Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
File: 9TK715EK8VrXBk20ptO9ZKfoJ8E.mft (raw, json)
Hash identifier: 1ItRej1We3W76hVek5fcyJ1wIRycuLpd6xE2T869U/8=
Subject key identifier: E2:02:C1:56:9F:3E:D1:69:19:79:3B:EE:32:E4:37:C7:68:21:40:D2
Authority key identifier: F5:32:BB:D7:91:0A:F1:5A:D7:06:4D:B4:A6:D3:BD:64:A7:E8:27:C1
Certificate issuer: /CN=f532bbd7910af15ad7064db4a6d3bd64a7e827c1
Certificate serial: 01989336DBE371652CC11AA7C8F87F0969B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
Manifest number: 04AF
Signing time: Sun 10 Aug 2025 09:01:42 +0000
Manifest this update: Sun 10 Aug 2025 09:01:42 +0000
Manifest next update: Mon 11 Aug 2025 09:01:42 +0000
Files and hashes: 1: 9TK715EK8VrXBk20ptO9ZKfoJ8E.crl (hash: wgmmUg8zmzCH+08C6NY7Av1piRwX7D/N6cLW9HE/yos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:db:e3:71:65:2c:c1:1a:a7:c8:f8:7f:09:69:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f532bbd7910af15ad7064db4a6d3bd64a7e827c1
Validity
Not Before: Aug 10 09:01:42 2025 GMT
Not After : Aug 11 09:01:42 2025 GMT
Subject: CN=e202c1569f3ed16919793bee32e437c7682140d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:39:6b:12:0e:5f:37:a0:75:99:fa:15:ad:00:
54:4d:81:e2:97:ad:53:14:f3:19:0d:c7:52:82:1c:
06:ad:7f:75:a6:57:2a:a8:6e:15:a3:be:48:d9:80:
c8:83:4c:11:ce:52:e2:c9:07:da:31:e3:77:63:58:
73:b0:ec:ed:29:cf:02:57:95:4b:c1:06:61:42:51:
45:84:db:c4:7e:51:aa:3b:c5:cb:6c:7c:68:ef:5a:
38:1f:f3:8e:f1:bc:f6:e8:7e:e4:f5:6e:c8:09:e0:
a9:0e:a3:80:50:32:13:56:ac:b3:33:d6:59:6a:e4:
a1:70:be:82:8c:a4:ce:ca:f6:f8:fa:ff:71:71:9f:
fe:e8:8c:be:57:11:e3:c6:1e:83:7e:75:da:c4:46:
da:3d:56:f2:de:c3:b7:67:31:7a:b5:26:ae:ec:ac:
ff:21:48:64:88:43:fb:45:02:cc:d4:1f:6a:35:f4:
17:93:a2:75:eb:40:21:f0:39:53:c2:fd:a5:a4:90:
27:ee:c1:c7:81:87:6f:f1:5c:d7:8c:d0:1b:f8:b9:
21:63:2f:b3:e6:d8:1b:d9:0c:db:49:87:54:c5:f4:
c1:60:f6:f4:0d:2f:14:a5:fc:4e:2a:ee:63:13:06:
da:89:17:d1:0c:92:b1:07:db:1e:63:73:f1:c6:4e:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:02:C1:56:9F:3E:D1:69:19:79:3B:EE:32:E4:37:C7:68:21:40:D2
X509v3 Authority Key Identifier:
keyid:F5:32:BB:D7:91:0A:F1:5A:D7:06:4D:B4:A6:D3:BD:64:A7:E8:27:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:03:cb:dc:a3:83:a8:f9:af:47:24:2e:d8:ad:c6:52:51:55:
e1:aa:c8:0b:69:15:de:33:88:32:22:c6:42:07:37:aa:29:38:
dc:08:67:31:07:75:62:24:97:aa:07:cb:7e:ee:3b:b5:45:f5:
42:1b:7a:72:c1:19:6c:d5:ec:72:8e:87:27:db:ff:19:14:09:
8a:0b:1a:75:72:2a:60:c0:d0:f4:1d:84:85:1a:d3:f5:44:5d:
2d:17:da:3f:38:fa:ed:6d:9b:51:47:6e:d1:6b:e4:5d:61:1f:
5e:a0:75:30:01:16:fd:96:e2:c4:95:e3:e9:a7:ec:92:53:fd:
3f:5c:5a:8f:69:a0:1b:58:1c:98:9a:e7:e9:80:9d:9a:57:70:
e1:47:71:d3:b8:41:c2:8a:75:81:0c:9a:23:70:58:91:c5:a1:
e5:85:46:9b:13:4b:4c:53:3f:a9:6a:03:33:88:89:d8:7a:f5:
8c:ef:02:73:3b:92:58:98:2f:b1:79:07:a8:f5:d8:d9:b8:49:
f5:50:8f:79:74:43:bc:72:39:cf:1e:c1:31:d1:d1:ef:fa:2b:
5d:4a:49:53:ef:0b:3a:5f:82:1a:82:37:71:6e:9a:82:b8:ff:
48:d4:57:e6:cb:e5:ae:68:eb:7d:27:8d:c7:f5:d9:4a:92:89:
c9:be:db:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:31 2025 by rpki-client