Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
File: 9Y-A0jqdiu1P4xH3IiCcldqarUY.mft (raw, json)
Hash identifier: l5ben1YI3AEJ0HzanqhBcdBiRCQF6A+gdFpC7n+IBlc=
Subject key identifier: FA:5A:E4:45:80:0A:82:89:19:FD:68:C3:BD:BD:77:D7:CB:46:ED:D0
Authority key identifier: F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
Certificate issuer: /CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Certificate serial: 0198A196835DA48F52C4FEF0B2430810BAED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
Manifest number: 0D0C
Signing time: Wed 13 Aug 2025 04:00:52 +0000
Manifest this update: Wed 13 Aug 2025 04:00:52 +0000
Manifest next update: Thu 14 Aug 2025 04:00:52 +0000
Files and hashes: 1: 9Y-A0jqdiu1P4xH3IiCcldqarUY.crl (hash: WI2hOGpJ+f24yJ7KXp1rpFH5sV0IX9K5EFohhW14crM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:96:83:5d:a4:8f:52:c4:fe:f0:b2:43:08:10:ba:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Validity
Not Before: Aug 13 04:00:52 2025 GMT
Not After : Aug 14 04:00:52 2025 GMT
Subject: CN=fa5ae445800a828919fd68c3bdbd77d7cb46edd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f1:d9:16:6a:59:4c:7a:f8:23:a1:8f:6a:bc:
8f:e7:50:70:9f:33:7d:5f:d0:5c:b8:1c:5b:6c:82:
89:f0:24:de:03:cb:3f:b4:2d:3d:cd:b5:0d:1d:f5:
c3:6a:b6:35:2a:bd:a2:bc:78:13:53:74:94:4d:83:
14:43:eb:f4:0a:74:99:64:2e:6f:6c:36:5f:11:44:
82:c1:cd:ce:f2:ed:8a:72:68:57:68:fa:39:c6:8f:
38:2e:73:ec:8e:27:f7:4a:70:af:59:56:66:a4:50:
d8:e8:28:b1:77:60:ca:b2:b8:ef:f5:30:74:e0:a6:
b6:92:ad:b5:aa:81:1c:e0:17:75:96:f7:4b:f1:5a:
c3:46:83:48:3a:9d:83:7a:13:b4:3d:a2:6f:53:d1:
b1:ab:9f:5c:55:a5:d7:ee:a0:11:dc:02:d7:84:70:
9f:19:37:92:0d:78:46:7a:9a:7c:10:dd:63:99:44:
2c:bc:c7:5e:21:cf:3b:73:11:2b:2b:b2:cb:cd:de:
6a:10:a2:b5:03:60:42:5b:66:90:be:21:13:df:de:
2a:be:1e:a6:c5:d2:f7:72:59:c5:e4:d1:eb:e4:a8:
88:10:2f:46:d4:aa:d0:9b:99:18:bc:f1:cd:4a:3e:
11:01:b6:69:d7:75:38:45:e7:a8:28:6c:60:34:36:
ab:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5A:E4:45:80:0A:82:89:19:FD:68:C3:BD:BD:77:D7:CB:46:ED:D0
X509v3 Authority Key Identifier:
keyid:F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ef:f3:2c:19:d5:82:57:cf:65:23:13:1a:58:cf:91:10:ab:
35:58:28:0d:ab:3c:09:6f:ba:f7:e7:3b:96:fc:74:c6:a7:7b:
f2:83:49:54:9f:0d:d1:a8:d4:70:13:8b:75:78:71:73:ef:09:
de:98:91:37:48:d2:15:84:71:19:4d:4b:d3:d7:f9:39:e1:0e:
1b:8f:c7:9c:e8:cc:97:1f:72:8c:5b:14:7f:a8:29:36:a9:ad:
c7:27:32:bf:36:96:a5:2f:61:42:20:ed:86:e3:79:5d:a0:1d:
b1:03:99:4d:ed:d2:e6:30:82:c6:27:71:8d:2f:7b:b1:bd:82:
e0:99:54:83:81:ae:aa:fb:bc:d3:4c:62:cd:1a:32:3f:73:76:
bd:91:f9:bd:a2:8f:62:e4:2d:70:d3:45:57:21:a5:54:26:df:
c2:7b:87:3d:f6:05:dc:f4:f6:1b:2f:ca:38:b7:5e:4e:9b:b7:
88:10:54:38:60:d5:4b:8b:88:f5:27:64:e9:b2:83:70:6e:c5:
17:d7:7a:a5:86:c6:b3:16:0a:e7:43:a9:41:74:da:42:f1:37:
56:e6:8e:75:ca:91:87:d5:9e:1d:65:ca:42:41:59:bf:bf:05:
e7:29:3c:b8:ca:28:2a:75:c3:a0:c7:c7:0a:7d:41:51:ed:7d:
3b:96:10:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:29:58 2025 by rpki-client