Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
File: 9URgWW1tUyQB3jE9-JA2blN21gI.mft (raw, json)
Hash identifier: k6ihrfXP0w6YRqypIT83TE5/1nwVHbRsbky8lrlqk9Y=
Subject key identifier: 8D:B1:99:68:CC:61:B0:CD:1F:E7:F3:C1:A9:1F:41:D4:02:F2:5B:60
Authority key identifier: F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
Certificate issuer: /CN=f54460596d6d532401de313df890366e5376d602
Certificate serial: 0198D4E01CA4676DC355DD40B48CB06E32BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
Manifest number: 061B
Signing time: Sat 23 Aug 2025 03:01:53 +0000
Manifest this update: Sat 23 Aug 2025 03:01:53 +0000
Manifest next update: Sun 24 Aug 2025 03:01:53 +0000
Files and hashes: 1: 9URgWW1tUyQB3jE9-JA2blN21gI.crl (hash: zKAvUZT9uogxnwzIwQJu3A2Trw+9v9GarWlsZHNa0/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:1c:a4:67:6d:c3:55:dd:40:b4:8c:b0:6e:32:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54460596d6d532401de313df890366e5376d602
Validity
Not Before: Aug 23 03:01:53 2025 GMT
Not After : Aug 24 03:01:53 2025 GMT
Subject: CN=8db19968cc61b0cd1fe7f3c1a91f41d402f25b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:c2:71:ae:2a:be:43:c0:71:9e:94:7f:07:
94:57:5d:dc:a0:da:0f:df:f2:84:18:28:37:f6:a1:
49:16:e3:53:f7:e6:ea:c6:42:a7:ed:80:57:73:82:
9c:8d:19:b5:d1:f6:dd:f3:0d:22:ba:5b:c0:5e:3e:
61:1a:e4:f5:1f:2e:ef:d7:7f:44:76:0f:52:b8:fb:
fa:c0:b9:61:f1:08:c4:9e:9c:55:41:43:ac:e2:5f:
de:17:32:e3:be:79:23:ae:cd:2b:53:e9:8d:8c:80:
3a:56:37:10:c3:48:9e:39:1e:38:a8:7e:60:59:fe:
33:ed:5b:e4:cc:95:e9:ae:74:24:86:92:c2:d7:b6:
d8:62:03:ef:0c:9a:d6:21:b6:9f:e9:e6:59:40:d8:
91:36:af:e1:3a:9f:0c:a9:d7:06:26:47:8f:f6:1e:
f3:eb:e8:d0:c6:37:09:e8:e0:f5:9c:41:10:d3:09:
3f:22:71:82:75:37:d8:b4:89:56:6b:0e:31:39:d3:
53:a8:9a:e8:20:89:af:da:e1:5c:5e:cb:8c:b6:a8:
33:e3:cb:37:d1:31:2a:af:f4:32:08:0f:f6:d7:b2:
25:6a:df:51:41:2b:e1:7a:ba:c5:ec:e9:27:e0:63:
99:ca:9c:5d:ad:c1:2e:64:ef:9a:39:44:c5:53:90:
5b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B1:99:68:CC:61:B0:CD:1F:E7:F3:C1:A9:1F:41:D4:02:F2:5B:60
X509v3 Authority Key Identifier:
keyid:F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a4:4c:a3:82:e7:8e:c0:a6:dc:cf:04:3b:67:0f:92:24:5b:
12:b9:07:13:5f:8e:60:af:a4:2f:6c:58:49:0f:12:6c:f1:63:
d9:c1:88:a9:d7:ba:2d:64:54:92:2c:59:a2:14:0e:33:07:c3:
d5:6d:15:78:fe:7f:df:15:2f:dc:ba:33:1e:ba:dc:f7:7a:36:
27:58:ff:32:08:61:bd:84:5c:48:51:79:1a:98:e3:17:4b:17:
69:e9:82:c7:44:2d:07:5e:0e:a2:2c:f3:fe:60:15:71:6b:f1:
c6:89:9a:55:f3:9c:79:06:f4:4e:4b:34:ec:53:fc:24:ce:10:
ea:5d:6a:bc:46:b5:72:d8:ba:3b:13:13:a6:79:69:6d:3a:ed:
8b:ec:a7:73:1a:04:6c:88:0a:8d:4d:b1:98:d4:32:1d:1d:ce:
6f:f6:bc:6f:8e:ad:4e:e3:ee:4c:5e:dd:c3:85:7a:d2:24:5b:
2b:7c:56:6a:e6:7a:11:d0:be:c2:7f:58:bb:83:21:4c:5f:bd:
e2:ab:2a:02:11:3a:ef:54:99:1e:aa:57:8e:59:ad:c9:13:9d:
bf:c4:55:20:d8:80:76:cb:f8:53:f5:9d:bd:7e:d6:15:17:9c:
74:8a:b6:0b:b0:d6:cf:ba:7e:45:21:08:2b:d7:1e:3c:87:f4:
4b:e0:7d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:50 2025 by rpki-client