Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
File: m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft (raw, json)
Hash identifier: ArxB6R4JXVOEE2gNA/oRGKQjSKQic4kmN+IBdrUdhq8=
Subject key identifier: E9:3D:A2:BF:B6:58:AE:3D:3B:70:69:39:1E:36:97:43:EA:9A:83:D1
Authority key identifier: 9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
Certificate issuer: /CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Certificate serial: 0198D54DEFDBD1415C7C9F5A17FFCCB29167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
Manifest number: 08AF
Signing time: Sat 23 Aug 2025 05:01:51 +0000
Manifest this update: Sat 23 Aug 2025 05:01:51 +0000
Manifest next update: Sun 24 Aug 2025 05:01:51 +0000
Files and hashes: 1: m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl (hash: nn6NOgvWA9HA+F6zYKs3Mtao5S5Cr1/riwABCUAsWI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ef:db:d1:41:5c:7c:9f:5a:17:ff:cc:b2:91:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Validity
Not Before: Aug 23 05:01:51 2025 GMT
Not After : Aug 24 05:01:51 2025 GMT
Subject: CN=e93da2bfb658ae3d3b7069391e369743ea9a83d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:9a:86:84:8d:b2:00:da:5a:13:29:aa:75:
bc:fa:93:41:41:13:90:34:97:01:5d:62:64:36:dc:
ed:a0:b2:19:d3:6b:b3:43:31:77:c1:c2:27:75:3b:
4a:83:c6:90:62:e0:cf:8e:89:90:f9:e9:8e:d0:2d:
06:fa:89:7f:db:62:2c:eb:7a:4e:f4:9a:14:5c:56:
6a:d8:e3:a1:77:82:3c:78:8d:ab:31:dd:55:d0:20:
ac:95:f4:a6:cb:b6:9f:fe:88:11:4c:d6:6a:d3:ad:
ef:c7:38:fb:42:4e:89:9e:b2:a2:e4:57:a7:a4:7b:
28:98:81:8a:70:a1:ec:d0:61:86:47:3d:9c:d1:27:
db:fa:11:b5:6a:b2:c9:1d:13:0b:bf:34:b4:6d:89:
89:54:0d:66:d1:e0:18:5e:05:c0:a1:58:4f:08:db:
2b:c9:cf:5f:a0:e3:c6:4a:a9:9e:9f:47:dd:c2:2c:
10:50:9e:81:ff:75:e2:f3:7a:15:7c:a8:3b:09:39:
37:88:c3:19:6a:43:db:ca:cd:0f:82:35:73:d3:bb:
c2:ca:11:6d:20:4e:8e:2a:02:80:b3:fb:09:44:bc:
a4:35:d6:65:ca:ba:54:08:8c:df:23:4b:f2:13:ca:
6e:75:08:03:1d:a2:0d:5b:ab:36:d7:e2:74:89:54:
d4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3D:A2:BF:B6:58:AE:3D:3B:70:69:39:1E:36:97:43:EA:9A:83:D1
X509v3 Authority Key Identifier:
keyid:9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:39:3d:d1:f2:78:ec:6a:77:06:8f:4a:63:3c:f0:07:27:93:
8f:8f:f2:24:6b:4b:17:b1:2d:91:fc:81:e1:37:40:4c:2b:83:
b3:73:26:fb:f6:33:0a:6e:90:8d:cb:27:3d:2d:c6:4f:c1:c2:
15:06:a2:96:c0:cd:63:d2:d1:64:2e:27:2c:9b:a6:38:21:9a:
5f:42:e3:e6:1a:de:a3:70:2e:c0:01:4f:fa:09:3d:57:9d:10:
75:6f:8f:18:6d:47:19:07:20:c6:8d:f2:cd:9b:6d:35:f4:b4:
da:6a:e3:c0:95:1d:e0:e9:45:3b:5a:2a:11:43:34:50:24:d7:
63:fe:16:ac:6b:0b:2b:24:4a:1f:60:fc:bb:80:1a:e0:13:11:
36:0b:8a:f0:c6:c9:2f:84:92:19:19:df:28:9a:ef:1a:1e:c7:
86:e2:f8:3b:44:d9:0d:87:e2:3c:2d:97:75:ae:72:8a:0e:28:
dc:e9:d4:15:d6:e0:98:07:d8:de:22:71:47:78:9f:94:ef:76:
12:6d:0d:a8:6a:b7:89:e3:5b:46:a8:e3:50:16:a8:71:eb:8e:
4e:2e:25:93:40:b5:ee:ca:86:e4:ea:64:26:a2:77:1d:94:3b:
fc:43:4d:41:35:d4:ef:1c:6e:e2:4f:24:ba:13:a2:65:58:c7:
4a:13:ca:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:22 2025 by rpki-client