Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
File: 9M3Ux8i_hxhwMKZEcCColvQeSZM.mft (raw, json)
Hash identifier: 4eBRL+zsflbT/LR5BacFqtkPjk6nU7PCHZcgR/d0un8=
Subject key identifier: 2F:9E:A8:0B:03:C2:CF:EC:D3:9D:18:D9:39:06:80:DE:CA:87:B9:D9
Authority key identifier: F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
Certificate issuer: /CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Certificate serial: 01988732975014CB993BAF99C53E9F8A1140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
Manifest number: 12AF
Signing time: Fri 08 Aug 2025 01:01:36 +0000
Manifest this update: Fri 08 Aug 2025 01:01:36 +0000
Manifest next update: Sat 09 Aug 2025 01:01:36 +0000
Files and hashes: 1: 9M3Ux8i_hxhwMKZEcCColvQeSZM.crl (hash: xL1PBJp8sG2DZ0/jbSEX+74xATaaQu/SNvkLxfORass=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:32:97:50:14:cb:99:3b:af:99:c5:3e:9f:8a:11:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Validity
Not Before: Aug 8 01:01:36 2025 GMT
Not After : Aug 9 01:01:36 2025 GMT
Subject: CN=2f9ea80b03c2cfecd39d18d9390680deca87b9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:b6:59:42:10:63:72:7c:d9:82:87:69:e0:
4d:c8:c3:0e:4b:31:d4:fb:1e:5e:bd:7c:d0:4e:51:
40:77:da:00:40:ff:0e:01:27:a1:8a:f8:7b:06:1a:
60:75:a8:a2:e2:af:ce:3d:5a:7e:47:af:39:da:40:
e2:d2:8d:5e:ce:34:70:4f:95:0a:da:ff:cd:e4:29:
59:3c:b8:1a:d9:d5:c4:42:22:da:15:ab:96:f0:32:
dc:46:b3:5e:40:fb:6d:14:c1:4f:cd:91:09:73:9b:
2a:32:55:6b:37:ac:8a:35:3d:b4:42:ed:a8:8a:30:
27:55:64:d9:a2:d8:6c:70:aa:be:88:0d:3b:40:5f:
64:72:20:89:12:34:c8:e8:e1:a4:7f:90:89:00:aa:
d1:6b:4b:7f:95:57:91:2a:19:c6:09:14:39:ff:71:
d6:58:da:83:fa:19:e7:5d:21:b1:86:be:c4:6d:6e:
fa:4c:1f:96:8a:26:b6:1e:b8:41:45:f0:1e:ea:90:
58:d3:6f:7d:24:26:05:ba:e8:32:a5:fb:96:21:80:
54:65:b9:22:9d:73:6b:20:3e:e2:0f:00:90:c5:91:
58:73:9f:79:99:a9:77:5e:7d:7c:c3:64:36:ee:02:
94:70:73:74:e3:e4:7b:39:f7:2b:f8:e7:d0:c7:ec:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9E:A8:0B:03:C2:CF:EC:D3:9D:18:D9:39:06:80:DE:CA:87:B9:D9
X509v3 Authority Key Identifier:
keyid:F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f1:52:58:d8:38:a2:32:db:cc:95:91:6a:03:29:98:26:ae:
eb:ac:e8:71:41:a3:5b:e1:ea:b7:e6:77:27:d6:e7:25:a7:4b:
3b:19:89:1c:e3:e8:00:19:cf:df:54:4f:d8:fd:c2:08:d1:58:
74:f6:61:b8:e0:9e:58:42:94:04:41:3d:c2:47:c4:d1:a7:51:
ed:c7:dd:3e:f4:be:15:ff:ea:37:4d:9c:2e:ed:3c:41:03:dd:
46:7d:8f:ab:bb:49:86:44:a9:d5:3e:b6:d9:64:08:4b:4b:7b:
56:d3:82:4d:ff:17:cb:40:5e:fd:ca:fc:36:e5:02:99:7e:2e:
7e:9b:7e:02:2e:3b:7d:4b:a2:95:57:28:b1:5c:0f:a6:0d:44:
52:31:1f:ab:83:3f:c3:07:76:45:18:0d:38:8a:f1:be:16:46:
a1:67:1d:54:28:c6:88:0f:00:0f:8d:76:f6:c4:9d:f4:29:2e:
86:4f:95:64:3e:f7:80:ca:6e:b9:1e:bc:fe:9e:85:79:6d:62:
ef:5e:9b:94:05:3a:c5:96:a6:69:d7:41:62:a5:9c:09:9d:0e:
a9:41:2f:41:ef:93:7b:ad:21:fb:0f:70:00:b5:ff:fd:af:1c:
9a:d7:a7:c7:b4:74:19:db:3f:07:4a:3d:c2:57:c8:e8:a9:de:
d1:a0:86:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:13:27 2025 by rpki-client