Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
File: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft (raw, json)
Hash identifier: Bm5RvIfvQnG3lZy97xPIPlRwMwUuFyEFVuGP6GrMNDU=
Subject key identifier: B6:74:A0:CF:B7:9D:3F:C6:9F:BD:5F:68:4F:17:87:FE:C9:00:7B:A8
Authority key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
Certificate issuer: /CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Certificate serial: 019897EE46E16A076F48DC9EAAE7D0D087F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
Manifest number: 1626
Signing time: Mon 11 Aug 2025 07:00:31 +0000
Manifest this update: Mon 11 Aug 2025 07:00:31 +0000
Manifest next update: Tue 12 Aug 2025 07:00:31 +0000
Files and hashes: 1: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl (hash: tbNCPZy/I1PTWkshPBROo4y2K9TP64GFLqzohQmkwO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ee:46:e1:6a:07:6f:48:dc:9e:aa:e7:d0:d0:87:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Validity
Not Before: Aug 11 07:00:31 2025 GMT
Not After : Aug 12 07:00:31 2025 GMT
Subject: CN=b674a0cfb79d3fc69fbd5f684f1787fec9007ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:83:88:73:3b:9f:d8:b9:21:41:88:30:75:56:
13:0d:a0:13:c7:3e:a9:ab:95:ff:b0:07:15:7e:a3:
c4:ce:00:72:5c:be:a0:65:ae:4b:d8:69:76:2f:a2:
92:1c:90:0c:b2:cb:2b:ee:e4:ec:8e:57:1b:6a:94:
1d:fa:d6:13:1d:50:f2:b2:ed:0d:22:47:c7:84:33:
84:1b:58:66:85:9d:03:20:d6:73:3a:64:bb:52:de:
e7:52:e3:a7:8c:1a:7d:dd:05:0b:31:a2:d7:5c:fe:
6c:8e:20:15:8a:f5:53:34:38:a0:7a:80:a5:d8:f6:
9d:6b:dd:ae:77:ea:34:9c:48:a8:28:e4:48:64:d5:
a2:e1:51:a5:e3:a8:e9:f8:e2:d1:b5:d5:bd:97:ea:
a3:06:3e:48:9a:c3:a2:b7:49:67:da:23:9d:1c:a8:
88:b3:c0:64:eb:d7:55:8d:09:69:e4:e6:94:be:f9:
db:68:d5:30:69:09:d6:77:0b:e9:3e:fe:ba:23:98:
0f:ed:75:09:f7:45:a0:1c:32:19:51:d1:b0:b9:40:
a7:4d:cd:f7:9e:70:23:97:67:34:a9:83:a6:f4:1a:
07:e5:e9:56:e7:a7:54:1b:c8:db:e3:51:c9:a6:f4:
b2:ba:be:56:2b:75:d4:f2:4c:1d:50:c4:f0:45:57:
5c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:74:A0:CF:B7:9D:3F:C6:9F:BD:5F:68:4F:17:87:FE:C9:00:7B:A8
X509v3 Authority Key Identifier:
keyid:F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a0:9a:16:1d:1f:b0:c5:0d:12:f7:45:29:3f:fc:cb:95:29:
fb:d2:9f:4f:9b:51:60:44:a4:af:ed:69:f9:0c:71:c5:7e:48:
76:0d:ab:5f:13:6e:9e:fb:d8:ee:a8:fc:70:f2:19:7f:6c:08:
a1:d4:da:d7:4d:aa:2d:8e:83:78:ef:48:8c:2d:b0:03:6c:af:
f9:39:8e:95:67:be:c0:d1:63:d2:d0:14:80:5e:ad:01:ad:03:
f9:86:9e:f4:cc:87:4d:99:bb:51:1e:59:63:12:fd:09:16:fc:
a5:b5:41:ea:b6:08:e7:9f:35:4e:1f:ad:ee:5e:27:eb:a9:b0:
fe:64:a1:f8:5c:11:50:2c:89:ad:b9:a1:0c:0b:95:21:45:c4:
bf:11:54:40:fc:c7:36:f8:8a:4a:dd:a8:b8:82:91:77:80:f9:
ed:b8:5a:4f:dc:15:2a:68:eb:b0:88:52:fd:21:39:b6:95:f3:
b9:c3:f2:4a:f1:9c:03:bc:00:81:c7:53:a9:ba:1f:ce:e4:35:
5b:67:cf:18:e0:21:5d:e5:9c:9d:da:54:18:92:89:6e:ef:81:
07:73:b7:c9:5f:54:a5:37:59:79:85:00:5d:ce:59:23:a7:70:
02:b4:e5:41:16:0a:8d:e0:d4:c2:88:5f:85:cc:cd:b4:c1:a2:
8f:19:55:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:37 2025 by rpki-client