Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
File: 9XGHM6rUPvapm9jZUEog3YkCLo8.mft (raw, json)
Hash identifier: cPBABBhVkJcxPuIInVFlnja+ZFAw4bTlAJNzc4BardU=
Subject key identifier: 42:FC:C0:94:1F:05:56:2C:DB:CF:03:9F:51:4E:08:9D:BD:06:98:E9
Authority key identifier: F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
Certificate issuer: /CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Certificate serial: 0198D5BBCDB22F1DB8575F7541B72BB7EC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
Manifest number: 1349
Signing time: Sat 23 Aug 2025 07:01:51 +0000
Manifest this update: Sat 23 Aug 2025 07:01:51 +0000
Manifest next update: Sun 24 Aug 2025 07:01:51 +0000
Files and hashes: 1: 9XGHM6rUPvapm9jZUEog3YkCLo8.crl (hash: 45opi5eYjcDFYqmIk6ZVKFDMh5PWkszqsLmPxvc3c18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:cd:b2:2f:1d:b8:57:5f:75:41:b7:2b:b7:ec:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Validity
Not Before: Aug 23 07:01:51 2025 GMT
Not After : Aug 24 07:01:51 2025 GMT
Subject: CN=42fcc0941f05562cdbcf039f514e089dbd0698e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:72:43:3a:52:16:bd:0c:dd:77:17:db:8f:
ca:97:12:38:2e:6d:cd:55:02:bb:45:38:f4:c5:02:
69:50:ec:d5:de:90:ec:9b:44:ff:f7:9b:e2:75:4a:
0a:96:eb:88:c2:b2:ed:aa:12:23:9e:01:25:16:6b:
70:f5:ec:7e:73:17:2f:a8:96:f6:81:c9:f4:4b:b4:
bd:ad:d8:1f:56:36:60:2c:40:f9:09:7d:4f:28:76:
d5:44:43:28:e5:86:ea:ea:76:69:b5:bf:74:95:c3:
76:c1:d0:71:f8:ae:6f:40:a1:87:a0:5a:08:c5:f4:
5a:d6:3b:09:7b:4e:96:9c:42:ff:ea:76:d1:b9:1e:
73:9b:63:4f:ca:66:8f:6b:4d:07:7d:44:f8:90:81:
d2:0b:f0:2a:1a:89:c7:4f:de:7e:b8:fd:1c:23:64:
c3:52:cc:4c:24:8e:a2:3c:f9:21:86:a6:dd:95:5a:
87:ed:fe:5d:89:3b:22:55:21:72:2b:88:23:11:13:
89:9d:5f:1e:ca:4f:fb:56:50:a2:96:cd:43:b8:17:
6e:fa:9a:35:29:98:42:9c:18:ad:be:42:bf:3f:34:
9a:f5:de:53:a7:eb:3e:cf:49:c9:7e:02:fd:a7:d4:
0c:ae:7c:77:37:3a:8c:6d:01:25:a6:d0:72:60:fa:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FC:C0:94:1F:05:56:2C:DB:CF:03:9F:51:4E:08:9D:BD:06:98:E9
X509v3 Authority Key Identifier:
keyid:F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f9:0f:f4:fd:91:da:1f:ab:1d:fd:3a:5e:1e:73:e0:92:98:
9f:9b:5f:94:e4:da:37:29:2e:89:c3:0b:a3:cc:c8:11:df:7f:
12:20:a7:25:9b:57:dd:f8:19:cc:c5:87:af:91:57:d3:32:d0:
62:8a:f2:93:19:9a:8f:1c:64:e3:7a:38:8e:c1:28:60:7e:25:
35:f5:97:47:c4:7c:88:21:06:94:af:79:34:a6:a8:98:a5:50:
5c:ba:f4:59:ea:7d:c4:16:c9:14:1d:c2:c6:d0:7a:42:8d:f3:
41:c7:b3:d3:2a:ae:a8:83:6d:9b:dd:e1:a3:cd:0b:fb:0a:9a:
5f:27:20:a2:d4:19:8e:96:c7:29:98:29:07:a7:ce:a7:dc:bf:
64:57:e8:74:ea:6d:e8:ff:b1:92:e6:83:5b:c3:9b:7f:ad:55:
f9:e4:4a:2a:06:9f:7e:fb:cb:14:3b:6e:0b:e0:7d:45:47:42:
4d:b9:70:40:29:28:de:61:ad:07:0b:19:d8:ea:d3:d5:71:c9:
6b:bd:2d:38:71:71:f1:e4:9c:59:89:36:3d:ee:57:4e:14:22:
d3:9c:5f:c0:5d:96:f4:3e:0e:da:67:87:6e:3f:42:5f:3e:22:
5d:ff:2a:e0:e6:93:6b:78:d8:7d:35:70:ad:f3:19:6f:a8:da:
f2:bb:15:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:53 2025 by rpki-client