Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
File: 9YQK34T7C3WOuopaE1qYA5Pov3M.mft (raw, json)
Hash identifier: hvHtl5vHOIkFIdExUFuu886VBXtQVK892BW+Q6DtvZw=
Subject key identifier: B7:12:81:1F:79:3F:19:B4:48:14:BB:4E:A6:93:47:1B:98:04:5C:3B
Authority key identifier: F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73
Certificate issuer: /CN=f5840adf84fb0b758eba8a5a135a980393e8bf73
Certificate serial: 019897806E3B2C47EF36C9A7041CF0E94C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
Manifest number: 01CF
Signing time: Mon 11 Aug 2025 05:00:33 +0000
Manifest this update: Mon 11 Aug 2025 05:00:33 +0000
Manifest next update: Tue 12 Aug 2025 05:00:33 +0000
Files and hashes: 1: 9YQK34T7C3WOuopaE1qYA5Pov3M.crl (hash: y6USQSzxdJOisJbVyBywZrkEWxGeNq9WBF7x0P8i6V4=)
2: n8NfpgAijMpzCpX65rpklB3Tlmg.roa (hash: tLj+vrFwuOUlrlwjfJTF2xymSSPYF1wq3UkCF0leCFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:6e:3b:2c:47:ef:36:c9:a7:04:1c:f0:e9:4c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5840adf84fb0b758eba8a5a135a980393e8bf73
Validity
Not Before: Aug 11 05:00:33 2025 GMT
Not After : Aug 12 05:00:33 2025 GMT
Subject: CN=b712811f793f19b44814bb4ea693471b98045c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:84:31:c3:83:a5:78:ec:00:f7:f7:c2:c5:68:
c1:f2:f4:8f:97:64:e5:85:8f:80:42:9c:51:82:dc:
5b:6e:17:72:d5:22:66:5d:76:46:f2:c4:43:11:0e:
a9:b3:25:25:7f:7a:04:75:82:ac:b0:86:36:a6:4a:
9e:39:ca:99:a4:fa:cf:ca:5e:b5:f9:c1:ac:01:f7:
80:6a:cf:62:d8:49:16:7e:a6:b4:4b:04:24:16:a5:
4c:00:80:18:b0:41:bf:d8:9a:b2:c1:94:22:cd:8f:
0b:b4:8d:75:98:d9:46:f6:f0:5d:65:7f:5b:d6:a7:
23:e7:d6:f6:97:80:6d:82:1a:ad:3b:b3:4c:ac:e1:
f9:25:b8:73:99:1f:36:2d:6e:89:f1:fa:ad:83:dd:
73:00:af:ab:2c:13:b3:3a:ee:72:56:ac:df:7c:75:
76:58:da:5d:e3:d4:de:a6:6d:61:e8:4b:db:b8:78:
ed:d6:ab:c5:61:da:42:5d:7d:e1:c2:85:78:1a:52:
30:9c:28:35:4c:a6:59:35:bd:3d:15:04:82:38:5d:
29:60:7a:0f:75:58:3e:dc:d6:42:0e:64:17:3a:0a:
2e:27:d0:4b:92:c9:b9:65:de:c0:a1:d3:6b:0f:cd:
35:0f:0f:26:8f:39:d9:26:cf:cc:0d:e5:54:a1:9d:
bd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:12:81:1F:79:3F:19:B4:48:14:BB:4E:A6:93:47:1B:98:04:5C:3B
X509v3 Authority Key Identifier:
keyid:F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:93:2c:35:cb:fd:1f:58:c5:26:d7:29:08:d6:55:76:1a:5e:
83:8e:16:56:a8:2e:d0:2b:91:fe:8d:b9:e1:c6:d8:e1:60:27:
c4:af:70:c2:36:c0:e9:c3:52:db:21:ec:0f:09:73:34:b5:f8:
33:82:31:f5:c7:1e:2e:66:f6:7b:02:00:f8:21:f8:44:a2:4f:
c7:d6:e8:4d:06:4d:66:0d:ca:ed:a4:31:b4:4e:d5:fb:46:a8:
2e:5a:3a:b5:98:0a:9b:6f:ae:01:93:9e:e9:e6:56:83:1c:ca:
74:2b:dd:d5:4c:a2:99:ab:ac:66:32:c4:71:4c:07:e2:db:29:
3e:a5:ba:6a:cc:c8:8e:8a:95:eb:12:8d:8b:9e:72:8e:32:e4:
ae:53:c9:ab:89:c2:a0:35:ec:81:6c:e0:e9:87:ce:ee:15:1c:
4c:67:8a:1f:34:18:2f:b9:66:2e:30:b8:c4:81:40:ba:95:ef:
57:b2:71:c9:a4:46:d8:bb:f7:58:d1:9d:c5:78:42:47:01:f3:
56:1e:65:6d:7d:f1:ec:08:98:a6:df:51:bf:84:7d:9f:1f:fa:
bb:72:b3:64:27:ac:bb:1b:07:5d:3a:be:39:e1:47:2d:c8:bd:
13:8b:79:26:f3:fb:54:b0:d3:23:0c:71:55:f9:e2:9b:56:26:
6d:b9:d1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:39 2025 by rpki-client