Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
File: 1-9F4zWAolpi3zZXd17FpF0kLRAc.mft (raw, json)
Hash identifier: RdKOR52XEeBwBPgRhicpdMS6/lyxsJih8Ng+WGZWIgQ=
Subject key identifier: 9F:A8:4F:57:21:80:FD:F5:20:B5:25:8B:B2:EB:B9:77:3A:D6:46:8A
Authority key identifier: FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
Certificate issuer: /CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Certificate serial: 019873E29C672B7B09FBBCA2EAD54121B004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
Manifest number: 0AE5
Signing time: Mon 04 Aug 2025 07:01:27 +0000
Manifest this update: Mon 04 Aug 2025 07:01:27 +0000
Manifest next update: Tue 05 Aug 2025 07:01:27 +0000
Files and hashes: 1: 1-9F4zWAolpi3zZXd17FpF0kLRAc.crl (hash: qsCp61uLS5DVAPaDCuOe4DiLoMLeZBCt7qaXCgwm/vQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:9c:67:2b:7b:09:fb:bc:a2:ea:d5:41:21:b0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Validity
Not Before: Aug 4 07:01:27 2025 GMT
Not After : Aug 5 07:01:27 2025 GMT
Subject: CN=9fa84f572180fdf520b5258bb2ebb9773ad6468a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:fe:0a:df:c3:4b:28:12:41:8b:eb:c7:ac:
50:1c:12:5c:d3:4c:0f:b8:3c:b9:cd:75:d2:1d:17:
14:c5:19:61:9d:28:93:54:a9:45:99:40:e7:2e:49:
c4:78:c6:0b:f7:59:5d:27:20:d1:56:ee:5d:17:b3:
f1:c1:e5:c2:1a:61:00:6a:35:98:02:9a:38:da:a6:
ad:62:33:05:fa:7a:8e:cd:69:e1:8f:ba:2c:a1:73:
56:73:43:53:0f:a9:6a:7c:c4:8e:44:46:42:59:00:
4d:fa:73:59:cf:67:d5:74:41:32:d1:c7:95:e0:a9:
f4:2b:81:ea:b8:e4:fa:0f:b9:39:25:7e:18:6e:ca:
79:71:e4:f4:42:28:3f:72:84:33:65:09:7b:3e:e3:
a3:4e:ef:0f:c6:99:d0:1e:a0:b6:91:b1:71:ff:63:
d8:22:de:3a:98:cb:c8:f0:b0:39:a6:45:c1:a2:be:
f4:72:6a:0e:86:f7:b6:3d:b3:87:a0:4b:b5:e9:c8:
13:be:64:74:43:59:92:81:cf:dd:2a:95:6f:91:6d:
0d:e9:63:07:af:4d:2a:a7:d9:a1:5e:c5:b0:a0:6e:
47:50:03:91:27:49:da:27:a7:d5:99:3a:bc:53:4a:
c9:4f:d3:43:f4:5b:f1:7b:a4:9b:1e:27:9d:c1:3f:
1d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A8:4F:57:21:80:FD:F5:20:B5:25:8B:B2:EB:B9:77:3A:D6:46:8A
X509v3 Authority Key Identifier:
keyid:FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:01:d7:1c:2c:99:18:8e:e6:24:71:98:f4:2b:8f:49:5c:5c:
bd:eb:d8:3f:19:8e:e9:da:a1:52:7a:cb:fe:ae:c6:9e:3d:9a:
f7:23:25:05:28:6a:ac:0e:dc:90:5b:37:64:6b:2e:50:4f:53:
df:78:62:01:69:7f:bb:e5:ac:b3:18:ad:e8:ec:2e:6c:79:0a:
73:52:3a:c1:d1:3c:3a:16:7a:0f:5a:ce:1f:bf:af:4d:c7:a6:
c5:85:45:ed:e8:09:cb:1d:0b:d7:e9:d3:f8:55:2d:22:ad:4d:
5e:ad:ca:60:8e:cd:b7:3f:a6:42:63:f6:ff:69:b1:72:17:42:
d9:4f:7d:9a:7d:0f:52:06:6d:14:09:02:f1:4a:36:46:06:ab:
4f:a9:aa:ac:57:4f:ef:73:dc:94:e5:0f:97:c2:44:61:43:ea:
d7:65:e2:04:c5:ff:04:52:aa:75:93:a5:ff:24:25:a4:3b:34:
7d:89:bf:26:14:35:07:13:e3:7b:e8:c2:79:cd:0d:d1:af:a2:
f9:bf:ba:c0:e8:e1:e0:07:f8:b9:b0:cc:7a:0e:a5:a9:ad:fb:
cc:20:cd:6a:5e:2d:e5:d4:6d:50:8b:77:0b:0a:03:a3:9c:04:
c2:92:e7:97:fe:51:bd:d0:7a:8d:51:3c:1d:3f:3d:96:c2:53:
5a:e8:06:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:48 2025 by rpki-client