Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft
File: 9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft (raw, json)
Hash identifier: jQPzPry6g6hQlhLXcNDUMGbXEo33m6msdtkHRSJGbbs=
Subject key identifier: 32:62:3C:73:AF:88:19:AF:6B:63:1D:F0:2C:BD:52:35:41:F4:4F:E2
Authority key identifier: F7:05:92:C9:0B:4C:B2:45:E5:47:18:D7:C5:79:9B:47:D4:19:A6:84
Certificate issuer: /CN=f70592c90b4cb245e54718d7c5799b47d419a684
Certificate serial: 01988A69AC2D220606419C3C46293A646B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wWSyQtMskXlRxjXxXmbR9QZpoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft
Manifest number: 1620
Signing time: Fri 08 Aug 2025 16:00:37 +0000
Manifest this update: Fri 08 Aug 2025 16:00:37 +0000
Manifest next update: Sat 09 Aug 2025 16:00:37 +0000
Files and hashes: 1: 9wWSyQtMskXlRxjXxXmbR9QZpoQ.crl (hash: 03OWma/3jQF3e4b1eB+OabeIxTny4or7CGRDcpmso0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9wWSyQtMskXlRxjXxXmbR9QZpoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:69:ac:2d:22:06:06:41:9c:3c:46:29:3a:64:6b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f70592c90b4cb245e54718d7c5799b47d419a684
Validity
Not Before: Aug 8 16:00:37 2025 GMT
Not After : Aug 9 16:00:37 2025 GMT
Subject: CN=32623c73af8819af6b631df02cbd523541f44fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:08:14:3f:7e:8d:9d:c8:e1:0b:5b:51:e6:
83:b3:dc:c9:5b:65:58:02:85:d8:17:05:e5:dc:90:
23:d2:08:24:66:fe:60:1d:7c:2d:26:7e:ca:87:4a:
74:05:ee:57:c0:91:d3:91:78:b2:d6:26:80:a6:80:
ff:71:f4:d2:5e:c8:63:53:f6:d2:23:16:49:b0:21:
34:07:8b:32:ff:4c:85:f8:60:e7:79:03:79:fb:1f:
13:2d:84:bc:ed:86:80:0b:1f:d6:bd:1b:87:47:08:
f5:4c:a8:af:ec:e9:74:e3:1a:5f:81:c7:33:50:0e:
70:b4:e7:57:e6:38:dc:43:aa:37:2c:fd:3d:a4:b0:
fb:2e:d3:73:76:9c:51:1f:89:cf:d5:33:10:e6:8c:
38:17:3a:6c:6a:e9:f1:3d:d2:4d:83:1b:1f:96:57:
3f:59:3b:55:73:7d:97:ba:f5:e8:d1:45:cb:6a:76:
76:a5:bd:6e:95:9f:bb:9a:95:fa:9e:63:08:8f:2c:
fb:d5:c7:83:a2:85:29:f1:3e:54:8c:54:86:6d:f3:
7a:97:dd:67:35:a4:11:23:f6:95:d2:ef:b5:af:8c:
20:b0:1e:e1:a4:c4:f6:36:27:63:d4:69:08:90:13:
9a:a4:ff:5f:65:4c:25:11:15:a4:a1:53:69:65:47:
c1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:62:3C:73:AF:88:19:AF:6B:63:1D:F0:2C:BD:52:35:41:F4:4F:E2
X509v3 Authority Key Identifier:
keyid:F7:05:92:C9:0B:4C:B2:45:E5:47:18:D7:C5:79:9B:47:D4:19:A6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wWSyQtMskXlRxjXxXmbR9QZpoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:89:01:59:c3:6e:e2:57:f4:b6:e5:1f:6f:32:b1:5d:bf:55:
98:92:63:d5:80:44:e7:be:5b:58:f0:6e:72:18:45:06:60:b8:
a1:58:13:c9:b0:e7:25:e4:51:c1:55:7d:07:a5:0f:af:31:bb:
db:9e:05:f8:01:16:63:d3:3f:da:6c:d9:3e:d3:14:c2:82:f3:
73:66:26:0d:8a:2d:eb:ae:a0:bc:5a:a3:27:13:f0:47:79:7a:
93:be:73:37:c6:e7:f1:da:76:07:ba:cb:c8:8a:73:53:b2:43:
8e:44:33:bc:46:f5:ba:b4:f5:1f:b8:76:1a:c3:1c:61:86:89:
ee:6d:29:dc:b8:0a:e3:e2:0e:37:98:98:30:dc:83:82:4d:d7:
0c:d5:ef:f9:d6:93:82:98:68:68:75:14:9a:8b:e5:f7:b1:f6:
5a:c1:de:ff:48:bc:f1:dd:5b:c7:2b:59:86:64:bd:7a:94:17:
1b:91:e7:22:50:e5:48:3c:21:b9:10:27:61:e3:44:77:ce:af:
d7:d2:f7:1f:ea:cf:fb:6d:64:ae:0b:7c:60:43:cb:a3:e1:9d:
d0:fe:99:2a:ec:ad:2a:23:c2:bc:3c:ea:a8:49:5b:d0:b6:5f:
0d:57:92:0a:01:c7:ee:d9:be:a4:32:56:04:88:90:30:85:67:
8c:63:a4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:14:24 2025 by rpki-client