Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
File: _9YayMVuOP32EjgDbHNUcnADRjE.mft (raw, json)
Hash identifier: MBboAyUYijAEfBgoOrVIIDXnbmuLb2m7Z7lGevHikho=
Subject key identifier: C5:8A:96:09:6E:54:07:F5:D4:B5:42:ED:53:04:CC:70:1E:3E:66:71
Authority key identifier: FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31
Certificate issuer: /CN=ffd61ac8c56e38fdf61238036c73547270034631
Certificate serial: 01987306727DA99627FEAD9B067217C692AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 03:00:58 +0000
Manifest this update: Mon 04 Aug 2025 03:00:58 +0000
Manifest next update: Tue 05 Aug 2025 03:00:58 +0000
Files and hashes: 1: _9YayMVuOP32EjgDbHNUcnADRjE.crl (hash: 9z+Ko3d4dmZeWOnPQ7UXUNhXtMQXzmhljLwu3xAbYPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:72:7d:a9:96:27:fe:ad:9b:06:72:17:c6:92:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffd61ac8c56e38fdf61238036c73547270034631
Validity
Not Before: Aug 4 03:00:58 2025 GMT
Not After : Aug 5 03:00:58 2025 GMT
Subject: CN=c58a96096e5407f5d4b542ed5304cc701e3e6671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fe:d2:6d:86:74:1d:a1:44:e5:1c:4c:ab:ce:
77:f2:c5:4e:c4:8a:01:d1:88:78:5c:a9:30:65:3a:
df:b7:42:b2:85:59:d7:7d:df:fe:df:c0:5b:79:f4:
5b:54:56:82:63:f4:81:1c:e1:88:09:60:79:42:49:
5a:ad:91:b7:79:a2:7e:52:6d:d4:19:0d:60:de:f3:
30:9e:40:b3:84:b6:0c:05:88:b6:98:b4:fd:6f:c2:
a7:94:ba:c8:fb:63:7d:9c:4d:a1:b4:9f:d0:9b:84:
63:a6:6d:bb:cd:bc:8f:44:e8:e8:82:4c:61:50:49:
b4:95:4c:76:a8:9b:b2:2c:21:7f:33:f2:6e:d7:ff:
bd:5a:9d:1e:8f:46:b7:4c:66:f2:4d:b9:68:ab:ab:
d2:89:cb:74:95:b6:98:d6:cb:b5:29:56:c6:84:fb:
86:a2:10:81:a7:79:bc:69:5a:3f:b2:65:51:1d:f8:
ff:c9:64:c5:a4:87:d8:9c:65:ac:f1:01:e2:8a:62:
f5:58:b6:40:22:7f:16:c3:96:98:94:be:5e:ad:78:
21:86:20:d3:c8:83:21:ad:d9:84:fa:b8:8b:09:91:
c1:b4:09:4e:d8:91:f7:96:d2:1e:00:12:99:8c:bf:
c8:b8:0e:47:5b:d0:a4:6c:18:2c:57:52:2b:1c:6a:
b7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8A:96:09:6E:54:07:F5:D4:B5:42:ED:53:04:CC:70:1E:3E:66:71
X509v3 Authority Key Identifier:
keyid:FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:01:79:75:5e:4c:7c:cf:a7:a2:08:19:fe:af:b6:d6:2e:2e:
e0:28:e3:a0:bf:82:d8:d8:00:0e:79:9a:5b:90:d1:b6:5b:6d:
8e:38:d6:dd:41:7d:f5:7e:e0:40:84:f6:c7:16:42:e7:34:68:
c7:97:ed:9e:1f:54:71:50:b4:52:bc:8d:27:d9:28:18:b5:08:
27:95:e0:02:05:73:e0:14:bb:e5:ad:a2:14:89:d7:2c:48:6a:
62:27:47:71:cd:c3:d4:4e:8d:aa:20:a1:9a:2e:4e:d2:f6:82:
36:f9:aa:ac:32:e9:68:c1:23:e1:3b:00:3b:12:22:b9:b8:b2:
34:0e:5d:82:38:8c:32:50:f6:ab:ca:8f:3b:23:b8:2f:68:98:
a1:d1:85:cc:4e:21:88:b0:ff:39:35:df:07:58:c0:ce:55:82:
63:12:39:88:b7:57:d2:b4:92:51:d1:9f:3c:bd:ab:e1:f2:79:
bb:66:11:ac:9f:5e:3c:49:78:d0:e8:c8:d9:03:a8:49:14:3f:
f6:41:a9:ce:e7:8b:05:ac:26:11:79:57:da:4e:66:a6:90:22:
2a:b0:26:3e:20:3b:f3:c6:4c:c8:97:3a:e2:bf:5e:bd:fe:78:
e9:f4:8c:d1:cc:48:67:75:b7:25:91:cd:5a:9f:ef:f0:9a:a2:
dc:67:ba:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:30 2025 by rpki-client