Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
File: 9TK715EK8VrXBk20ptO9ZKfoJ8E.mft (raw, json)
Hash identifier: kgGPX5nvrLmZXcClvAqhGmoBd1d+YhP2DgNl4G7KBiA=
Subject key identifier: 39:F2:0F:D9:D1:47:09:67:8D:E1:31:39:AC:F0:74:1B:8E:BD:A1:69
Authority key identifier: F5:32:BB:D7:91:0A:F1:5A:D7:06:4D:B4:A6:D3:BD:64:A7:E8:27:C1
Certificate issuer: /CN=f532bbd7910af15ad7064db4a6d3bd64a7e827c1
Certificate serial: 0198D4E0EE017BCDB55EA27296135A3FE257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
Manifest number: 04D1
Signing time: Sat 23 Aug 2025 03:02:47 +0000
Manifest this update: Sat 23 Aug 2025 03:02:47 +0000
Manifest next update: Sun 24 Aug 2025 03:02:47 +0000
Files and hashes: 1: 9TK715EK8VrXBk20ptO9ZKfoJ8E.crl (hash: iEHmuyn0Mzgvbm+QKojxy+11vpKL0oOLtr5J1fZxSGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:ee:01:7b:cd:b5:5e:a2:72:96:13:5a:3f:e2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f532bbd7910af15ad7064db4a6d3bd64a7e827c1
Validity
Not Before: Aug 23 03:02:47 2025 GMT
Not After : Aug 24 03:02:47 2025 GMT
Subject: CN=39f20fd9d14709678de13139acf0741b8ebda169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d5:64:5c:ed:7c:37:0a:02:1d:a8:fc:ac:87:
79:a1:5d:d7:49:93:35:3e:76:67:f9:cc:10:6b:d3:
d2:5b:45:49:47:9f:80:0e:45:bb:79:47:38:62:66:
20:65:48:c4:16:69:b6:46:d1:e6:69:88:67:12:98:
41:9d:e0:0f:45:2b:47:e5:1b:91:4c:a4:34:97:10:
6f:d7:14:77:a1:54:95:93:51:5d:c7:f0:8a:fd:68:
7b:2a:f3:bd:61:53:df:94:2d:ba:10:d2:fe:79:bf:
66:8e:dd:da:45:df:1c:2d:fe:1b:ff:46:5b:20:58:
33:95:c3:77:3d:2f:ec:eb:d8:da:24:c5:8c:d5:c0:
ce:49:0a:51:e2:22:c6:de:39:e8:71:65:22:66:cd:
94:ed:75:62:25:4e:c7:20:8d:59:c0:3d:c6:77:29:
1b:0d:6d:73:b7:5e:75:ba:32:38:39:72:5e:4f:a3:
ac:ed:69:ba:c6:36:cb:ae:8e:25:f0:a1:c4:02:ec:
2a:1c:34:97:d2:af:6b:75:8f:4d:9e:c6:0d:e3:cb:
d1:51:12:7c:d7:7b:f6:9f:d2:ad:9d:85:24:15:7e:
70:18:fd:39:c1:9c:1c:5a:3c:82:0d:20:59:8d:c5:
d3:ea:6a:c4:ec:67:47:dc:b2:26:d0:c0:bd:d3:44:
d4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F2:0F:D9:D1:47:09:67:8D:E1:31:39:AC:F0:74:1B:8E:BD:A1:69
X509v3 Authority Key Identifier:
keyid:F5:32:BB:D7:91:0A:F1:5A:D7:06:4D:B4:A6:D3:BD:64:A7:E8:27:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b1:37:dc:fb:d1:43:39:0e:cc:2e:08:59:e7:ec:d9:dd:be:
94:2f:cc:3a:eb:dd:12:39:fc:84:13:9f:17:da:05:a1:e4:dd:
ce:73:32:e2:cb:4e:01:ad:15:55:94:03:88:93:79:55:46:71:
d6:78:a4:c1:b6:eb:bf:e0:00:55:23:32:e0:95:e5:ca:fa:a5:
13:3b:4e:60:6a:9b:80:35:1d:32:23:18:4d:6f:92:09:7e:93:
49:bf:09:6e:7f:0b:18:f0:e5:87:40:5d:12:b8:bc:0d:34:c0:
73:9b:1c:bd:86:b5:ea:f1:59:92:78:2d:0b:3c:4a:38:86:ba:
3b:e2:bd:77:97:85:36:97:cf:8f:54:34:7b:c6:fe:8c:21:41:
28:a4:b1:aa:ac:33:82:49:04:64:49:79:cc:59:22:6b:bb:ce:
be:a3:2c:94:7a:c4:6a:fd:e7:51:b1:f3:15:c2:5a:69:6a:88:
6d:24:7b:1d:9b:cd:03:35:64:76:a3:42:e2:7a:39:60:d8:bc:
e2:91:cf:5f:dd:bd:94:fb:b0:22:2f:4f:2a:fc:b8:dd:60:91:
47:7a:8f:e6:33:0e:d3:01:f6:74:63:0e:95:7f:f8:62:d7:a5:
db:d3:8a:46:cd:c1:c6:34:0f:2c:fb:20:09:69:9d:40:43:26:
64:8a:df:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:30 2025 by rpki-client