Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
File: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json)
Hash identifier: +C3XC0P9w5IAiZ5IrV0vUQzT3je/l4ipb3/+6zTakyY=
Subject key identifier: BB:BF:FB:A1:7F:E4:FA:E6:A5:B0:5C:9D:BB:40:8F:0B:63:69:D4:8C
Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
Certificate issuer: /CN=f4272ac0423fb097583c6872567d84cae410c89b
Certificate serial: 01988242596C64DF682DDB22655B551CAA46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
Manifest number: 0935
Signing time: Thu 07 Aug 2025 02:00:42 +0000
Manifest this update: Thu 07 Aug 2025 02:00:42 +0000
Manifest next update: Fri 08 Aug 2025 02:00:42 +0000
Files and hashes: 1: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: KtFTJjuL/E3xhFjTqr+EtuLYNjjsU3F43zuYxBvh21k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:42:59:6c:64:df:68:2d:db:22:65:5b:55:1c:aa:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b
Validity
Not Before: Aug 7 02:00:42 2025 GMT
Not After : Aug 8 02:00:42 2025 GMT
Subject: CN=bbbffba17fe4fae6a5b05c9dbb408f0b6369d48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f0:98:3d:4b:b7:18:e4:bc:7f:b5:4b:52:e8:
5f:5b:b3:ea:f3:16:90:fe:54:0e:e8:7f:f4:0d:b2:
27:d6:30:ba:29:ef:86:e4:2d:93:74:f9:cf:62:60:
3b:f8:4c:b6:2d:0b:de:35:0a:2c:1e:0d:10:fa:30:
f2:42:8d:95:56:a8:27:c1:28:33:a6:5c:64:10:a0:
ea:2f:f0:86:69:b2:34:fa:79:7a:14:6a:2c:cf:7a:
0c:19:6e:52:0b:09:bc:b7:47:71:20:72:a3:c6:3b:
d4:51:f0:c7:d7:ed:43:3a:be:40:85:7c:a0:fe:c0:
8d:aa:16:9b:e2:b9:53:15:e7:33:dc:8b:d1:06:fd:
82:c3:8d:8b:8b:92:90:1f:b0:7b:65:fc:70:02:66:
28:e8:bd:d5:95:71:40:cb:1d:3f:66:fe:82:cf:16:
0c:3d:64:35:77:fa:34:e3:71:b0:3c:8e:4f:d9:d9:
22:3f:7f:01:db:c2:4f:9c:b1:4e:90:47:bc:e5:bb:
06:d7:b8:a8:42:78:f1:ad:5b:8b:e0:da:19:8e:56:
f4:59:6d:fd:79:d7:ad:90:90:f0:64:a8:88:3f:35:
ee:95:fe:cf:76:b6:e9:83:ed:e0:22:e0:ba:69:d3:
21:6e:68:24:be:08:96:66:c1:0d:2d:38:93:ee:f1:
30:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BF:FB:A1:7F:E4:FA:E6:A5:B0:5C:9D:BB:40:8F:0B:63:69:D4:8C
X509v3 Authority Key Identifier:
keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:06:bf:20:79:a9:8a:0b:12:d0:b1:11:7b:e9:b6:4c:e5:94:
cb:bc:6d:33:e5:96:ff:b2:bb:d2:8f:2b:95:b7:8f:86:17:40:
b8:7e:0d:c9:02:66:34:da:f8:c1:2e:11:a2:da:91:4f:bc:d8:
bf:08:0d:d6:e4:3e:49:d4:de:59:2c:b5:6e:e7:68:e7:b3:00:
12:af:94:ec:47:55:50:79:e2:1c:e4:6b:4b:e6:5f:12:a3:f4:
bc:bd:45:8c:57:39:1c:cd:33:d5:d5:1e:76:9f:7a:e4:aa:b6:
ab:e8:bc:64:d7:c0:80:ea:ff:21:91:bb:f6:51:61:31:e3:ca:
9c:8b:27:61:64:93:b5:d2:dc:7d:59:54:a9:79:4a:f9:3b:d1:
08:30:71:4d:b2:3d:ba:2f:fc:24:34:2d:c3:e3:26:67:44:c1:
04:30:a3:2f:f2:62:51:07:b0:15:4d:1a:f6:cd:88:86:6f:9d:
a8:c7:3d:3c:c4:f2:b6:0b:d3:f5:de:2b:ea:9b:27:ab:9e:da:
90:b1:7c:21:17:1b:ee:65:10:e2:d4:4a:5a:b9:7f:9b:c5:91:
f5:fb:00:78:28:d1:34:cc:57:c9:83:03:ff:b8:04:e5:80:41:
93:e2:bd:01:02:e5:af:bf:89:78:0b:cb:a0:2c:5c:3c:35:61:
1f:e6:a4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:18:17 2025 by rpki-client