Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
File: 9yR1sGTeionxUD6u_H1yrczzihY.mft (raw, json)
Hash identifier: Z9Bne/MvyScnMrXT/v6GtCmrIbJQWTocMCZFgvZpZG8=
Subject key identifier: EE:9B:47:C1:8E:71:B2:10:24:65:26:3F:EF:14:F4:CD:81:9F:ED:31
Authority key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
Certificate issuer: /CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Certificate serial: 019897EF11F50CAAFF83D5AF79BC695D109E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
Manifest number: 1625
Signing time: Mon 11 Aug 2025 07:01:23 +0000
Manifest this update: Mon 11 Aug 2025 07:01:23 +0000
Manifest next update: Tue 12 Aug 2025 07:01:23 +0000
Files and hashes: 1: 9yR1sGTeionxUD6u_H1yrczzihY.crl (hash: uzRLzIiuSpi5bxs1/fhL9gHAD/7IkjZArlZTrcKW6UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ef:11:f5:0c:aa:ff:83:d5:af:79:bc:69:5d:10:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Validity
Not Before: Aug 11 07:01:23 2025 GMT
Not After : Aug 12 07:01:23 2025 GMT
Subject: CN=ee9b47c18e71b2102465263fef14f4cd819fed31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:cc:ef:30:1c:f0:f7:fb:75:83:e7:b8:68:
04:23:ae:e3:ed:02:52:24:6c:7d:9d:72:0a:40:a2:
1f:53:aa:72:18:ba:b1:fd:0d:d0:34:f2:62:58:07:
d7:62:03:35:79:0b:42:fd:fd:3b:08:08:b8:87:00:
f8:9c:f2:3a:df:1f:64:a6:0b:2c:58:3b:5b:cd:2f:
51:da:e9:7e:a2:ec:61:fc:7d:4b:c2:a0:36:2a:f7:
57:6f:e5:32:7e:fc:88:5a:ff:87:c9:15:40:ce:f1:
6e:27:0d:a9:ce:06:ca:61:e0:0a:a2:92:19:ad:76:
e5:d9:9a:b9:28:85:9a:ca:70:e3:68:5f:69:1c:cc:
86:ae:9d:7d:60:90:55:3a:38:91:78:72:3c:41:23:
0d:e5:53:15:21:b1:94:e0:2b:fb:9c:a8:cc:cc:da:
35:cb:10:c3:61:09:6c:ba:4d:15:31:15:20:74:48:
ec:4c:77:e6:0a:c3:75:e6:cf:eb:d5:45:ac:b3:42:
56:45:a1:98:82:d6:85:09:39:32:8a:20:29:ab:3c:
4d:3a:98:51:a4:db:d5:25:af:08:bf:b2:e1:8d:ea:
f8:36:b7:2b:19:0c:34:2f:c5:28:b9:94:93:68:65:
0d:c3:0a:80:ae:be:e0:1b:b6:f2:e0:0d:e8:dd:fd:
3b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9B:47:C1:8E:71:B2:10:24:65:26:3F:EF:14:F4:CD:81:9F:ED:31
X509v3 Authority Key Identifier:
keyid:F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:12:67:d7:a0:32:97:6a:66:33:5a:3b:2a:71:48:9e:c7:c0:
e3:7f:e5:4d:b2:a8:c8:15:a9:51:f6:14:f0:40:28:76:21:61:
05:c5:e3:a5:b1:8e:ab:52:1b:3d:3b:ef:22:1d:82:45:24:24:
a3:f4:e2:ce:6b:9a:cb:be:3a:d8:e5:59:78:87:1b:dd:da:98:
bd:01:49:4c:eb:59:14:80:2c:91:10:6f:9f:11:51:fb:b6:88:
65:d9:cd:6c:5c:64:49:9a:ad:d9:ac:73:db:68:94:9c:0c:80:
0e:cc:b8:c9:a0:ca:35:7a:42:c4:6b:35:8a:50:72:dd:a1:65:
1d:e3:06:86:d8:f9:cc:fe:db:26:20:e8:1a:ef:af:4b:10:b2:
04:de:f5:3f:10:b8:32:21:db:3a:a2:05:9e:bd:ae:b1:7e:a0:
80:f9:57:bd:ad:01:f0:3a:6a:03:73:de:d1:9a:c1:13:5d:fd:
c9:a0:3d:d8:a5:06:a4:fe:5b:44:10:ec:19:a9:ab:35:f1:9d:
be:7f:42:e4:59:5a:05:f9:45:97:d4:f2:18:35:0d:52:17:4c:
03:a9:fa:d2:61:65:7f:14:3a:a8:46:e2:09:80:d0:b8:48:a5:
fc:4f:3b:b3:2c:ea:1b:bf:20:b0:35:a0:ee:81:7e:fc:cf:38:
d4:3c:95:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:51:14 2025 by rpki-client