Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
File: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json)
Hash identifier: pgidpRAhf0kZEPaFEWKMM7FNC5ryz/HO/KnnlN3a0/o=
Subject key identifier: 83:AB:1A:A3:EE:F0:1A:EC:EF:85:38:A5:CA:61:A4:3C:22:50:3D:E0
Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
Certificate issuer: /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Certificate serial: 0198D54DF4C4160413C00A4CF7C621B872E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
Manifest number: 121B
Signing time: Sat 23 Aug 2025 05:01:52 +0000
Manifest this update: Sat 23 Aug 2025 05:01:52 +0000
Manifest next update: Sun 24 Aug 2025 05:01:52 +0000
Files and hashes: 1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: vd4THnwnkkJVNauZiNPmoN2TpN4H9btxTBXfykJMyz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f4:c4:16:04:13:c0:0a:4c:f7:c6:21:b8:72:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Validity
Not Before: Aug 23 05:01:52 2025 GMT
Not After : Aug 24 05:01:52 2025 GMT
Subject: CN=83ab1aa3eef01aecef8538a5ca61a43c22503de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6f:26:9f:e1:e1:65:6a:ba:85:32:33:27:6a:
b6:ba:c8:03:08:7d:c5:f7:af:eb:5b:29:72:af:75:
35:9d:d9:4f:44:7a:55:e1:75:b7:97:7a:31:76:c4:
ba:36:eb:20:73:85:4b:84:18:19:68:e2:cc:d6:c7:
9b:ea:c0:67:70:03:6c:d5:08:1e:30:8b:2d:18:51:
a9:d8:32:6a:24:6f:7b:d4:35:fb:6d:eb:1f:96:fd:
2c:35:16:98:1b:ec:1b:37:c1:67:d1:e6:3b:5a:5b:
7e:82:a9:6d:1f:79:58:37:b0:95:cb:be:dd:a0:5f:
99:8a:00:8a:69:10:e6:b8:9f:1b:1e:d6:c7:ec:bd:
79:d2:2d:ee:22:17:36:65:63:0b:01:c2:3c:0e:63:
d8:73:2a:19:81:4f:c1:e5:70:aa:74:37:c9:73:be:
bb:16:52:7d:26:2c:f1:f2:1c:2c:3d:21:3f:d9:c0:
16:bc:57:f6:dc:86:45:a6:84:f5:76:8d:2e:0d:b0:
c5:dc:68:f3:3f:7a:e0:8f:23:29:d6:7a:b4:c0:08:
c1:aa:34:fb:f9:bb:7e:0f:69:3a:ae:68:e8:ac:4c:
1e:1a:19:90:10:ce:42:74:11:ec:2d:d1:20:0f:2f:
cc:c9:da:d5:8d:78:78:cd:27:04:20:da:c6:98:e5:
31:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AB:1A:A3:EE:F0:1A:EC:EF:85:38:A5:CA:61:A4:3C:22:50:3D:E0
X509v3 Authority Key Identifier:
keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f9:be:48:25:de:b2:e5:99:f3:92:fd:6a:72:11:84:aa:b2:
c6:33:1a:10:f7:e7:87:85:43:69:48:b8:54:0d:19:7d:79:81:
63:50:6b:9c:dc:85:20:8b:3a:e8:59:c2:de:46:df:8d:e7:90:
c2:df:4c:46:96:4f:79:82:b4:b7:5d:23:b6:78:6d:44:0e:91:
7b:7b:94:41:48:aa:ba:14:fe:fa:fe:85:b3:18:d1:72:0b:0b:
9a:27:6a:96:73:59:a9:d9:68:b9:f8:4d:5b:8c:f1:6f:8d:18:
63:03:af:fd:05:39:e1:92:5a:b8:82:8f:14:f2:a6:8a:23:21:
7c:df:66:30:a6:70:7b:5a:68:b8:a1:4d:ae:ef:d8:65:35:7d:
4a:27:18:9d:1f:e0:42:6b:b6:31:72:4b:cd:85:58:74:e2:69:
66:af:a5:9e:1b:d1:34:e3:d4:31:07:0b:cd:1b:28:8c:3e:d8:
47:7f:97:76:ac:ec:00:46:b6:09:30:93:11:6b:9a:74:6c:b0:
a9:59:0e:ee:61:6e:f6:90:aa:37:0f:84:f7:7a:6b:55:04:6d:
ca:14:1a:b5:bb:50:af:aa:ab:75:0a:ee:b6:32:c9:6a:c5:ad:
3d:b3:a8:ff:1c:02:52:e8:f7:cd:26:80:33:1c:a1:f4:e5:c6:
fd:b0:e6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:46 2025 by rpki-client