Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
File: 9XGHM6rUPvapm9jZUEog3YkCLo8.mft (raw, json)
Hash identifier: w1ExIW3L0WxBoxZHAGuvaMItZlpr7RuOq/4uLZrwtQY=
Subject key identifier: ED:B8:E3:99:6E:8A:4E:62:A4:5A:D4:85:5D:B2:0E:0F:9A:95:6F:1F
Authority key identifier: F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
Certificate issuer: /CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Certificate serial: 01988A69CE409E1645A6A2C9349DD4B977F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
Manifest number: 1322
Signing time: Fri 08 Aug 2025 16:00:46 +0000
Manifest this update: Fri 08 Aug 2025 16:00:46 +0000
Manifest next update: Sat 09 Aug 2025 16:00:46 +0000
Files and hashes: 1: 9XGHM6rUPvapm9jZUEog3YkCLo8.crl (hash: 08L/CSRevwqSfRhdEyeAlSJCyFknWAdWRYb59c3CuP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:69:ce:40:9e:16:45:a6:a2:c9:34:9d:d4:b9:77:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Validity
Not Before: Aug 8 16:00:46 2025 GMT
Not After : Aug 9 16:00:46 2025 GMT
Subject: CN=edb8e3996e8a4e62a45ad4855db20e0f9a956f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:7e:52:08:9a:26:d5:8f:95:9d:0a:2d:90:
3d:d4:11:1a:38:34:31:89:95:1d:a8:58:af:75:fc:
22:3a:e1:b3:ba:fe:c9:83:f0:30:c7:55:d2:0b:1e:
9d:49:47:d1:d4:19:bc:ac:88:83:9c:76:05:3d:57:
e5:c3:cd:a9:fc:06:df:ac:c4:b4:ee:9a:1c:dc:43:
c8:b3:58:c1:c6:ee:9e:89:57:48:c6:a9:6b:e1:a8:
f5:c9:71:04:81:09:4b:b7:90:6a:f6:51:03:17:2f:
d5:c9:8c:d3:9f:a3:5e:30:3f:9b:fa:db:c2:3b:d3:
b6:ab:0c:b6:2f:b2:7d:be:52:bb:7f:8a:c0:09:5f:
a0:e8:0f:41:ab:00:d4:e6:eb:6e:24:6b:59:d0:c4:
1b:14:41:e8:b3:c5:94:62:8c:27:20:a5:a7:fa:41:
37:be:d5:e2:07:78:7c:59:af:52:d8:e1:1a:4a:87:
84:5d:30:58:98:ef:0e:71:a7:28:3a:b7:d6:91:ce:
28:0e:86:5f:e1:ad:fd:f2:e9:bf:8f:4b:5a:b6:61:
9e:f7:2a:bb:09:94:8f:24:80:cd:54:a4:dc:00:76:
fc:f4:6c:fb:63:84:8d:95:0f:06:d9:29:ec:9a:12:
1d:c6:9f:6f:78:49:ad:35:97:0c:1a:26:6c:3b:d4:
69:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B8:E3:99:6E:8A:4E:62:A4:5A:D4:85:5D:B2:0E:0F:9A:95:6F:1F
X509v3 Authority Key Identifier:
keyid:F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:97:9f:dd:5a:f5:bc:b2:ca:e6:0c:28:02:59:b3:8a:5b:6e:
8c:24:82:aa:d5:cf:e3:20:da:1e:be:1a:59:71:ed:27:89:5c:
12:8d:1a:09:fa:b0:01:7a:c9:b9:00:84:9c:1c:f2:28:ea:4e:
61:db:6a:16:a2:84:62:28:02:b4:d3:4c:b1:06:86:0e:7b:fc:
bb:a3:20:59:72:6b:0c:ff:42:c3:c4:4d:73:18:cd:e8:a0:62:
57:89:37:a8:28:fe:72:df:b8:b1:40:21:ca:da:95:e1:c8:ce:
7c:d2:95:2a:54:7b:98:de:81:5b:0a:ce:65:a3:9e:72:a7:49:
78:4a:f2:88:c7:ef:59:cd:e3:d5:9b:1e:8f:2a:69:7b:2d:6a:
b4:6f:b5:84:b6:7f:ef:24:7e:f9:ba:86:42:de:d2:44:c9:35:
6a:c3:ef:fa:1b:8e:2f:7c:55:e7:9a:6e:a6:a5:b9:09:3d:b6:
8b:bf:c8:65:55:9f:7c:f7:f6:65:ee:54:6d:cb:be:19:0e:a5:
74:ae:99:81:85:1c:fa:e4:52:a2:3f:c2:60:2d:9a:c7:e3:e3:
20:c5:98:a8:3d:80:10:ab:c8:28:7f:6a:fd:44:b7:11:90:4b:
45:63:ea:ba:00:bc:1d:66:8a:b7:1c:87:9e:15:49:2c:f7:80:
13:e5:ef:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:05 2025 by rpki-client