
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
File: c-9b03Yu9g-njtVfVE-joFE_2EI.mft (raw, json)
Hash identifier: Nbomr6zQXNbWSOfCpb5VQH1ODAz0Hy/fkssjBg3z5V8=
Subject key identifier: 73:34:1A:7B:D6:47:0F:2C:43:06:93:69:6B:16:87:34:D4:CC:D2:69
Authority key identifier: 73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42
Certificate issuer: /CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
Certificate serial: 01987B9BDD733CB92DCCB7BD0C12F70F43C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
Manifest number: 1121
Signing time: Tue 05 Aug 2025 19:01:08 +0000
Manifest this update: Tue 05 Aug 2025 19:01:08 +0000
Manifest next update: Wed 06 Aug 2025 19:01:08 +0000
Files and hashes: 1: c-9b03Yu9g-njtVfVE-joFE_2EI.crl (hash: r2s03y34G/Nx3ozGCNztmkjZo88907jNv3xSY6emvE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:dd:73:3c:b9:2d:cc:b7:bd:0c:12:f7:0f:43:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
Validity
Not Before: Aug 5 19:01:08 2025 GMT
Not After : Aug 6 19:01:08 2025 GMT
Subject: CN=73341a7bd6470f2c430693696b168734d4ccd269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3c:55:e6:6d:04:49:b4:de:40:aa:08:5c:02:
a9:06:fa:de:e2:a9:79:fb:b6:0b:90:23:9e:99:41:
ba:89:b4:b6:bf:56:55:c1:bf:b7:23:9c:0e:40:5f:
6a:bc:c5:2e:41:88:84:a8:7b:d1:7f:28:7a:32:86:
49:d3:57:bf:66:14:d8:47:d5:19:67:bf:e9:4c:9b:
2e:4f:38:cf:76:ef:97:52:ef:6d:49:96:6e:08:d0:
4a:3b:08:07:a2:fb:44:dd:5e:d3:1e:b3:98:88:3f:
7b:c6:a5:19:6d:ee:75:1c:c6:f8:a4:f4:ef:57:34:
20:b5:77:3e:96:03:0d:49:db:cc:e7:d6:d1:37:b3:
0e:aa:f6:cd:ae:0d:ab:19:ac:55:27:68:df:0b:32:
97:a7:d6:51:c2:01:87:03:ae:40:fe:34:2b:37:23:
68:f3:b2:30:56:be:5f:ce:68:fa:b3:d0:6d:58:6a:
9a:fb:85:61:89:12:ff:a4:9d:44:6e:12:b2:7c:70:
2e:5d:3d:7a:e7:dd:2b:81:b7:ae:0d:6c:10:78:98:
01:78:97:1f:b3:af:63:8d:6c:3f:ce:91:73:42:43:
0c:ef:2a:10:48:43:a7:76:fe:c1:be:db:5d:c5:a9:
65:fb:a2:5b:51:53:e6:fe:e7:68:f2:26:35:a0:6f:
27:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:34:1A:7B:D6:47:0F:2C:43:06:93:69:6B:16:87:34:D4:CC:D2:69
X509v3 Authority Key Identifier:
keyid:73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b2:4f:4f:6b:96:8f:2e:63:a9:ff:cd:3d:3c:c6:39:77:6f:
d8:3a:81:d2:ad:d9:fe:6a:f1:7d:ec:58:86:3f:65:dd:0a:1b:
72:bf:42:9b:db:e6:60:5b:ce:46:4b:58:fa:68:02:e1:8b:b4:
0b:5f:c0:4a:f4:9b:53:be:e3:ca:cb:97:63:82:1d:13:b7:5b:
71:b8:e9:6d:26:da:75:c3:b0:8c:e4:98:3a:55:0b:c4:03:2e:
19:c1:fe:33:8b:db:9f:20:53:57:2c:91:e9:81:15:cb:66:ad:
70:21:17:96:72:8f:66:bb:b7:f3:a1:52:11:b0:e6:62:84:e4:
81:c8:2b:0b:c7:95:52:1c:31:ec:63:7d:cf:bd:ae:a5:bd:69:
eb:77:61:bb:4a:ae:fe:f1:1a:53:f9:4f:3e:c0:b2:cd:0a:37:
e2:89:86:7a:89:25:58:55:41:14:6a:2e:f8:ef:cd:82:85:6e:
77:d2:f2:f5:c0:55:cb:2a:52:5b:c0:92:fc:c9:08:ff:d8:1d:
52:b5:0e:63:82:1a:d9:d8:e9:66:1b:7f:a7:f4:80:bc:6c:69:
de:1d:60:e8:1d:2d:7f:3b:fb:ec:e4:92:52:ac:21:f5:0c:aa:
44:25:42:93:a5:35:4d:a0:ec:dd:5d:4e:a1:7f:59:da:67:a0:
16:26:19:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:00:12 2025 by rpki-client