Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
File: 9bJzfl2X4RCOsEmQTemxbzauseA.mft (raw, json)
Hash identifier: Rk91FExheC2S8EPF3JSaf5wTrTqkgAW6t14yBxpxN8k=
Subject key identifier: D2:79:A2:39:C1:28:5C:41:1E:6F:5D:FA:23:0A:7E:B4:8B:46:2B:58
Authority key identifier: F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0
Certificate issuer: /CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0
Certificate serial: 0198D472604EBE060D3D47B321681AD12EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:02:02 +0000
Manifest this update: Sat 23 Aug 2025 01:02:02 +0000
Manifest next update: Sun 24 Aug 2025 01:02:02 +0000
Files and hashes: 1: 9bJzfl2X4RCOsEmQTemxbzauseA.crl (hash: 4++7s9ouE4meDzZPfl+J8wR90YU7tBUdkRZ57b+5yDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:60:4e:be:06:0d:3d:47:b3:21:68:1a:d1:2e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0
Validity
Not Before: Aug 23 01:02:02 2025 GMT
Not After : Aug 24 01:02:02 2025 GMT
Subject: CN=d279a239c1285c411e6f5dfa230a7eb48b462b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0a:b5:df:83:26:97:3a:b9:ab:fb:72:f9:f4:
89:18:4a:55:09:4c:ad:f8:f7:f5:4b:d6:50:bc:31:
39:df:9a:c1:87:46:09:70:6d:08:f2:c2:5d:95:62:
3e:70:5e:f6:ea:cd:e8:62:3b:35:b1:97:79:56:07:
18:da:10:5e:8a:58:49:fa:28:a9:58:89:63:fd:94:
8b:b6:c5:7d:01:4e:a9:13:d9:05:19:89:b8:0e:ac:
6b:50:3f:6a:21:a7:52:8e:ef:cf:8f:76:80:14:07:
ef:be:14:03:0a:cc:b0:d5:0f:32:4c:a5:e7:7e:c5:
a9:3b:ed:e4:ec:f5:92:a6:20:01:fb:65:5c:6d:6b:
29:fd:b4:80:b7:6c:4e:4a:77:5e:30:7e:9a:d7:63:
1b:5c:07:31:23:5a:e8:03:2c:9e:c6:8c:bd:2c:b4:
a5:af:12:d3:78:24:84:68:50:20:b1:41:f3:e7:54:
a6:16:51:aa:f5:9a:8c:5c:e4:5f:6c:c1:ca:63:70:
b6:fe:04:1f:cf:0c:eb:68:e7:15:ca:3d:77:fe:6b:
42:6c:43:1a:59:e5:b6:73:50:4f:4e:65:3a:4d:50:
05:08:7e:9e:73:01:44:9b:b1:e3:d2:17:ee:f9:db:
b1:00:d8:ca:d0:3d:1e:ed:bf:76:ef:0a:99:b8:27:
e8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:79:A2:39:C1:28:5C:41:1E:6F:5D:FA:23:0A:7E:B4:8B:46:2B:58
X509v3 Authority Key Identifier:
keyid:F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:41:91:4a:a5:ab:14:8a:4b:20:f5:01:c4:67:ff:14:1c:60:
4f:a6:70:c1:20:0c:e5:fc:f1:c0:96:13:76:26:f1:b6:be:88:
89:5f:75:33:ad:29:1c:bd:cf:a2:ea:25:eb:4f:88:12:2d:37:
c2:ee:b9:23:82:e7:89:a9:e4:57:b0:28:3d:4b:60:c0:80:09:
f9:0b:6b:04:12:c4:12:f3:db:b5:4f:fe:a3:b2:9c:13:fe:fd:
05:42:aa:cc:2a:7b:37:6d:82:8e:d8:c8:c9:d1:7f:18:6d:85:
c7:9d:68:e9:6e:67:63:c9:25:98:d3:89:ad:aa:5b:42:cc:ee:
54:27:bb:88:9c:3a:84:76:01:3b:92:cd:8d:c6:c6:dc:32:19:
1f:0a:8f:ed:2c:a9:42:10:ed:89:ae:1d:c5:d6:b5:ee:37:a2:
c0:5f:a2:d9:6e:db:4b:8b:ec:08:6b:b9:89:d1:99:07:ab:66:
1d:a4:7b:45:c6:8d:70:b0:96:90:33:22:5c:ec:79:c9:15:51:
02:93:4a:26:25:25:37:50:9c:8e:a5:68:1f:c6:b1:07:50:1b:
8a:6f:18:86:21:16:1a:f0:92:c7:84:e7:f0:aa:32:3e:e1:9b:
bc:aa:f0:6c:35:2e:d5:2d:a0:ba:9e:4a:be:cb:fd:f8:50:dd:
83:55:eb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:56 2025 by rpki-client