Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
File: 9bulXh8L-GE-qbu-KXooGzyDgYA.mft (raw, json)
Hash identifier: Q/Y+bH2VpwOrtBK3urswzaY0LKBeF0hrd18ouS5Or9Y=
Subject key identifier: DC:5E:9E:93:5E:D0:49:64:61:83:2F:41:DD:E7:AA:BF:FD:84:E9:C1
Authority key identifier: F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
Certificate issuer: /CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Certificate serial: 01988B0F332F9B2D781F7C3C27EAB4B8847D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 19:01:25 +0000
Manifest this update: Fri 08 Aug 2025 19:01:25 +0000
Manifest next update: Sat 09 Aug 2025 19:01:25 +0000
Files and hashes: 1: 9bulXh8L-GE-qbu-KXooGzyDgYA.crl (hash: XMAmWGvssMt4yEAe5qU6wdb7iE2JMy9h2PTzIwfb33s=)
2: UKsojMJQKjwqEBjlQ0hvZzPL5fM.roa (hash: JwS6NOp3JTf4Gv4MdW3hpkLuh9j4F7ahSArR1W30tPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:33:2f:9b:2d:78:1f:7c:3c:27:ea:b4:b8:84:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Validity
Not Before: Aug 8 19:01:25 2025 GMT
Not After : Aug 9 19:01:25 2025 GMT
Subject: CN=dc5e9e935ed0496461832f41dde7aabffd84e9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:eb:c9:f8:de:d8:72:55:c8:f5:7b:0a:33:
d1:45:5c:87:d2:94:5c:00:72:99:1f:71:a2:ae:13:
5d:00:da:4c:1f:b4:c2:5b:fd:50:5b:b1:f6:d0:a6:
98:28:74:8c:99:8b:65:47:e9:57:21:21:d1:13:db:
1e:0b:ad:e1:bc:82:79:ef:d4:2f:90:06:30:f5:18:
6d:61:b7:3f:6f:e6:f8:ea:50:ed:3b:81:06:03:12:
da:4c:c4:cd:fd:aa:73:a6:86:e2:b8:b4:b6:27:c3:
b7:43:14:af:d6:84:a2:f8:61:c2:40:be:b7:84:c6:
1d:2f:15:a6:de:87:a0:3d:85:23:4e:3d:8c:eb:81:
28:76:b6:43:04:88:8e:81:da:21:45:68:02:b6:1d:
f1:27:91:3d:16:20:a4:a8:29:49:11:b8:6e:66:7f:
00:af:cd:9b:a1:cb:54:26:89:09:af:a1:3b:d5:dc:
34:04:17:11:f4:e2:02:6a:d9:a6:9d:35:74:85:cb:
52:70:ff:7b:3e:4b:bc:b4:ef:33:80:bb:71:dd:fb:
f9:0b:45:ea:9f:6a:27:9c:36:1b:65:94:15:8a:40:
fd:6d:b7:1c:20:dd:f4:f2:12:b7:e9:5e:ae:bc:0e:
82:30:78:e8:d5:b0:98:ae:27:a4:9f:38:ea:f5:c7:
15:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5E:9E:93:5E:D0:49:64:61:83:2F:41:DD:E7:AA:BF:FD:84:E9:C1
X509v3 Authority Key Identifier:
keyid:F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:62:73:38:16:d8:53:d9:98:81:82:bc:c5:79:d8:79:5e:20:
4f:00:99:cc:e9:6e:04:8b:67:59:b7:d9:fb:76:0f:7f:e6:3f:
84:a9:ea:9e:20:c7:7a:30:ed:b8:e2:1c:f2:90:8d:49:02:5d:
c0:d8:c1:2c:b5:c9:81:72:89:d4:47:68:27:ee:2e:9c:f2:84:
50:cb:22:d2:9d:e9:f8:97:a7:83:32:4f:a0:0a:eb:ee:86:8a:
1e:24:70:87:72:09:48:d4:a2:9d:74:7a:55:04:99:2c:a2:ac:
f3:ff:36:ee:2b:3d:c7:1d:17:4f:1b:8c:27:69:d1:c2:6c:6a:
96:aa:a7:6d:c6:31:16:20:a3:b8:eb:12:1a:f1:c6:8a:5b:d2:
d8:71:1d:a0:4b:8c:59:d9:3c:96:e9:cd:82:26:4d:4b:57:7a:
ad:ac:66:a6:12:e8:6b:46:d3:c3:5c:ca:89:44:c9:e8:f2:9b:
d6:8a:d1:25:47:91:59:da:6c:14:05:52:3e:72:fd:18:3a:81:
68:fe:aa:64:7e:7e:ba:53:4f:d6:d1:1d:2f:ed:d4:38:83:5c:
e5:4d:d1:88:0c:a4:1c:c2:a7:72:41:62:06:af:f3:a6:1e:f8:
a1:98:e0:df:8a:59:00:19:15:8f:4d:f0:a6:47:c1:5c:dd:da:
b8:68:8d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:36 2025 by rpki-client