Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
File: AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft (raw, json)
Hash identifier: p/lyacK1POisFB/PSMRJoMiLQHZfhOTISYBfFevQYVQ=
Subject key identifier: D9:C5:F0:C1:63:32:CE:39:C8:44:5C:C0:08:8F:2A:B2:56:8D:8E:83
Authority key identifier: 01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04
Certificate issuer: /CN=013f6db0fd57d19f9ee15242a2e4167efb522d04
Certificate serial: 0198D6613270B7BF1956F2CF1B6FA20B60A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
Manifest number: 0B20
Signing time: Sat 23 Aug 2025 10:02:30 +0000
Manifest this update: Sat 23 Aug 2025 10:02:30 +0000
Manifest next update: Sun 24 Aug 2025 10:02:30 +0000
Files and hashes: 1: AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl (hash: KpP/GGqtsdF+kJIsL8vJtpwmtYdlXD2YKHNgHyZFY9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:32:70:b7:bf:19:56:f2:cf:1b:6f:a2:0b:60:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=013f6db0fd57d19f9ee15242a2e4167efb522d04
Validity
Not Before: Aug 23 10:02:30 2025 GMT
Not After : Aug 24 10:02:30 2025 GMT
Subject: CN=d9c5f0c16332ce39c8445cc0088f2ab2568d8e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:6f:d1:4f:fd:ba:83:4e:bb:51:14:46:82:
04:e9:b6:be:6e:b2:9f:cb:26:48:e7:c3:e4:77:3d:
b4:42:f3:f9:19:d9:10:19:46:18:46:84:e9:8f:3a:
a0:c4:c7:cd:ee:73:7b:72:86:10:8d:83:d2:90:c8:
11:74:a8:ab:9c:5a:7a:08:5b:e5:7e:3d:cd:2c:aa:
e0:67:c6:f8:8e:bf:10:46:5d:65:00:1e:01:ee:13:
97:85:7e:8b:0a:5a:8b:d4:f7:92:15:f2:dc:14:88:
97:09:9c:dc:6a:ba:0e:12:94:16:3a:d0:24:ea:2b:
79:b8:ba:7e:0e:74:c4:e6:e1:f0:d4:a8:4f:93:5d:
e3:8f:83:4b:71:41:cc:d5:a4:3a:fa:0d:67:9b:bd:
d5:5b:e9:d6:45:89:3b:7e:f6:a2:cc:7f:c5:ea:5e:
10:a3:0f:77:f5:ba:e2:6c:18:e7:5b:42:cc:c4:ab:
08:65:17:6c:f8:46:58:bf:b7:ea:51:3d:f7:db:1c:
28:b0:21:c1:b8:49:77:5f:2d:08:cd:64:bf:9f:98:
30:ae:72:66:f1:2f:ed:89:28:20:de:b7:7c:39:76:
f6:bc:d6:d0:66:cf:cb:8e:09:da:a5:06:94:64:ff:
af:c1:f0:cd:6b:af:23:24:bd:87:5e:58:ac:57:39:
23:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C5:F0:C1:63:32:CE:39:C8:44:5C:C0:08:8F:2A:B2:56:8D:8E:83
X509v3 Authority Key Identifier:
keyid:01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:12:db:a1:8d:e0:72:f9:60:41:fe:f0:30:67:93:c0:05:e3:
df:71:4b:02:1b:c7:d4:66:ec:10:1d:6d:02:a1:2d:bc:d9:65:
53:30:8f:3f:c9:03:f4:2b:32:a3:ce:3a:3a:80:cb:45:03:57:
7c:cf:b6:b9:81:66:b5:97:3f:a2:16:9f:41:95:bf:39:8e:74:
ed:a5:29:83:c3:63:2c:72:17:c9:db:af:7b:37:d5:b7:36:75:
3f:1c:7a:6e:e6:81:ec:73:4b:3b:c4:e8:9f:2b:47:73:e9:47:
d7:5d:1b:f0:e8:b8:1e:8d:df:8f:56:0d:de:e6:99:2f:59:2a:
23:24:e3:7e:07:48:04:dc:6b:71:39:eb:9f:a7:90:e0:9d:c8:
8e:3c:e1:ec:99:ed:6d:6c:01:96:35:59:bd:21:a7:df:b1:d4:
bc:e6:4a:ac:c7:0e:c8:36:ce:8a:a9:24:fa:62:83:f0:89:e4:
0f:e8:47:19:43:db:71:52:fe:f5:43:3d:ab:7b:a1:09:85:cc:
43:fc:77:43:ec:93:8e:37:55:82:61:83:e7:83:d7:79:41:b2:
51:51:93:e4:de:c8:9a:48:92:78:49:07:e4:ff:2d:f5:a0:6c:
53:c7:01:0c:cc:a3:ff:14:2b:2d:23:38:f9:05:7f:92:0f:56:
7d:25:af:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:20:14 2025 by rpki-client