Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
File: 1-c9m7XQoo55j8NJzYDf0McQao08.mft (raw, json)
Hash identifier: g8E+oGagXms2CHtAvQ5Q9bWewcKahO/r/B8/01CN6Ec=
Subject key identifier: C4:7A:A6:71:FB:1C:3C:99:FE:3D:7D:50:E3:4B:6A:0F:70:69:4A:2E
Authority key identifier: F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
Certificate issuer: /CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Certificate serial: 01988C8EEBB09380F57CF5805E1F3A973C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 02:00:33 +0000
Manifest this update: Sat 09 Aug 2025 02:00:33 +0000
Manifest next update: Sun 10 Aug 2025 02:00:33 +0000
Files and hashes: 1: 1-c9m7XQoo55j8NJzYDf0McQao08.crl (hash: Z9IoD+t23HhfIHv0YJ36h83ZSNCVa9OtGsDIKU+Ez7k=)
2: rbOZFLBJLeiBgSg-ywSTHEPc89w.roa (hash: Wz1ZKiJOk56RIdFfsa2AALc0JqTjfQEXp/iXAbjA7+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8e:eb:b0:93:80:f5:7c:f5:80:5e:1f:3a:97:3c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Validity
Not Before: Aug 9 02:00:33 2025 GMT
Not After : Aug 10 02:00:33 2025 GMT
Subject: CN=c47aa671fb1c3c99fe3d7d50e34b6a0f70694a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0f:70:90:3a:ee:7a:9f:76:e7:6c:bf:01:d8:
6d:81:68:f2:1f:3d:2d:5e:01:35:a7:2e:ab:2e:76:
b3:a7:c6:5c:55:86:b1:3a:fa:30:30:d9:a7:49:5d:
c6:8c:7a:c5:28:0b:74:2f:c1:13:cc:39:13:86:24:
a5:a5:12:5d:7b:56:34:29:a9:54:9a:62:aa:4e:9a:
3c:c7:88:54:9d:df:78:a9:c4:b5:72:41:d2:51:f4:
d7:f5:67:de:b9:ff:2f:d8:a8:e8:92:6d:84:35:4e:
ee:08:3d:05:4e:c3:d8:62:a8:5e:1e:f9:39:64:44:
33:23:76:3e:ef:15:7a:20:0c:4b:ca:d6:ec:f6:d2:
26:63:37:44:b5:be:1a:f5:df:3d:e6:5c:b3:50:9a:
39:ae:75:93:a8:51:3c:29:b3:cb:cf:c8:ef:d1:a4:
db:3e:77:fe:8f:02:2b:c2:67:c5:54:70:1f:77:04:
0b:c5:d3:57:1a:33:a6:89:98:eb:03:dd:02:e1:d4:
d5:d9:e6:c7:13:33:d2:d9:2b:76:6c:b2:92:63:5b:
4f:dd:1c:94:2e:9f:54:c0:43:4f:36:e8:c0:0b:16:
1c:9d:15:bd:5a:2a:37:d0:12:72:3a:68:b8:42:b9:
2f:1b:b8:b5:16:cd:b3:40:f2:86:db:1a:e3:0b:1c:
88:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7A:A6:71:FB:1C:3C:99:FE:3D:7D:50:E3:4B:6A:0F:70:69:4A:2E
X509v3 Authority Key Identifier:
keyid:F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:34:41:6e:8b:19:11:7a:7e:5f:36:36:1c:c6:0a:f3:b8:05:
ef:38:2b:ba:68:dd:ff:64:a7:3b:8c:b2:3e:b0:13:e9:96:5c:
ed:2d:25:5f:42:25:32:de:ca:db:95:67:00:a1:c4:22:69:d1:
86:ea:b4:c3:6f:1e:41:32:71:0c:03:9c:b7:1a:a3:b7:67:be:
e1:b5:7f:4c:10:4f:86:9d:05:9c:91:62:29:62:ba:7b:ba:f0:
31:e4:79:1e:2e:e9:5a:b4:19:cc:21:b1:b6:15:01:13:c1:72:
02:f4:e0:64:0d:67:8b:b4:47:73:66:78:ca:9e:ee:3a:4a:ae:
43:9f:40:df:67:b7:10:f9:50:66:42:1e:de:75:f7:03:4e:62:
94:5b:76:cc:fd:2f:42:c9:46:ff:6c:76:83:1b:cd:93:62:4a:
cb:6d:bd:f5:c7:39:39:41:67:04:9d:43:93:98:83:1d:37:b3:
50:c6:5a:66:a7:c5:dd:c6:3f:83:c3:bf:f2:2e:d6:1b:ca:e4:
93:8f:ed:e3:32:00:98:53:df:69:ad:4a:40:5a:62:4f:2e:99:
2e:80:65:65:7a:99:3c:56:ca:3c:91:cb:02:f5:40:d9:1a:63:
7b:b8:d4:5d:9f:18:ca:a4:00:aa:e4:fe:84:aa:70:6e:fb:f8:
a2:dc:27:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:40:09 2025 by rpki-client