Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
File: 9bdVrRo8ekUCu8PqNMdba85hyUw.mft (raw, json)
Hash identifier: N9orfrXMDDCTSsLD7RjqEqu4eqyfoxME2r8+QhllDjM=
Subject key identifier: 23:6A:25:D6:C9:C6:5C:43:6E:00:A8:77:0A:7F:64:42:53:BA:63:09
Authority key identifier: F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
Certificate issuer: /CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Certificate serial: 0198D54DDC5693EF209BB9C886D701D601FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 05:01:46 +0000
Manifest this update: Sat 23 Aug 2025 05:01:46 +0000
Manifest next update: Sun 24 Aug 2025 05:01:46 +0000
Files and hashes: 1: 9bdVrRo8ekUCu8PqNMdba85hyUw.crl (hash: SlGhEOe4OnfMV116mno2Zns+R0utYzIpmoEq6MgmEFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:dc:56:93:ef:20:9b:b9:c8:86:d7:01:d6:01:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Validity
Not Before: Aug 23 05:01:46 2025 GMT
Not After : Aug 24 05:01:46 2025 GMT
Subject: CN=236a25d6c9c65c436e00a8770a7f644253ba6309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:15:82:ed:20:9b:a5:c9:43:ad:17:39:df:d2:
01:e2:19:ee:e4:e8:b2:8b:af:cb:25:8b:28:47:78:
25:55:01:7e:57:53:8b:d0:ac:b0:48:5f:86:c5:c5:
22:aa:11:33:78:aa:4e:54:16:8b:67:7b:6d:33:36:
a3:d3:c1:f6:1c:48:cd:ac:0e:bf:72:8a:80:65:f3:
03:41:88:22:92:b5:1d:82:4b:7b:8a:03:6a:ef:b6:
94:de:ae:d7:24:6f:98:21:09:ec:9b:0e:bf:f7:53:
55:52:a6:d7:84:9c:2a:63:e4:a3:33:25:6a:41:12:
f1:7c:ea:23:bd:bc:55:ba:11:d8:60:12:44:f0:67:
e7:a6:89:0b:41:27:f0:68:6c:b1:2f:ad:5d:5d:3e:
83:b8:c5:b3:da:7b:4b:ab:01:1e:78:b4:4d:80:6f:
2d:8d:c5:92:f6:fb:a4:97:2c:7e:78:1c:9a:a4:db:
4c:9f:d2:63:4a:91:61:50:b8:f9:30:a7:20:c4:b1:
d6:2d:31:5e:7e:cb:fe:51:59:c7:d5:27:a9:75:d1:
39:84:84:d5:6c:ef:21:cc:07:18:f1:39:32:67:bb:
9b:58:4d:a2:4a:03:c3:b9:c2:43:8c:b0:7a:7d:27:
a6:97:c9:07:1a:b3:b4:0b:2e:ec:d2:99:bb:65:b5:
5d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6A:25:D6:C9:C6:5C:43:6E:00:A8:77:0A:7F:64:42:53:BA:63:09
X509v3 Authority Key Identifier:
keyid:F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:0b:30:4d:19:20:4b:80:b5:17:0d:1d:05:1f:6e:4e:c5:bd:
a2:02:e9:fe:6b:2f:67:b3:ee:ef:52:db:3d:df:f4:72:a6:6e:
4c:96:3e:53:d9:dd:17:0f:c3:64:f8:27:3a:56:00:da:8e:b3:
8c:95:8b:26:5d:89:ea:5d:9b:57:59:76:29:f4:65:29:fe:c9:
64:4e:85:99:14:87:93:71:07:5c:a5:9c:a2:28:57:ca:43:df:
f5:55:fb:d2:a2:7e:65:b6:1d:76:44:55:8e:50:54:40:56:8f:
f0:74:d6:00:64:c9:70:9b:6d:a1:ff:55:c2:69:41:cb:40:40:
15:6b:95:13:22:93:76:fa:5f:9b:83:86:7c:15:86:fd:92:89:
86:54:1f:0f:df:92:bc:b2:f2:ed:72:3e:45:eb:41:fa:e5:af:
c1:a8:c8:d0:71:02:ec:72:8c:ae:a3:d8:aa:76:71:a1:4f:38:
76:46:75:dd:d1:78:50:8a:f2:7c:31:a4:e3:61:b7:a1:68:c8:
ef:cc:93:85:f0:a7:03:bd:36:f3:b8:0e:1b:0b:63:bf:17:3a:
f9:50:0c:e3:21:fc:78:79:f8:d8:ea:3f:50:87:43:61:97:10:
c3:62:a7:ab:c6:27:71:b5:16:c2:2e:79:a7:bc:18:1d:72:af:
75:4d:aa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:55 2025 by rpki-client