Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
File: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft (raw, json)
Hash identifier: kjoozrW4AGlzAX14/8Ccj99NreZWNafUeIo6NpX73lo=
Subject key identifier: C7:94:54:3F:A8:1E:A8:14:BA:82:95:D1:27:BC:90:AF:A1:23:B8:FC
Authority key identifier: F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
Certificate issuer: /CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Certificate serial: 0198D5F196603F354D704BA8DAE9C44784D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
Manifest number: 0ABE
Signing time: Sat 23 Aug 2025 08:00:36 +0000
Manifest this update: Sat 23 Aug 2025 08:00:36 +0000
Manifest next update: Sun 24 Aug 2025 08:00:36 +0000
Files and hashes: 1: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl (hash: TsoU7ZSxVekoY9Bi/z3o5msltiBSR6Wv8QDzPmzqHfE=)
2: JFSPkHUXD6uekiRT14OFUV3SRJ8.roa (hash: d66KNl4Y3abt7U8S0mMyC51IECrPTJ0e2/YrGhdvTTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:96:60:3f:35:4d:70:4b:a8:da:e9:c4:47:84:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Validity
Not Before: Aug 23 08:00:36 2025 GMT
Not After : Aug 24 08:00:36 2025 GMT
Subject: CN=c794543fa81ea814ba8295d127bc90afa123b8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:07:42:88:b6:ed:b8:c8:ff:f5:9f:1f:7c:04:
3c:35:ac:0d:42:47:47:ba:f5:18:91:f7:b7:21:d4:
c1:1b:96:db:7e:7e:22:92:3c:4d:0e:46:e6:83:78:
84:ae:a4:71:01:bd:ef:7b:93:e6:9d:12:a4:d0:1d:
19:15:39:b4:96:cc:59:52:68:11:cb:51:fc:72:46:
ed:dc:f5:67:00:28:b4:7f:74:68:c0:18:f0:2f:fc:
a2:3f:78:03:bd:fe:75:30:8d:05:99:3b:2b:9f:54:
7b:0c:32:f5:d2:01:0a:20:1c:92:4c:42:59:ed:e9:
ca:a7:a4:bc:c9:09:08:b7:ec:77:15:cf:fe:06:82:
8f:94:83:5a:02:2d:ac:e6:ce:ba:34:3f:38:cc:24:
97:8a:c5:37:d2:aa:ff:8c:11:d1:44:12:f4:8a:4b:
d5:1b:06:be:7e:81:ef:d9:c9:0b:ea:e8:19:7b:6b:
ab:7a:c9:f1:de:6d:3c:5a:4a:17:cc:9e:19:e7:08:
5a:f7:ae:91:0d:e3:ca:4c:11:f8:a3:52:61:10:d1:
0e:91:ce:6f:c2:ab:46:bc:58:92:db:86:c4:ef:55:
6a:b4:ed:78:df:8f:06:8f:24:5e:05:1d:69:30:d8:
10:59:cb:e6:60:3d:5a:10:e2:7c:94:5c:c9:20:f3:
64:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:94:54:3F:A8:1E:A8:14:BA:82:95:D1:27:BC:90:AF:A1:23:B8:FC
X509v3 Authority Key Identifier:
keyid:F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:36:1f:e3:7a:b0:82:73:60:47:5a:15:cd:58:8c:d1:29:8a:
e7:be:6d:05:57:f2:87:73:ed:a6:60:25:53:78:7a:c8:78:22:
88:cb:21:6b:6c:3f:ee:d5:3d:90:46:21:51:e6:90:47:24:fe:
01:fc:66:c6:78:35:43:fe:41:c8:de:14:77:cd:23:37:30:03:
3d:27:3f:03:30:8b:f1:9e:aa:61:0e:c1:73:65:d8:ee:ba:65:
53:fc:8c:08:5b:0c:fe:70:84:9f:17:c0:cd:d3:5d:87:d4:d5:
7a:0c:f9:99:81:bc:fe:fc:ef:e1:94:e9:aa:10:93:63:d4:11:
be:c8:02:58:0e:da:43:34:c7:a4:31:9d:47:03:34:3b:ed:66:
03:c8:26:32:65:fc:f2:b2:19:21:2b:80:61:97:43:d1:d4:2a:
2f:82:16:7d:3f:99:7d:26:4e:31:bb:81:c3:c6:17:87:cf:4c:
70:dd:bc:5d:e4:29:8e:d8:a6:c2:49:8e:73:aa:26:01:0f:dd:
6b:7e:82:82:5f:e1:6f:fe:3d:37:71:a0:1e:ca:33:24:92:01:
c4:e2:36:8d:9b:4a:59:ea:0d:59:01:ef:f4:18:22:b0:92:1a:
15:a2:2c:c3:f0:08:37:64:35:73:18:f8:32:75:a6:77:f3:c8:
da:ac:98:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:10:18 2025 by rpki-client