
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
File: v9P33PxgiR_DiPpcHb118nuVGeI.mft (raw, json)
Hash identifier: 67Tpv7qRqc05aoCQrdpzKATtfT6Ak3iqDMNW2NtylDo=
Subject key identifier: EF:EF:05:43:F1:9D:D0:83:D6:18:CD:9F:74:60:54:E7:F6:E4:69:2E
Authority key identifier: BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
Certificate issuer: /CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Certificate serial: 01987B9D576A00E8B7081A7E8157F3982F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 19:02:45 +0000
Manifest this update: Tue 05 Aug 2025 19:02:45 +0000
Manifest next update: Wed 06 Aug 2025 19:02:45 +0000
Files and hashes: 1: v9P33PxgiR_DiPpcHb118nuVGeI.crl (hash: BBjP3oA9QIa5qkt/g7eKleGHgA4EKjrTjJtnyas3J1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:57:6a:00:e8:b7:08:1a:7e:81:57:f3:98:2f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Validity
Not Before: Aug 5 19:02:45 2025 GMT
Not After : Aug 6 19:02:45 2025 GMT
Subject: CN=efef0543f19dd083d618cd9f746054e7f6e4692e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:56:e5:ed:67:92:11:b0:06:5e:ed:85:41:
c9:bd:5f:bf:8f:1d:97:06:f9:33:10:4b:a9:9d:8c:
e8:04:15:71:00:31:ae:05:4d:71:f0:54:87:1e:c2:
89:d1:d0:b9:9a:87:45:ee:3b:2e:79:0a:d6:d5:75:
39:2e:78:28:e2:3c:47:6e:94:cb:07:93:89:48:35:
01:48:65:71:6a:70:ad:a7:d0:26:52:ef:c0:02:eb:
fc:74:cc:73:82:ee:73:3b:bf:e0:e6:c0:4a:39:3c:
cf:d0:52:74:ed:35:99:73:3a:76:50:36:17:6c:a0:
fd:e7:4b:59:95:ca:e9:52:fd:5e:69:74:1a:8c:e8:
07:6c:96:13:6b:25:f6:db:f3:cd:d4:d8:c8:26:7b:
0b:c9:54:f5:6b:db:da:94:bb:7a:68:56:be:ea:5d:
85:37:07:c7:cc:34:db:2e:6f:e7:44:33:77:d4:9e:
21:4e:97:2b:29:d8:8b:ce:d6:59:1f:5f:73:08:53:
90:f7:57:8a:b0:fb:46:c3:5d:af:90:d5:15:db:c6:
07:7f:41:2f:74:25:df:5d:a9:71:b6:6b:d5:00:be:
54:9d:32:93:38:db:23:56:fe:10:8b:15:7f:b6:20:
18:09:85:e4:18:62:e7:8c:5c:e5:55:db:13:7f:52:
e2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EF:05:43:F1:9D:D0:83:D6:18:CD:9F:74:60:54:E7:F6:E4:69:2E
X509v3 Authority Key Identifier:
keyid:BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:67:c5:0d:22:be:99:62:23:90:2f:09:21:68:c7:72:2c:1b:
94:f5:e7:f2:ad:ff:9a:08:34:bc:75:c7:1a:34:1d:aa:68:ee:
b3:4b:c2:8c:a6:4f:e0:0d:fe:39:54:32:07:3d:03:4f:ec:a3:
99:99:ce:7d:35:b5:76:71:7f:c6:35:95:2b:40:e6:ff:cf:61:
3e:f5:c1:25:44:26:d0:4d:c3:60:b3:ce:c0:4e:2c:c2:2e:a0:
73:6a:cc:ea:f7:f0:df:83:d5:cc:e2:0a:2e:0f:56:74:20:0d:
cd:5e:a9:3f:8b:59:da:87:c0:8f:96:cc:31:48:c3:39:ab:d5:
c4:2a:cb:82:54:30:6b:24:54:87:eb:9b:7a:d7:35:ca:4e:e3:
2d:59:56:c7:89:98:1c:c8:01:66:73:78:95:c9:b8:8d:4b:45:
a3:63:aa:fb:32:58:e7:c5:6f:0f:aa:18:05:6a:3e:b0:0f:9e:
21:d2:e0:e2:3f:04:75:e6:1a:fe:a7:63:a4:a6:fb:da:73:8d:
44:79:0b:76:94:67:f8:33:0c:a3:4b:f2:fd:2a:0c:aa:2f:2c:
86:be:dd:e1:68:b1:11:10:36:e5:71:fb:3d:4f:bc:74:12:db:
b8:c6:2a:57:be:e2:47:70:4d:49:33:8c:aa:6a:10:7c:b2:cf:
6e:14:23:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:18:45 2025 by rpki-client