Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
File: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft (raw, json)
Hash identifier: xF73H6A5X1jrL1eO3LTYRYFAwpKxs1LXBnjUad+SMWQ=
Subject key identifier: C3:5C:97:3D:01:CB:6E:A9:21:CA:5A:D3:41:3B:68:38:CD:00:E6:73
Authority key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
Certificate issuer: /CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Certificate serial: 0198D7A8A01552AF7CBF5E22AAD8B86BC474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 16:00:09 +0000
Manifest this update: Sat 23 Aug 2025 16:00:09 +0000
Manifest next update: Sun 24 Aug 2025 16:00:09 +0000
Files and hashes: 1: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl (hash: h+5FQJDaPk27XtIFxnKBC7tHT5+LvSqPozlPQ+uf2Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:a0:15:52:af:7c:bf:5e:22:aa:d8:b8:6b:c4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Validity
Not Before: Aug 23 16:00:09 2025 GMT
Not After : Aug 24 16:00:09 2025 GMT
Subject: CN=c35c973d01cb6ea921ca5ad3413b6838cd00e673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:75:dd:33:0c:08:27:36:79:11:ee:b2:31:
d4:06:c8:1c:71:c9:b7:d6:b7:69:05:ea:cb:cc:10:
b7:3e:c7:f5:ad:ee:2a:5c:97:84:9d:f6:98:f0:d5:
a1:a8:c9:b4:7e:c4:e4:0c:98:15:b0:e2:52:46:1c:
f7:3e:b2:12:4f:fa:29:9d:4f:11:7d:c5:8a:77:1a:
9e:f2:77:f0:44:56:d3:87:12:3c:b9:7b:f7:af:7c:
17:54:15:3d:f2:c5:75:47:55:5c:be:6e:1c:f5:a0:
dd:dc:65:32:a2:c2:1f:55:12:19:3f:ad:04:9c:cb:
9a:4d:f9:15:67:56:0a:c6:d2:8c:3e:35:bc:bf:81:
89:31:42:18:85:5d:73:43:ad:c9:4e:2b:2f:ff:62:
7e:a1:56:17:3c:fc:67:4b:d3:41:1a:55:b0:1f:a1:
81:91:86:61:2b:2a:f7:d6:a3:4b:31:e9:16:e0:6b:
b2:3c:5d:9e:b9:fc:ed:fe:26:31:ce:d6:a0:0d:d1:
1e:0b:dc:98:57:31:db:ed:c4:71:8e:ed:f1:66:9e:
6d:9d:7c:06:d2:61:81:f6:03:6d:28:ec:83:23:08:
18:04:1c:ec:c3:0c:72:0b:a5:4d:dc:41:11:e1:28:
0e:23:b8:40:e8:52:d0:f2:cd:2b:d6:af:8f:93:b9:
60:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5C:97:3D:01:CB:6E:A9:21:CA:5A:D3:41:3B:68:38:CD:00:E6:73
X509v3 Authority Key Identifier:
keyid:F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:02:91:6f:c9:ca:da:02:2e:c5:82:25:1a:9a:15:cf:30:08:
b0:30:17:48:76:47:29:37:ed:46:f8:88:06:6e:a3:7e:08:cb:
35:c9:84:ac:cb:b6:7b:04:26:5e:5f:2a:f4:f9:61:86:9c:f4:
a1:b1:13:89:79:98:89:bb:0a:98:2b:e2:4f:cc:17:ac:5c:c6:
6a:86:96:0d:dc:39:e3:cc:8e:ce:a2:1a:a3:66:7a:05:aa:b6:
34:21:9a:cc:e0:51:3a:cf:ca:87:0e:23:6f:67:98:7a:71:aa:
f4:a2:d8:b3:48:ce:a1:40:5e:fd:e2:f6:b1:8b:c1:37:bd:0d:
bc:50:0f:4b:e0:80:7a:23:77:e1:4f:3d:67:b6:bd:b0:54:c7:
9d:df:9c:0a:42:eb:eb:28:14:3c:fa:db:17:f6:9c:05:59:d2:
bf:f5:8c:a9:94:4f:f0:2d:7f:99:bb:bf:e9:05:d1:bd:a6:41:
a0:e3:b7:45:ed:ec:19:40:ef:11:c9:33:53:6b:e5:04:f9:02:
fb:02:79:07:20:2d:5b:2b:82:57:a8:eb:d5:50:f8:d9:76:40:
e4:ef:1e:01:7d:dd:6a:23:7d:39:e0:60:e6:43:60:21:c3:3c:
04:bb:3b:b0:42:cc:c7:da:d4:8a:c1:da:ca:a4:f1:2d:10:f1:
74:6e:07:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:09:24 2025 by rpki-client