Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
File: _9YayMVuOP32EjgDbHNUcnADRjE.mft (raw, json)
Hash identifier: 8CXLTj6e6ecLiucw6YBaBwferqPljKzAJHF4hQEDOEk=
Subject key identifier: 5E:84:53:7B:F6:DC:24:61:B2:E4:4F:B5:5F:9A:FE:36:F5:D3:34:1A
Authority key identifier: FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31
Certificate issuer: /CN=ffd61ac8c56e38fdf61238036c73547270034631
Certificate serial: 0198D58368449E260BCD9298AD0A5EEA578B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:15 +0000
Manifest this update: Sat 23 Aug 2025 06:00:15 +0000
Manifest next update: Sun 24 Aug 2025 06:00:15 +0000
Files and hashes: 1: _9YayMVuOP32EjgDbHNUcnADRjE.crl (hash: wgL/y2Iq74kM236RDbJtHDh8Pf0oKw+RLUlyIaztfK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:68:44:9e:26:0b:cd:92:98:ad:0a:5e:ea:57:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffd61ac8c56e38fdf61238036c73547270034631
Validity
Not Before: Aug 23 06:00:15 2025 GMT
Not After : Aug 24 06:00:15 2025 GMT
Subject: CN=5e84537bf6dc2461b2e44fb55f9afe36f5d3341a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:96:86:f5:a5:ae:f9:83:ec:21:36:46:e1:ff:
1a:10:7b:02:b8:41:64:09:b1:35:ba:e6:b4:11:d8:
b6:ef:81:36:66:ac:8b:ca:a2:3f:3f:18:ac:24:3e:
73:3c:d3:6d:4d:47:46:b8:4e:c1:8b:9c:88:7a:0c:
ee:31:8a:6f:a2:ab:74:2c:48:dd:a7:a6:c9:5d:f9:
97:8b:98:42:c0:4f:4f:d6:05:b9:5b:e2:a0:c1:00:
fd:a3:77:91:08:d5:49:ad:8b:27:32:99:90:3b:5c:
69:a6:86:f0:71:a2:e4:a0:2d:45:c2:02:72:29:c5:
9c:a3:29:2b:24:a3:00:46:65:a4:d2:ca:01:0a:32:
87:b1:03:d7:42:df:40:6d:69:b1:a8:57:60:e9:d9:
93:4b:40:04:aa:b3:d8:43:8c:2c:d9:9d:a1:2a:5e:
e2:d9:33:b7:4f:e0:77:9f:e0:6e:08:7c:be:dd:4c:
4f:79:e3:5b:f2:3c:43:02:71:c8:ef:90:93:36:f6:
c0:e4:fe:39:19:09:a5:06:04:ec:fb:73:44:54:75:
a0:04:7b:6b:4d:03:28:df:aa:0b:6f:2a:5d:d0:f9:
1e:14:0c:f3:99:c7:43:0f:8a:e9:89:70:be:d4:60:
4f:d4:1f:c1:2a:8c:89:9a:4b:d8:2a:b7:78:37:73:
57:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:84:53:7B:F6:DC:24:61:B2:E4:4F:B5:5F:9A:FE:36:F5:D3:34:1A
X509v3 Authority Key Identifier:
keyid:FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:7b:c3:12:68:fa:a7:03:36:04:4d:0b:81:1b:95:15:7d:9e:
2b:74:fe:20:c6:60:c8:64:0e:41:b2:d1:84:dc:47:c1:70:32:
c1:59:9e:04:7f:0f:72:29:c5:ee:d5:95:c9:2d:52:db:e1:0c:
1a:26:3b:7a:f9:2b:24:37:06:5c:08:71:47:5d:84:93:bb:bc:
14:fb:b0:9b:d4:cd:e3:09:a6:95:75:14:74:50:de:ab:65:04:
b0:29:1a:d2:a3:b4:2c:97:e4:65:f6:06:b7:5a:a6:91:94:1a:
af:f3:51:fe:97:28:31:9d:93:4a:6a:4f:41:51:a7:b7:77:3b:
25:81:0f:b1:2c:f9:8e:2a:13:1c:bd:31:57:0a:8b:e4:91:88:
23:14:20:62:06:e5:bd:85:e4:bd:07:36:bb:eb:12:67:74:19:
25:8a:9f:c2:eb:c5:2c:14:49:6d:18:34:ba:ff:fa:c2:7e:90:
55:e9:a7:7f:a2:f6:6d:f9:e5:68:db:62:7f:97:1b:8e:c7:39:
5b:7b:96:2d:1a:a4:d6:e6:10:46:f9:b2:26:2f:da:77:6a:5c:
bb:f3:3b:0d:c8:31:b9:65:24:ef:51:81:22:30:ba:c8:f0:c0:
7c:e1:67:d7:db:22:46:8d:a8:06:c6:85:6f:96:cb:62:cc:1b:
b2:8a:64:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:21 2025 by rpki-client