Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
File: 9l95H50M9str44nJRWjId0BeUUQ.mft (raw, json)
Hash identifier: Va7R1R+y/p3mZi3URdn1R9ospHRY47pzYflUF9Spx1Y=
Subject key identifier: 17:40:1C:FF:4C:95:EA:EE:AF:50:28:56:D6:C4:E7:C6:7F:CF:C9:5E
Authority key identifier: F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
Certificate issuer: /CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Certificate serial: 01989712F327F26B4623582FAC4106846929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
Manifest number: 0593
Signing time: Mon 11 Aug 2025 03:00:58 +0000
Manifest this update: Mon 11 Aug 2025 03:00:58 +0000
Manifest next update: Tue 12 Aug 2025 03:00:58 +0000
Files and hashes: 1: 9l95H50M9str44nJRWjId0BeUUQ.crl (hash: Ta0KfZJ3gFm3Vigo9sOcE7WndVQqA/8syUEzINu8R+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:f3:27:f2:6b:46:23:58:2f:ac:41:06:84:69:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Validity
Not Before: Aug 11 03:00:58 2025 GMT
Not After : Aug 12 03:00:58 2025 GMT
Subject: CN=17401cff4c95eaeeaf502856d6c4e7c67fcfc95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:da:40:f8:d6:e7:ac:81:6f:de:27:df:17:f0:
17:9e:05:a1:52:6d:c7:4f:b7:9a:e2:ef:0b:0e:82:
8f:71:ef:e1:8c:c7:91:3b:1a:4a:96:0e:b3:d3:5d:
87:15:6c:6d:1f:07:3d:ac:8d:41:23:6a:38:df:b1:
10:d7:2f:d3:7b:15:c8:00:bf:e1:9f:11:c0:8c:52:
8e:93:44:64:df:89:c4:55:3d:27:fb:6c:79:26:78:
f0:c7:73:51:fc:cf:81:84:1c:55:49:6f:5d:20:ea:
31:4c:c1:bd:f1:0a:e6:26:fd:f6:27:09:34:4d:30:
49:9d:01:f7:6b:09:c1:64:75:c0:5f:41:37:d3:eb:
ed:72:de:af:f5:f5:c2:cb:3f:b5:82:51:49:f8:cd:
02:5d:0c:05:ac:d4:90:3a:ee:e6:b2:92:49:db:8b:
5b:3d:16:89:fd:ba:11:6c:85:7b:20:21:4d:b6:63:
bd:45:8b:30:cc:43:b8:f7:0a:d3:eb:67:c4:09:ee:
d3:fe:08:53:5f:44:04:a4:eb:f4:b2:16:3c:ee:4c:
b9:bb:32:92:73:ac:27:c5:49:21:e3:b3:af:6b:53:
d6:b3:b5:16:cd:b0:db:f5:9f:70:67:2c:c3:ca:a5:
2b:59:d5:d2:12:88:5e:8b:56:1a:1b:1b:36:02:fd:
d0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:40:1C:FF:4C:95:EA:EE:AF:50:28:56:D6:C4:E7:C6:7F:CF:C9:5E
X509v3 Authority Key Identifier:
keyid:F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:26:74:28:aa:4f:a2:d2:5c:38:29:59:71:38:10:27:a0:84:
b3:e9:80:06:27:6b:9e:4f:09:d0:73:50:e7:71:11:59:66:62:
a8:c8:8e:75:a0:af:61:8b:13:fa:52:d4:5e:c1:1f:46:b8:28:
46:eb:6a:f1:1a:aa:a0:b2:02:ba:b9:3b:84:f1:ba:00:2e:dd:
0a:a4:70:97:4e:f7:75:81:98:22:d2:61:36:e6:95:70:2b:8d:
d4:4d:48:76:ce:3d:ba:91:d0:30:56:ec:07:24:4f:38:d0:0b:
c9:0b:b1:2b:9b:08:18:ce:07:90:83:fc:95:30:7e:ed:1f:38:
ed:65:7c:6a:3e:e3:50:b4:07:dd:b3:88:31:aa:95:32:1c:22:
35:31:b7:dc:40:e4:4f:c8:5a:90:d5:9f:c2:00:5e:19:ee:f3:
0c:1a:06:09:d7:db:2b:fe:ab:3e:b3:ae:40:70:15:0e:a7:63:
c0:7e:ce:13:1a:12:e3:c2:44:4e:31:18:d0:ab:a5:f7:01:b6:
56:99:ce:85:67:e0:2e:8d:6c:e5:f9:16:62:25:45:2d:8f:d0:
c0:89:76:08:82:10:64:52:f3:91:8f:92:27:1e:4f:31:f5:93:
54:95:f4:80:82:a2:e5:c5:54:65:4d:b6:64:20:e7:f3:04:ab:
38:aa:1b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:29 2025 by rpki-client