Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
File: 9g8GwTqb9lKcSmvQ3uBVggVgz78.mft (raw, json)
Hash identifier: v906/PFjJ7jIPCAQ8tcrpAuNim6qxEFXO3WrAjtr/9M=
Subject key identifier: 71:A4:84:28:86:BE:97:D8:2D:57:56:C5:03:92:C8:F0:63:D2:FE:EA
Authority key identifier: F6:0F:06:C1:3A:9B:F6:52:9C:4A:6B:D0:DE:E0:55:82:05:60:CF:BF
Certificate issuer: /CN=f60f06c13a9bf6529c4a6bd0dee055820560cfbf
Certificate serial: 0198D66147F56F30180F1D9A17A3E1D23EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
Manifest number: 0123
Signing time: Sat 23 Aug 2025 10:02:36 +0000
Manifest this update: Sat 23 Aug 2025 10:02:36 +0000
Manifest next update: Sun 24 Aug 2025 10:02:36 +0000
Files and hashes: 1: 9g8GwTqb9lKcSmvQ3uBVggVgz78.crl (hash: HFiD1NTr1n40io/WQERK0DDQpQfgrOjKSspEhdkMIY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:47:f5:6f:30:18:0f:1d:9a:17:a3:e1:d2:3e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60f06c13a9bf6529c4a6bd0dee055820560cfbf
Validity
Not Before: Aug 23 10:02:36 2025 GMT
Not After : Aug 24 10:02:36 2025 GMT
Subject: CN=71a4842886be97d82d5756c50392c8f063d2feea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:34:5d:3c:78:73:8f:3b:01:4f:e2:c5:82:3f:
10:68:5a:9a:36:1b:f9:97:a7:ce:e7:51:d6:ca:51:
1f:f4:70:bc:89:6a:9c:73:47:2e:81:20:63:57:d0:
03:90:38:47:2d:95:c6:c7:4a:33:6a:45:81:4e:1a:
fe:d4:00:12:38:e6:f9:71:cd:bc:1e:10:77:e1:c7:
65:28:f5:ad:23:17:6a:bc:2d:c3:1a:31:46:30:aa:
ae:1b:bf:f1:da:f7:cb:17:ff:d1:29:18:9d:b7:2d:
8c:d2:46:af:0a:e7:0e:d9:73:8a:78:87:c7:fd:d3:
b2:45:06:c7:3a:7d:b7:f2:3c:9a:e0:73:31:5c:74:
c4:18:6e:f8:14:09:3c:2a:e5:0f:1d:b3:ce:d0:60:
dc:a4:09:f8:a4:9d:e4:f9:eb:f6:6a:6f:e5:39:52:
4e:ee:2a:2d:a0:b0:38:21:4b:11:d1:4b:0a:92:c9:
45:4c:30:8e:1a:db:36:14:65:af:b7:6c:dd:92:19:
48:57:4f:d7:f6:20:67:28:3a:f3:e9:34:4e:e6:54:
31:84:79:4d:c2:e4:03:e5:19:60:7a:74:38:1e:ee:
f5:bc:ef:2d:e5:37:b9:cb:47:ef:cf:52:a8:37:63:
76:4a:ed:ef:9d:e6:76:57:10:ab:02:af:5a:43:92:
53:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A4:84:28:86:BE:97:D8:2D:57:56:C5:03:92:C8:F0:63:D2:FE:EA
X509v3 Authority Key Identifier:
keyid:F6:0F:06:C1:3A:9B:F6:52:9C:4A:6B:D0:DE:E0:55:82:05:60:CF:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:58:03:40:4d:c9:19:b3:d1:d6:82:98:82:70:58:1f:e1:24:
06:20:67:a5:bd:31:36:ea:4c:22:47:ce:9a:1f:72:39:46:bb:
5d:52:4d:8c:c7:65:b7:09:82:09:e9:58:fc:51:08:fc:2b:73:
59:97:ec:a6:39:0a:7d:43:91:40:76:e8:87:e0:05:35:2c:6f:
b5:f1:d0:b7:84:6c:12:13:fc:8f:a0:24:6d:2f:78:ff:40:7e:
f6:13:31:68:35:78:c4:99:6e:c0:33:b1:73:a6:67:95:51:37:
9a:02:2b:f9:d8:bd:b0:0f:54:ca:04:7d:56:9b:bc:7f:65:f7:
e9:2d:98:be:0a:3c:ab:20:e5:6a:cc:b1:48:27:32:b8:73:01:
b5:e0:3f:b8:35:70:57:5a:d5:6f:49:6b:7c:64:08:5d:7d:f8:
fd:0e:76:f0:ab:2a:60:70:a8:70:29:98:31:6d:e6:5c:84:d6:
38:0d:f1:c5:cf:c7:06:8b:08:9d:41:b3:4c:f4:5b:45:f9:28:
52:f1:6f:db:d0:d1:66:75:ec:8c:fa:40:b6:d7:84:9d:8f:fe:
8f:6d:7e:65:bb:2d:a7:f4:15:12:77:d9:83:3a:81:1e:02:85:
a0:82:6b:c7:19:24:c7:6b:f1:95:07:57:5e:5f:85:cc:29:cf:
55:ad:ec:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:23:48 2025 by rpki-client