Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
File: 9Y-A0jqdiu1P4xH3IiCcldqarUY.mft (raw, json)
Hash identifier: goS5G971UUTF03U19+f+kwTVD/PsOk4t+WhGAUEKkrE=
Subject key identifier: 09:C8:69:46:AD:9C:0C:75:31:AE:B7:9B:67:C6:E7:DE:38:B2:1E:D2
Authority key identifier: F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
Certificate issuer: /CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Certificate serial: 0198D5BBD91AEBA6F85A6C0E7A3E7A87FF76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
Manifest number: 0D27
Signing time: Sat 23 Aug 2025 07:01:54 +0000
Manifest this update: Sat 23 Aug 2025 07:01:54 +0000
Manifest next update: Sun 24 Aug 2025 07:01:54 +0000
Files and hashes: 1: 9Y-A0jqdiu1P4xH3IiCcldqarUY.crl (hash: dtG5OjqXH3aiLOuz00N3Vj2Nl+7FpNxsnTEKkp0fs1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d9:1a:eb:a6:f8:5a:6c:0e:7a:3e:7a:87:ff:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Validity
Not Before: Aug 23 07:01:54 2025 GMT
Not After : Aug 24 07:01:54 2025 GMT
Subject: CN=09c86946ad9c0c7531aeb79b67c6e7de38b21ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:88:35:10:e5:3b:53:74:13:6a:0c:aa:ca:
75:39:91:b6:89:48:ad:13:88:dd:cd:92:c6:1a:cf:
ee:e2:9b:6f:fc:c3:e2:b4:53:8c:3b:26:f0:01:e9:
5a:e2:a7:e7:31:dc:d2:f3:d8:bc:f6:ec:0b:7a:43:
47:8d:2a:32:d0:1e:f4:5f:83:d5:06:fc:1c:1d:f1:
ea:21:24:c9:7f:7e:29:e7:fe:f5:3e:c8:86:0f:ac:
aa:7e:33:b5:55:cf:5f:8a:d5:a2:7e:1d:a6:10:14:
5a:2f:75:45:ac:50:63:fa:5f:04:4e:af:97:3c:39:
8d:b5:ff:4d:5b:d9:c6:d5:4b:6b:f4:cf:a6:9f:49:
4a:44:b2:f5:8a:42:4b:20:d5:6a:af:1b:d8:19:df:
28:d4:a2:36:1b:55:e6:cd:94:10:74:82:69:80:6c:
a9:0b:a2:b4:d7:b9:ce:9a:a1:ad:bf:9c:72:03:07:
15:c7:a6:36:b6:23:ec:1e:dd:67:f7:29:ee:0f:8e:
94:34:f6:53:3f:3f:b3:a5:06:d7:fb:d3:54:1a:87:
a3:9b:a5:73:af:2e:b8:45:c0:10:e2:ff:82:bb:d3:
da:e9:35:d8:0d:9b:d9:7d:c7:a1:cc:d1:8d:78:f3:
a7:b6:02:11:a3:82:30:9d:9e:eb:9f:50:3c:4b:5d:
0a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C8:69:46:AD:9C:0C:75:31:AE:B7:9B:67:C6:E7:DE:38:B2:1E:D2
X509v3 Authority Key Identifier:
keyid:F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:10:ff:72:0d:9e:b5:42:c5:65:f9:e5:a9:cb:7c:37:d5:ea:
c9:53:1f:6b:50:40:07:ba:4e:a0:bc:ef:a6:1a:6b:d9:0a:d3:
ca:d1:c1:10:a5:a3:d3:65:f0:43:1d:6d:82:bf:b1:a2:76:e6:
77:70:74:69:a9:16:3f:4c:ea:12:97:5e:d5:a9:0f:ba:93:d1:
f3:e1:5b:2f:da:ca:7e:a9:91:70:ff:36:82:6f:aa:0e:65:13:
e3:93:d0:05:7d:fc:15:d4:9d:6e:9c:6d:b3:11:fe:99:d4:77:
3b:c1:8f:f5:25:25:4d:4e:af:ec:ec:45:3b:6e:98:a7:9d:d1:
d4:25:d5:a0:5b:26:f9:c0:21:c2:35:c7:fe:e4:d1:db:40:a4:
af:41:48:bd:60:b4:95:c3:bf:0e:80:ac:10:10:ab:16:21:b1:
78:7c:cf:52:99:a4:88:36:43:22:4e:af:3f:6e:1f:60:5f:14:
9e:58:db:73:9c:85:3b:7f:af:f5:4b:63:a5:64:8a:d4:78:0b:
6f:70:0f:18:c1:76:a9:a1:74:5a:43:b9:cb:aa:29:f6:c8:08:
6e:65:a8:0b:6d:49:5d:76:4d:ec:cd:00:61:a1:37:3d:89:63:
54:28:07:8b:b2:52:2b:a6:2d:e5:a1:e1:e0:e1:fd:32:d6:8a:
0f:3e:a2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:59 2025 by rpki-client