Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
File: _-W67rcNfV5-7SxR09WEe7NhtFU.mft (raw, json)
Hash identifier: nU19b5E+Rw5cTkbo5ahZe3kQNhnOJU9kQj1PKkTYdtw=
Subject key identifier: F9:7A:10:FE:21:39:D5:27:3F:28:9F:67:70:F1:9C:CA:62:00:A0:AA
Authority key identifier: FF:E5:BA:EE:B7:0D:7D:5E:7E:ED:2C:51:D3:D5:84:7B:B3:61:B4:55
Certificate issuer: /CN=ffe5baeeb70d7d5e7eed2c51d3d5847bb361b455
Certificate serial: 0198D73AEEDE5C3C8FD495707F2725BC9A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-W67rcNfV5-7SxR09WEe7NhtFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
Manifest number: 01C9
Signing time: Sat 23 Aug 2025 14:00:20 +0000
Manifest this update: Sat 23 Aug 2025 14:00:20 +0000
Manifest next update: Sun 24 Aug 2025 14:00:20 +0000
Files and hashes: 1: _-W67rcNfV5-7SxR09WEe7NhtFU.crl (hash: EMTDMNIkqhGBLYaPQ3Qsg/4Q8At1P0wCJmChvGDtXsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-W67rcNfV5-7SxR09WEe7NhtFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:ee:de:5c:3c:8f:d4:95:70:7f:27:25:bc:9a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe5baeeb70d7d5e7eed2c51d3d5847bb361b455
Validity
Not Before: Aug 23 14:00:20 2025 GMT
Not After : Aug 24 14:00:20 2025 GMT
Subject: CN=f97a10fe2139d5273f289f6770f19cca6200a0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:25:42:bd:e9:01:ea:23:af:c9:b6:1b:4b:a5:
5f:72:21:9f:d4:ec:24:98:64:39:5c:0b:15:6c:f3:
d7:c4:0e:47:1a:38:ab:ca:17:ef:45:ef:4e:b1:e3:
26:04:df:18:db:7f:63:e0:aa:90:b5:ac:d7:ff:95:
0e:e7:d4:1b:52:a5:40:c8:86:e6:27:4d:a7:7d:28:
06:a5:d3:08:6a:64:3a:a8:60:46:5e:cd:af:e9:85:
35:4b:86:fb:fc:0e:83:a2:10:c4:ac:15:6d:8d:12:
30:61:7b:65:0e:a5:75:e0:24:93:05:05:06:09:b7:
5d:a6:c5:83:7c:94:53:2f:be:40:41:a1:d3:9a:29:
98:2a:a3:e0:6b:8b:c1:a9:8d:c7:d3:40:11:40:1c:
fb:b0:cd:7e:a7:89:d5:69:84:50:18:8e:d7:73:f0:
84:5b:df:ff:02:67:03:29:27:10:c9:a1:ea:02:b4:
9e:67:7b:e6:1a:49:2f:1f:2a:c2:4a:04:d1:3e:ec:
74:6c:c5:f1:ff:3b:89:30:c9:70:c7:b8:ca:82:97:
a0:f8:0e:64:7b:71:cf:ac:f1:e3:e2:3a:5a:73:0f:
69:d3:2c:79:a3:88:94:e7:ba:fd:cd:bd:1e:3d:24:
23:7c:63:79:e4:ba:cd:d5:4d:0c:3f:55:9b:3c:12:
64:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7A:10:FE:21:39:D5:27:3F:28:9F:67:70:F1:9C:CA:62:00:A0:AA
X509v3 Authority Key Identifier:
keyid:FF:E5:BA:EE:B7:0D:7D:5E:7E:ED:2C:51:D3:D5:84:7B:B3:61:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-W67rcNfV5-7SxR09WEe7NhtFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6d:33:e6:fa:5e:19:55:2d:66:fa:f8:ad:d2:e5:59:00:f8:
61:89:ec:50:4e:09:16:bf:8e:b5:ff:a0:74:f4:28:b1:48:da:
33:34:4f:87:98:4a:c9:b3:b6:b5:e5:dc:d7:d6:67:88:ee:12:
01:90:df:a9:ad:48:d3:38:45:58:f4:7f:7e:98:21:4d:3b:03:
68:3b:2c:42:c2:df:7a:7a:64:87:d9:85:37:43:6e:58:41:33:
55:2e:52:ef:61:95:b8:6e:a4:27:2d:83:5b:18:0b:eb:97:e7:
df:ca:22:f6:96:66:5c:0a:e5:d0:e4:a3:8b:d8:ca:f9:e7:40:
ec:7f:cb:01:44:76:60:c1:df:e9:2c:99:63:40:9c:33:78:1f:
07:fe:91:d5:14:da:f5:a3:45:ed:47:68:2e:1e:c7:19:2c:a8:
28:80:7a:1d:78:d1:7c:80:dc:6a:ac:fb:0b:53:8d:9b:fa:8d:
86:df:5a:ef:1b:a7:d1:1b:1d:10:28:fa:b8:27:63:8d:d6:91:
ac:29:65:ab:02:db:04:c8:67:4f:57:bd:07:bd:1c:28:5e:be:
fb:fd:c1:de:3a:bd:51:01:29:9b:2a:6f:84:fe:2e:a8:dd:d9:
80:27:3b:4a:4b:d0:55:8d:de:75:2b:96:b5:49:79:15:7e:56:
7f:ef:d4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:47:47 2025 by rpki-client