Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
File: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft (raw, json)
Hash identifier: azt766ybT0xHLdCMC5aQYSlTEITaHVEVHYqGbYJDJ0k=
Subject key identifier: 90:A5:85:14:F8:7D:F8:ED:CD:2C:0E:8C:88:16:E7:9E:05:4E:FC:26
Authority key identifier: B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36
Certificate issuer: /CN=b7d296d69059457be39c3c82466aceed02766836
Certificate serial: 019895251A7BCD0F7C28FDC0CE649FE86C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
Manifest number: 071A
Signing time: Sun 10 Aug 2025 18:01:33 +0000
Manifest this update: Sun 10 Aug 2025 18:01:33 +0000
Manifest next update: Mon 11 Aug 2025 18:01:33 +0000
Files and hashes: 1: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl (hash: vrUjEJuIrRAhfFrSVBaZb7Fc1rUjWLp7elinGhQztB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 18:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:25:1a:7b:cd:0f:7c:28:fd:c0:ce:64:9f:e8:6c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7d296d69059457be39c3c82466aceed02766836
Validity
Not Before: Aug 10 18:01:33 2025 GMT
Not After : Aug 11 18:01:33 2025 GMT
Subject: CN=90a58514f87df8edcd2c0e8c8816e79e054efc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:34:e4:94:1c:69:65:6d:f6:e5:32:ef:84:
79:f5:32:7b:6d:ce:4b:15:0a:ca:49:d2:36:69:6f:
6a:c1:87:cc:b1:ba:da:87:75:d8:a6:fb:35:0e:47:
55:ad:3e:bd:c3:ce:51:26:be:d6:0a:d6:ed:33:36:
90:a4:33:22:d1:a2:cc:f6:cd:20:01:d9:2f:be:4d:
86:51:0a:85:d0:24:cd:31:1e:8d:54:6b:f9:52:c2:
dd:c6:66:9c:02:93:f9:9e:36:8d:f6:7d:14:a2:ff:
63:bd:be:57:e2:27:ba:9d:dd:ea:35:bb:d4:3f:ea:
81:e8:bf:cb:aa:47:51:47:42:41:4f:e8:91:67:c7:
1a:28:84:12:c1:34:db:ae:cd:e9:70:0d:63:42:f7:
8d:73:9e:18:78:82:51:7f:46:e1:a9:5f:15:47:d6:
13:ce:76:86:a1:f6:3d:b7:82:fa:1b:c7:68:73:4e:
fb:5e:17:a3:1c:d3:c0:9b:3d:bd:ef:9b:02:5b:90:
24:5b:43:5e:15:b2:d3:f3:6c:01:63:bf:3f:3b:c5:
aa:7f:f6:79:18:48:4a:db:50:f5:1d:95:8d:46:15:
bd:75:be:d8:63:8b:73:61:34:6e:be:80:a5:bd:bb:
8a:d1:65:3b:68:cf:97:9e:b9:77:bc:dd:5f:3e:52:
e9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A5:85:14:F8:7D:F8:ED:CD:2C:0E:8C:88:16:E7:9E:05:4E:FC:26
X509v3 Authority Key Identifier:
keyid:B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:8c:ef:86:e1:be:a6:f1:75:e1:03:c3:6d:f2:27:1c:36:6e:
0f:8b:f1:46:f8:e5:fb:d7:a0:e9:00:d5:35:da:d4:64:ff:02:
6b:61:6e:09:ba:f6:87:57:ef:6d:a4:70:1e:06:ff:f0:0a:ce:
3d:db:c0:a6:2a:3c:a3:60:e6:e5:67:8e:80:8a:10:5d:f4:be:
21:e2:01:b0:84:81:ad:0a:f3:dd:ef:e8:e9:66:9a:d1:5f:88:
53:1c:54:34:7a:13:cd:33:e6:a6:dd:0b:c0:48:6c:90:b9:d6:
62:db:7e:0d:b6:97:00:53:78:61:30:06:7b:50:7b:37:9b:22:
5b:5d:67:f0:9e:05:47:02:d6:46:b3:4d:b8:9f:73:e7:ff:3e:
2d:fd:b2:c5:18:c0:24:2f:e7:49:d3:3a:06:f4:f5:dd:49:20:
bd:07:c5:56:ed:b1:ae:d7:8c:8b:b7:5c:46:9e:8c:35:e9:50:
29:b4:2c:d4:e0:bf:ae:b3:ce:ed:36:3c:c4:2f:68:ef:87:48:
7d:f9:31:8b:fd:91:29:d8:be:7f:3d:f1:54:93:45:b5:54:fc:
36:fd:34:14:e5:c6:16:b9:61:06:b8:ac:96:fe:74:5b:c5:c9:
fb:94:53:87:9a:46:a1:e5:75:5c:8f:55:75:c0:fb:a5:08:3a:
03:24:e3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:57 2025 by rpki-client