Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
File: 9pGrMkX_iVpy3W_wdDw3e28PiaY.mft (raw, json)
Hash identifier: SrKwkTjHPxkpuh3ze2H1fmi3NxCPdnCECvXxLpO0r+I=
Subject key identifier: B9:86:34:D6:A1:6D:18:22:72:78:98:95:E6:72:6E:3F:3B:47:4D:66
Authority key identifier: F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
Certificate issuer: /CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
Certificate serial: 0198D4A8199B75DC6838DCE357EC2E2F7027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
Manifest number: 0768
Signing time: Sat 23 Aug 2025 02:00:43 +0000
Manifest this update: Sat 23 Aug 2025 02:00:43 +0000
Manifest next update: Sun 24 Aug 2025 02:00:43 +0000
Files and hashes: 1: 9pGrMkX_iVpy3W_wdDw3e28PiaY.crl (hash: /+F0ycCo+iB/Mdghw9wW/FYXcn7eNI9hO2h9M0El4XI=)
2: NNs7_agCq4a5LGK9vlJAbRyPMSw.roa (hash: /RavIGbCYx2zogfJiuXee/WpGjlrh9UdwbzPF7/qVAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:19:9b:75:dc:68:38:dc:e3:57:ec:2e:2f:70:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
Validity
Not Before: Aug 23 02:00:43 2025 GMT
Not After : Aug 24 02:00:43 2025 GMT
Subject: CN=b98634d6a16d182272789895e6726e3f3b474d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:38:37:a5:5d:ca:7f:10:01:6e:e7:df:43:65:
f4:fe:df:eb:89:1b:e8:ea:6e:33:b4:38:54:73:c6:
ea:a0:c7:b6:fe:0d:c5:84:15:d6:cf:36:e0:b3:4a:
de:7c:b3:a8:01:97:b7:2b:d6:fb:20:49:0f:3c:bb:
b8:74:7d:85:b8:ae:84:36:4c:94:ef:84:ce:d5:dc:
40:f9:37:20:e8:a4:b6:d0:3c:87:60:6f:dd:ab:4e:
77:cb:48:cc:33:7e:39:2c:1b:78:46:db:4b:4d:76:
18:48:bb:a8:90:41:7f:51:06:d3:c1:cd:17:30:0f:
b3:1d:ff:e7:e0:94:3f:eb:bd:81:dd:93:31:01:c4:
9c:af:f0:ff:4c:a0:ba:a1:7f:cb:fd:f0:36:bb:f9:
61:d3:f5:dc:bd:65:ca:5a:75:5e:22:be:7e:7b:22:
51:f2:3e:5e:3b:b1:54:43:36:d3:e8:53:e8:47:8e:
ee:c7:7e:e9:3e:2c:12:e1:62:02:93:14:6f:6c:7b:
3c:2e:cc:2d:5e:dd:a1:3a:8f:5a:f5:b2:f0:31:27:
77:46:f4:24:88:4e:db:72:66:26:f6:a4:2e:dd:c2:
cc:66:de:52:a3:7e:4e:e0:20:c2:9e:13:e4:81:90:
ba:f6:f3:2c:f8:20:fe:94:f8:c2:8e:ab:22:0b:be:
fb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:86:34:D6:A1:6D:18:22:72:78:98:95:E6:72:6E:3F:3B:47:4D:66
X509v3 Authority Key Identifier:
keyid:F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2d:d1:45:e7:6b:bb:62:23:f7:29:8e:8a:41:86:e2:66:99:
36:d1:d3:b5:12:93:90:9f:27:69:d4:e1:2e:ef:1a:c7:71:e0:
6a:57:e0:26:09:d1:dc:2d:3f:9d:29:79:68:06:98:0c:cb:2b:
21:95:69:74:db:f2:74:7d:a2:02:ad:0d:46:b7:f6:f5:8c:6e:
c5:56:d8:6c:33:33:56:6a:7f:22:38:c0:e6:70:a7:b1:f9:8f:
7b:52:be:29:db:86:1e:d9:a2:c4:a9:93:f2:6f:52:5d:f5:48:
2f:37:5e:5b:3d:8c:a6:20:4a:b4:f0:99:b5:4c:a9:c2:87:36:
03:6a:db:6b:3e:88:7b:e8:4e:3f:22:b2:64:7e:69:07:43:31:
2e:3e:02:b2:24:6f:3a:4f:48:e2:0a:e1:58:3b:df:b9:da:dd:
a8:41:b8:3c:c3:56:80:87:b8:31:4d:32:aa:b7:73:24:09:a4:
2d:7b:a7:e0:11:fb:53:89:d3:cb:4a:69:77:65:c8:8f:f5:63:
d6:5f:8a:96:eb:47:5c:c2:d3:ff:6d:d6:ae:98:25:38:68:71:
82:22:f5:b4:8a:73:3a:af:18:ae:3d:0b:91:ba:ed:36:3f:03:
38:69:08:a8:98:b6:7a:d9:fd:35:9d:01:b1:fa:e9:30:b5:a5:
eb:29:24:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:50 2025 by rpki-client