Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
File: m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json)
Hash identifier: LfJ5QsEQfreTQp/LJIycat2zm1aPJucSu11odnuMKA8=
Subject key identifier: 46:8D:F7:5D:44:83:79:41:15:C2:8E:C2:E6:F3:A1:BC:51:6D:24:87
Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
Certificate issuer: /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Certificate serial: 019892C82B546EFAE2AB0D247D5F5160B653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
Manifest number: 1624
Signing time: Sun 10 Aug 2025 07:00:48 +0000
Manifest this update: Sun 10 Aug 2025 07:00:48 +0000
Manifest next update: Mon 11 Aug 2025 07:00:48 +0000
Files and hashes: 1: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: /y2QROF27mgXbz4glGEZNysRdE0gMdZNO/AMBOiBJO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:2b:54:6e:fa:e2:ab:0d:24:7d:5f:51:60:b6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Validity
Not Before: Aug 10 07:00:48 2025 GMT
Not After : Aug 11 07:00:48 2025 GMT
Subject: CN=468df75d4483794115c28ec2e6f3a1bc516d2487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:38:5e:90:42:2b:ab:7a:c0:41:4e:e5:fa:
04:6a:1d:c0:90:dc:4a:de:04:b0:ef:6a:23:69:8d:
26:c3:8e:43:66:99:69:f2:e3:b1:0e:af:a7:e3:fd:
3f:cf:42:6d:7b:d0:1c:d1:5b:1f:3e:1f:20:48:32:
66:3b:20:95:50:71:73:ed:15:70:30:5e:b8:25:49:
6d:6c:f3:d7:0a:62:8f:52:16:87:81:31:c7:39:5f:
2a:45:80:2f:0f:23:10:af:93:42:61:aa:cf:0b:be:
55:ff:0d:ac:02:81:ba:e0:78:01:1d:96:57:83:e2:
5d:66:bc:64:69:9f:1e:78:6e:e5:6c:39:54:0d:5e:
ac:23:f7:fa:87:67:56:80:c4:ce:a8:63:6f:f4:97:
dd:89:9c:f0:72:fc:cf:ae:b6:00:8b:4c:44:98:0d:
cc:ad:cc:12:92:79:1f:ef:3a:f9:66:80:c8:b3:95:
d3:c1:29:4f:3f:b6:08:e9:89:aa:35:01:df:86:42:
73:e7:33:a1:ab:bc:00:60:17:e3:3f:b8:ad:04:69:
eb:8d:68:e7:59:c9:7a:bd:df:9f:fe:8c:50:8c:a3:
a0:f4:c5:56:c3:d4:62:e9:9b:d1:0a:e6:d4:1f:e1:
bc:92:ff:05:ab:c9:a9:61:5e:a8:e2:77:58:5b:04:
9d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8D:F7:5D:44:83:79:41:15:C2:8E:C2:E6:F3:A1:BC:51:6D:24:87
X509v3 Authority Key Identifier:
keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a8:7e:cb:f1:84:f3:55:24:96:af:80:ef:4e:92:af:54:18:
d0:d8:2c:57:54:2f:da:e9:2d:a2:e1:81:0d:e4:fb:63:c0:9a:
08:33:55:58:8c:64:27:98:e8:b7:23:28:ec:64:7e:4b:ac:79:
21:3d:fa:de:cc:19:e1:5b:6b:6d:39:20:40:f6:94:3f:9b:3d:
b7:ef:e4:0b:2b:ef:b6:2f:19:df:37:03:7c:92:05:fc:62:5f:
cc:47:f0:9b:df:dc:3d:c8:7f:5d:fc:83:f0:c9:54:31:e2:23:
f8:03:68:4a:e8:cb:0d:5a:1f:ee:bf:48:48:d4:36:fc:d3:ac:
ee:55:76:20:71:62:35:96:a9:17:fa:f3:8c:b7:55:0a:fc:ef:
b4:2c:af:95:a2:30:78:8a:be:1d:53:e5:6a:11:46:c2:b0:52:
f2:58:09:e5:80:e8:1a:46:92:54:39:93:e8:5b:83:5e:93:a2:
2c:17:fc:77:21:a4:c8:55:71:5d:76:d1:7d:0b:b3:31:d6:f6:
b5:bf:70:3f:49:47:12:55:74:27:65:cc:f3:88:c0:36:37:fb:
a9:8b:7c:13:2c:25:d9:1c:5f:ca:44:9a:ff:43:95:24:e1:1d:
e9:91:30:0c:03:cc:ed:0c:4b:bd:b7:c2:b1:0c:07:9c:94:f4:
13:82:ae:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:12 2025 by rpki-client