Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
File: a1a9UK-T9GN-LAfi7EAya8ZABSc.mft (raw, json)
Hash identifier: mJNfUbt32HboaWVy6Vrg8sbXL8coTTW3g8n/mcxmpdc=
Subject key identifier: 35:B8:28:32:64:6B:C7:91:A4:19:26:CD:AD:A0:76:9C:CF:82:A4:DC
Authority key identifier: 6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27
Certificate issuer: /CN=6b56bd50af93f4637e2c07e2ec40326bc6400527
Certificate serial: 0198D5BC2FF42C03344993BF73C7FE4FE349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
Manifest number: 02A6
Signing time: Sat 23 Aug 2025 07:02:16 +0000
Manifest this update: Sat 23 Aug 2025 07:02:16 +0000
Manifest next update: Sun 24 Aug 2025 07:02:16 +0000
Files and hashes: 1: a1a9UK-T9GN-LAfi7EAya8ZABSc.crl (hash: i/6yMPvSDkgGueeM2zqlf8s/lwyPEvTCGXxU9fu3Hrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:2f:f4:2c:03:34:49:93:bf:73:c7:fe:4f:e3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b56bd50af93f4637e2c07e2ec40326bc6400527
Validity
Not Before: Aug 23 07:02:16 2025 GMT
Not After : Aug 24 07:02:16 2025 GMT
Subject: CN=35b82832646bc791a41926cdada0769ccf82a4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c7:22:76:f1:d7:1e:ef:ee:5d:bf:56:b1:51:
9e:3d:40:0b:b8:0d:d6:5f:94:cd:1e:6c:c0:9a:26:
22:a0:d0:a1:9a:59:64:8c:c1:db:cf:aa:f2:d9:8b:
e4:89:08:c1:d4:04:41:86:5e:b1:d1:49:58:d6:22:
f3:6b:45:25:ef:a1:27:11:55:47:1c:f8:10:10:83:
f9:f7:6a:3f:f8:57:c4:ef:34:98:b0:24:01:12:a9:
fc:44:a3:ff:72:da:d2:cd:13:da:e6:76:38:bf:44:
fb:06:d1:d8:16:d5:3a:bb:1f:c6:14:84:ff:60:a8:
5f:45:c3:39:8a:fc:da:30:eb:f4:be:03:2f:6e:8f:
b9:2e:46:9a:32:bf:70:c3:15:63:58:fc:4d:fc:71:
7d:87:70:09:3a:b3:03:38:4e:63:c5:33:79:c0:0b:
a7:24:ad:72:b9:25:f7:2b:ea:df:ee:2e:ae:e9:c2:
21:af:f0:17:4f:1c:07:39:44:df:14:1b:c5:98:f8:
e5:71:92:49:5d:4a:6c:cb:8e:85:f6:ad:2f:52:cb:
72:93:90:91:8b:17:90:cc:38:2e:47:bb:33:23:68:
35:b0:a1:90:2a:1b:d0:33:70:13:ca:4d:60:72:cd:
56:3a:5c:2a:4a:bf:cb:72:32:31:a1:86:49:79:70:
e3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B8:28:32:64:6B:C7:91:A4:19:26:CD:AD:A0:76:9C:CF:82:A4:DC
X509v3 Authority Key Identifier:
keyid:6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4f:8b:29:97:1f:b2:6f:c3:e6:ea:26:07:3d:6a:17:24:55:
57:21:cd:c3:c3:22:2f:dc:4a:be:e5:ca:c9:5d:bd:fb:fc:6a:
fd:77:9b:88:ed:40:34:f3:48:2b:e2:69:0b:c5:23:b1:8a:13:
76:43:bc:72:1d:db:0f:c0:d3:41:d3:90:69:66:fd:b7:32:43:
55:cb:a7:61:bf:7a:aa:f9:a6:68:c9:c3:09:e9:ca:db:41:83:
bb:92:ac:3a:63:05:c0:95:df:5d:2e:5e:1f:44:03:8f:6e:12:
cc:d9:ef:41:76:20:32:ff:d9:54:24:96:54:04:ae:3e:8a:22:
58:aa:53:57:67:b7:4a:3d:62:af:93:34:82:53:53:2f:4e:80:
0e:6b:65:b0:0a:28:28:e5:b5:1f:9e:7d:db:02:bb:c2:f5:d9:
2b:01:38:f6:65:55:9b:03:0d:7a:25:ab:66:6f:9b:bb:90:f2:
bd:46:16:45:df:99:73:57:98:21:63:a9:96:00:e7:b2:ab:d9:
5e:e9:3b:98:f2:37:13:f4:b0:6b:60:12:73:2a:b4:a5:86:fd:
37:8e:e1:4e:fd:28:e9:66:97:ca:6e:5a:e1:b8:8f:6a:d8:4e:
27:1f:6c:d9:1c:ef:b6:99:83:8a:08:e1:f9:39:c6:57:7f:c7:
50:2d:1c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:32 2025 by rpki-client