Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
File: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft (raw, json)
Hash identifier: IFMIqfvr7iV5XLtGYn6I1SNOmIxFAZLx6bxX0PcH960=
Subject key identifier: 45:08:B6:C7:79:86:D1:85:FD:3E:16:24:04:CC:50:C4:B9:6C:50:E1
Authority key identifier: 9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
Certificate issuer: /CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Certificate serial: 0198D5BBF311FAB952BDEFF5E4592F5F9CE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
Manifest number: 04F0
Signing time: Sat 23 Aug 2025 07:02:01 +0000
Manifest this update: Sat 23 Aug 2025 07:02:01 +0000
Manifest next update: Sun 24 Aug 2025 07:02:01 +0000
Files and hashes: 1: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl (hash: PhcTBU9YJlcm2qoZRJa5hZUHwg2Akg3njx9Vy7nME9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f3:11:fa:b9:52:bd:ef:f5:e4:59:2f:5f:9c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Validity
Not Before: Aug 23 07:02:01 2025 GMT
Not After : Aug 24 07:02:01 2025 GMT
Subject: CN=4508b6c77986d185fd3e162404cc50c4b96c50e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:59:01:b0:4c:0c:ea:a3:9a:dc:40:cf:6b:a2:
0d:f0:e1:38:59:07:9e:85:1a:70:27:b8:6b:ba:59:
d3:98:02:93:e5:00:54:d3:fd:29:82:c6:d9:46:e5:
13:15:39:65:b0:b3:88:8c:f1:87:86:94:51:23:00:
39:3e:76:3f:cd:4f:b1:8a:a4:84:84:6a:6e:aa:40:
f6:bd:4c:4c:ee:05:94:bd:12:25:7b:60:cb:50:f4:
5a:03:a3:66:ea:45:ca:09:c7:af:07:74:d1:13:d0:
08:e4:c0:a3:cf:f3:eb:8b:9c:b6:7e:35:9f:f7:01:
ad:e5:8b:81:ae:70:b7:b8:b6:3a:90:ff:3b:d8:16:
9a:7a:b2:85:26:63:cb:8b:e3:21:c6:7f:1e:e2:68:
a5:f8:aa:a0:f6:15:0a:50:2f:b8:3a:8a:cc:0a:24:
68:8f:5c:25:58:32:d3:a8:80:a5:30:5b:6e:04:27:
98:81:8e:5b:0a:ea:db:c8:50:dc:a5:dd:9e:bb:29:
6d:2c:d9:3e:8e:c4:a7:e0:98:74:16:ae:26:64:e9:
17:c2:c1:7e:5f:c3:e1:9a:14:d9:53:76:9f:97:c3:
72:88:4f:01:dc:46:e9:c6:60:85:d5:80:20:d4:92:
99:1c:85:e3:ea:11:6b:8f:ac:cf:0d:29:3e:54:b7:
93:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:08:B6:C7:79:86:D1:85:FD:3E:16:24:04:CC:50:C4:B9:6C:50:E1
X509v3 Authority Key Identifier:
keyid:9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4d:69:2d:b6:8e:04:89:e0:ae:f0:43:3b:22:15:42:96:53:
a9:02:a2:3c:7f:6d:ef:58:69:53:95:f0:85:2c:79:5d:e2:ec:
42:70:79:d6:ae:ae:23:93:6c:57:88:5c:ce:21:c8:70:2d:81:
07:f6:24:80:2f:14:ab:04:81:b3:a6:5b:99:84:1a:21:22:65:
0f:38:30:ce:e9:f3:5b:be:5e:c1:f8:87:3c:be:b6:e3:e4:89:
68:8b:0d:8a:a4:8d:56:7a:6b:17:30:46:4b:65:ea:60:b2:aa:
03:dc:38:6d:ca:45:8f:28:c8:5c:b0:55:a1:50:bb:4a:88:c3:
ab:d7:db:e9:9e:d8:fc:65:ff:4e:39:27:5f:06:45:b7:4f:3b:
cd:e0:78:62:d6:52:cb:ca:04:ff:3b:c4:c2:f1:f6:56:08:76:
72:0a:01:9a:81:2b:a9:0e:bf:ec:31:e4:6e:55:87:94:8d:57:
4c:40:41:ac:5f:ad:11:97:cd:45:c9:86:92:fb:b9:b9:73:6b:
a5:ac:1a:47:1a:45:6c:f0:06:47:3b:0f:70:2a:5f:db:99:7e:
fb:5d:a5:7a:07:5f:55:4b:3b:71:78:39:bc:b1:8e:fb:13:c0:
ea:2e:eb:b2:79:25:28:5d:0a:68:ce:0c:c7:2e:f1:6e:bb:cc:
27:02:b5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:05 2025 by rpki-client