Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
File: 9GRgXq8UuLXSjujQdsHjc491glM.mft (raw, json)
Hash identifier: AtN4lmzh5QmueqcwoNYgjk0z9OfW/3pca82dAYWo+H8=
Subject key identifier: 92:FC:E2:D4:A2:14:2B:17:27:E4:CC:7B:B1:BC:F7:D3:3A:D3:03:E3
Authority key identifier: F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
Certificate issuer: /CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Certificate serial: 0198D473A36A7B677D1A65D23526A3109470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
Manifest number: 1107
Signing time: Sat 23 Aug 2025 01:03:24 +0000
Manifest this update: Sat 23 Aug 2025 01:03:24 +0000
Manifest next update: Sun 24 Aug 2025 01:03:24 +0000
Files and hashes: 1: 9GRgXq8UuLXSjujQdsHjc491glM.crl (hash: GfKzb7Nenb842Elgzq3BaILtYPh6Sz5E5zamnGAdrrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:a3:6a:7b:67:7d:1a:65:d2:35:26:a3:10:94:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Validity
Not Before: Aug 23 01:03:24 2025 GMT
Not After : Aug 24 01:03:24 2025 GMT
Subject: CN=92fce2d4a2142b1727e4cc7bb1bcf7d33ad303e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a5:cd:f9:4d:f0:70:61:63:1f:f7:53:49:1e:
28:10:c5:0d:8b:31:21:7e:4e:4e:d7:a0:2c:b6:da:
ac:f1:7f:ef:c8:9c:a7:11:f5:65:72:3c:1a:ad:68:
5d:f8:5b:58:a5:16:10:89:bd:e4:9f:ac:8a:2a:7c:
90:4c:73:41:9b:ce:31:47:8c:e1:40:de:bf:ad:07:
ae:21:94:6d:fb:a8:a8:2b:3a:92:a2:12:99:48:05:
36:47:50:4c:f2:27:f9:76:a1:02:ed:b5:a9:e3:64:
2d:af:3d:02:f9:d1:3a:21:d6:2f:8f:b2:dd:e8:0f:
0f:0c:60:97:65:c5:fc:ab:5d:b9:c0:78:3a:b6:44:
4b:96:8a:93:ab:fd:25:9f:6c:af:53:89:fd:3f:0e:
58:af:d1:c8:a3:44:5e:a4:61:ee:ae:95:46:07:ee:
3c:d4:ea:6c:69:7a:28:01:ee:9b:05:44:0b:fe:da:
2e:90:c4:c3:4b:df:ce:00:20:e9:78:5b:73:78:d4:
5e:06:8a:51:2e:73:93:39:10:da:2b:33:b9:39:f2:
53:c2:a0:be:ef:49:89:fd:a1:d1:59:e3:7b:01:71:
0c:cb:7e:13:c9:66:6a:d7:ac:d7:38:d3:4f:fe:a3:
2a:b5:59:7d:8b:10:90:35:a7:53:75:e8:e7:98:50:
1a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FC:E2:D4:A2:14:2B:17:27:E4:CC:7B:B1:BC:F7:D3:3A:D3:03:E3
X509v3 Authority Key Identifier:
keyid:F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5e:96:ab:b2:03:27:8d:54:92:53:71:23:81:89:a1:d2:63:
f6:82:25:6c:29:f3:47:0d:ad:da:40:3a:8a:7d:2a:0f:a3:e1:
60:0b:9c:62:07:a0:52:7d:ac:c6:b7:6f:68:50:a6:eb:b7:ee:
1d:53:a8:cd:b4:9d:cc:c3:e6:d3:1d:da:6c:68:b7:c2:52:aa:
4b:02:d8:a0:e0:00:13:33:c0:f1:3a:87:e0:c1:c7:54:8e:01:
f0:b3:47:ca:7f:58:35:8e:9f:d3:01:fa:19:e4:90:19:b5:ef:
b4:8f:06:0e:d2:44:d5:9b:8a:87:34:7a:83:46:e7:b0:72:9f:
c1:bd:1e:9e:4d:2b:32:92:75:58:d6:71:a9:7c:87:78:dd:a1:
6d:fb:99:51:21:cd:7d:2b:aa:4f:9f:58:67:ca:b8:5c:8a:63:
db:d8:75:57:e3:68:eb:04:03:94:d1:ae:53:85:e9:b6:9b:f9:
67:7b:f2:32:31:ae:b7:8e:ec:af:81:74:b5:8c:b2:12:f5:93:
7c:f3:14:82:a0:5f:c8:d4:70:6f:77:4f:0f:6d:0e:ad:17:8d:
f4:77:e9:6a:fb:92:a8:e6:51:41:d9:9c:40:68:72:b4:03:80:
d9:6e:8a:24:f4:c0:57:ae:f7:ec:f7:73:81:37:20:77:a8:cc:
81:f8:12:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:06 2025 by rpki-client