:92:a9:dc:24:42:e1:79:dc:68:3d:91:68:
4c:37:ea:cf:89:0a:24:45:3e:18:16:bb:c7:f6:94:
69:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:69:9A:B9:5C:A3:CF:18:6D:EF:17:E1:FE:E7:89:0C:E1:88:7A:25
X509v3 Authority Key Identifier:
keyid:F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8d:4f:f5:c6:b9:e4:3b:c6:f5:44:6f:df:fd:12:df:cd:6f:
16:63:41:d3:21:6a:0a:01:08:5f:d5:13:fb:c1:e0:35:58:e2:
89:4f:7f:8c:4a:d9:5b:c5:ea:98:3d:f4:a3:7b:91:cf:f8:0e:
1a:b5:50:2e:a8:9e:de:db:5a:5f:a1:e1:86:4d:be:1f:12:77:
f6:4d:84:6d:86:da:41:53:d5:ae:cb:88:f7:e1:03:f8:20:fe:
2f:bc:f3:0e:60:d1:a2:4d:14:78:43:75:3d:97:bd:b9:8a:d8:
f7:6c:f3:54:82:57:98:e0:24:8b:1f:e9:21:fc:1c:df:50:c0:
ea:8e:7c:ef:01:86:61:60:63:bc:bc:56:f0:3a:50:35:2d:5d:
9c:69:71:3f:47:ab:9b:0f:c9:f1:4b:b4:40:f7:29:74:d2:b0:
c3:e6:aa:0e:50:19:5f:b7:5a:bf:90:2a:96:ba:58:72:9d:64:
9d:31:78:ed:11:50:3f:cd:e7:8a:00:77:9c:a3:83:15:7b:c4:
64:13:38:b7:1f:47:83:5d:a8:50:9f:b0:c4:97:14:f3:9b:1e:
01:ce:0e:e3:0b:7b:b2:6e:1d:b2:31:5d:ea:4c:e1:84:75:9c:
86:be:53:0c:0a:7c:2a:99:61:69:da:fc:55:59:de:5c:4d:2b:
fc:51:c3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:19 2025 by rpki-client