Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
File: B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft (raw, json)
Hash identifier: vqhLhREGwR+DWmATuWWZPNrHEEykiMpN8iF7wLPXx/8=
Subject key identifier: 92:C8:AD:F0:66:3D:0C:A6:D5:0E:BF:A1:AD:F7:3F:9C:AF:7A:FE:D6
Authority key identifier: 07:D4:7B:21:CC:3B:A2:9C:C8:F8:A9:35:4F:33:7F:2D:5C:30:21:54
Certificate issuer: /CN=07d47b21cc3ba29cc8f8a9354f337f2d5c302154
Certificate serial: 01989D4C2DF6EBD85719E975E9979B1886F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
Manifest number: 162A
Signing time: Tue 12 Aug 2025 08:01:12 +0000
Manifest this update: Tue 12 Aug 2025 08:01:12 +0000
Manifest next update: Wed 13 Aug 2025 08:01:12 +0000
Files and hashes: 1: B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl (hash: wv2XJmHL1k83k09LI9T3YwPy1He6p5BO5w7GS4/Pmc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:4c:2d:f6:eb:d8:57:19:e9:75:e9:97:9b:18:86:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d47b21cc3ba29cc8f8a9354f337f2d5c302154
Validity
Not Before: Aug 12 08:01:12 2025 GMT
Not After : Aug 13 08:01:12 2025 GMT
Subject: CN=92c8adf0663d0ca6d50ebfa1adf73f9caf7afed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6a:59:23:ac:ad:09:7c:54:38:1c:64:af:e4:
84:d1:4c:36:88:78:c8:df:66:51:d0:c1:2c:24:2a:
26:04:96:ee:6a:ca:1f:dd:6a:59:9e:33:9d:c2:71:
c4:1e:80:4c:02:aa:05:3c:dd:fc:bd:83:fe:df:1d:
46:b4:e4:c9:32:a1:43:fa:89:59:1b:55:37:35:35:
0e:d4:92:0a:64:d9:04:28:93:50:fa:f3:1f:7f:5b:
a0:1e:f6:91:b0:f7:df:d8:ed:e9:69:4f:64:fc:a1:
32:48:c8:49:a6:16:eb:19:8b:95:20:c5:70:79:31:
70:8e:86:50:f6:11:1a:57:32:29:46:d0:07:c1:03:
15:7b:99:da:8f:c8:5a:73:a0:f6:21:0b:d5:d3:65:
33:6a:89:bc:03:60:49:6c:f3:3c:22:45:68:fa:04:
c7:d2:f2:d8:ac:b9:e3:5e:da:a7:7b:1c:5b:77:31:
aa:4d:c2:be:8f:60:57:c8:ed:58:07:d6:79:77:59:
e5:63:3e:d9:0b:1e:92:80:2f:46:30:31:ef:cd:4e:
2f:b1:90:be:d6:26:57:de:9f:a2:c7:29:6c:ab:ad:
09:1e:83:f5:a9:a6:cf:0f:25:00:e5:1f:7c:6d:2d:
a3:82:4e:89:84:95:95:08:ba:89:3a:05:07:a7:be:
a4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C8:AD:F0:66:3D:0C:A6:D5:0E:BF:A1:AD:F7:3F:9C:AF:7A:FE:D6
X509v3 Authority Key Identifier:
keyid:07:D4:7B:21:CC:3B:A2:9C:C8:F8:A9:35:4F:33:7F:2D:5C:30:21:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:aa:e2:ec:36:eb:c4:a5:0f:b0:d0:4a:51:fa:41:4e:73:15:
26:27:ca:c5:1d:c6:94:22:2e:3d:c5:c3:75:0b:4e:ee:00:13:
8c:99:80:ed:41:7d:8f:1f:64:82:52:3d:3a:7e:f0:57:48:d1:
72:ab:81:05:5a:79:36:b1:07:c3:42:7e:de:cb:8d:24:e9:6c:
46:1d:01:4c:10:a1:43:8f:d9:fa:21:e8:4d:f6:bd:34:81:39:
e7:ab:80:2d:6e:10:38:0a:eb:4b:d8:d3:78:4e:57:bd:ec:79:
89:a4:d0:8b:58:0a:88:3a:32:46:97:74:3a:06:9e:9d:51:80:
23:55:96:b7:69:24:05:b2:06:11:47:d1:ea:5d:f2:a2:53:48:
a1:79:d4:39:65:fd:a9:ab:18:1c:81:f6:57:37:4a:8a:da:36:
af:de:82:5e:92:35:6a:b6:c6:c9:4a:b5:0e:43:7c:f5:36:4a:
76:8d:3c:8d:c9:50:85:bc:f0:ca:09:c9:a3:da:5b:ea:a5:7e:
0c:2f:53:8b:6a:c8:bc:0f:30:bd:e7:19:fb:32:0c:b1:b1:12:
1d:e1:e4:9c:18:c8:97:31:6c:96:a0:e3:09:0d:a9:f5:69:0f:
cd:55:16:e6:be:2a:8f:ec:68:47:c9:79:92:76:64:cf:0c:5f:
ed:21:cb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:48:51 2025 by rpki-client