Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
File: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft (raw, json)
Hash identifier: qktO9+xNDBwbEbgBOKybGeB3zqa7v1/SzgQ/OXXzmnU=
Subject key identifier: 55:CD:F7:16:F3:C2:D1:FF:F4:C8:4B:09:8D:57:1C:63:E9:2A:63:7B
Authority key identifier: F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
Certificate issuer: /CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Certificate serial: 01989F71443A41E41D677273A470E59B897C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
Manifest number: 0421
Signing time: Tue 12 Aug 2025 18:00:56 +0000
Manifest this update: Tue 12 Aug 2025 18:00:56 +0000
Manifest next update: Wed 13 Aug 2025 18:00:56 +0000
Files and hashes: 1: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl (hash: R4KV14QDi4vK3dJomkYRqyieI1RSiUT5MsEvLHcBORE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:71:44:3a:41:e4:1d:67:72:73:a4:70:e5:9b:89:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Validity
Not Before: Aug 12 18:00:56 2025 GMT
Not After : Aug 13 18:00:56 2025 GMT
Subject: CN=55cdf716f3c2d1fff4c84b098d571c63e92a637b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:36:8f:3c:42:88:f4:92:71:3f:eb:18:27:7b:
d9:0b:a3:e9:d9:f5:53:79:cb:be:9a:79:77:41:1b:
85:0b:14:3f:cb:18:6d:bd:7c:25:1c:6c:69:48:94:
be:b3:d1:b9:58:f2:15:e8:24:0e:fc:4a:41:0a:cd:
97:fa:af:26:49:4a:33:df:0b:36:b7:ba:9d:56:1b:
ba:0d:4e:3f:e7:32:81:1b:c1:91:72:1b:48:a2:c9:
94:02:68:4f:a0:87:bf:72:5c:1e:79:9b:49:bf:1a:
da:71:4a:1b:12:3a:eb:14:a0:36:32:e3:6b:22:7e:
2d:76:7f:72:66:26:d7:c2:2b:17:9f:fc:d0:d2:86:
2d:e0:a4:1f:49:b7:af:97:51:92:5a:da:21:4e:07:
85:ba:5e:e2:d0:84:38:dd:b4:32:f5:cb:c1:5b:d7:
de:0b:eb:f6:99:cc:bd:2d:86:07:95:34:98:e3:64:
c6:bb:d5:ec:ca:c5:af:6a:3d:75:b7:c6:c3:09:55:
be:d0:0b:6b:b7:91:33:35:04:ff:6c:8a:31:09:d5:
79:b6:65:25:27:a6:45:b3:17:91:fa:4e:4b:af:67:
70:f3:50:e1:59:53:27:58:38:7d:e0:7b:9d:1b:9a:
df:b6:a9:cd:61:c6:56:34:23:d3:7d:61:f7:5d:a2:
68:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CD:F7:16:F3:C2:D1:FF:F4:C8:4B:09:8D:57:1C:63:E9:2A:63:7B
X509v3 Authority Key Identifier:
keyid:F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:52:cf:48:f8:36:3c:f1:41:fe:af:e8:7d:f4:5d:be:1d:64:
5a:b2:4b:75:c6:ca:c0:41:3d:ed:e9:9b:d9:97:9c:01:82:c4:
b2:e9:76:54:d9:ce:32:f3:13:81:ce:1d:97:c2:a3:1c:79:48:
73:da:0c:50:df:ef:24:04:51:16:a4:46:31:5a:e6:ed:89:b2:
7a:61:56:d5:a5:dc:b6:7a:04:51:fd:7b:d0:45:4d:82:fc:da:
65:cf:5a:98:71:e4:49:e4:5b:df:fd:0e:b8:a8:75:3d:c3:83:
6d:dd:62:ea:ca:1e:e9:3f:f1:76:70:88:ca:9f:24:7d:b4:33:
1d:f5:b0:83:c2:af:a6:df:a5:ef:b6:df:0f:18:c4:2f:3f:d6:
18:2d:64:20:63:cc:a1:04:1d:66:93:99:8b:24:81:29:72:48:
90:73:91:a5:34:31:4c:b1:64:bb:ef:18:a7:a1:70:12:47:4f:
6f:f9:a5:00:e1:50:bc:8f:25:1b:a9:6d:b7:db:b0:ec:e1:2f:
af:f5:00:1b:6a:af:4d:12:46:60:a4:ef:fc:a0:ec:76:c6:fc:
d5:23:47:09:41:57:cc:ad:3e:a6:35:0e:f4:cc:0a:6d:50:fb:
3a:ba:73:56:9f:fe:b0:be:c4:5e:80:d5:e6:20:87:13:f4:36:
f2:44:e1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:06 2025 by rpki-client