
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
File: 9keQtSf6QLqj8ts_oqFL-UzSgv8.mft (raw, json)
Hash identifier: bk3Ja6Sp9wEIBR0UsOyNc38ws8wOSfakbQMF2IwCm08=
Subject key identifier: 60:98:93:19:8B:0D:C5:17:79:9C:1B:D3:19:35:98:D4:63:E4:E0:13
Authority key identifier: F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF
Certificate issuer: /CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
Certificate serial: 019874BDC96EADA395384A2D3E1332A54347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
Manifest number: 0340
Signing time: Mon 04 Aug 2025 11:00:51 +0000
Manifest this update: Mon 04 Aug 2025 11:00:51 +0000
Manifest next update: Tue 05 Aug 2025 11:00:51 +0000
Files and hashes: 1: 9keQtSf6QLqj8ts_oqFL-UzSgv8.crl (hash: j+TqOqzTUtStmM9y4m2tyEOwJLXo6zRt9yMWGCkaOlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:c9:6e:ad:a3:95:38:4a:2d:3e:13:32:a5:43:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
Validity
Not Before: Aug 4 11:00:51 2025 GMT
Not After : Aug 5 11:00:51 2025 GMT
Subject: CN=609893198b0dc517799c1bd3193598d463e4e013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:7f:bb:a4:17:dc:20:2f:ba:49:bd:aa:71:
b9:36:56:07:ee:39:8c:6f:ef:c2:9f:50:b6:43:f3:
bc:c4:c7:e5:78:d7:29:45:59:54:06:7d:a8:fb:41:
cf:2f:ad:e3:e4:0d:c5:8b:84:18:fc:b4:5a:4c:ca:
8d:ef:dc:32:d8:a9:af:9c:cb:dc:39:18:53:2a:0b:
ce:63:56:73:3b:e8:e7:bc:a2:6d:0e:6e:c0:f4:ba:
d2:31:b8:11:82:4d:f6:fa:c9:f4:b4:36:dd:7d:db:
68:b8:06:68:19:56:d1:c0:f4:c3:8f:1b:94:4a:cf:
1a:83:67:74:57:c0:97:e0:42:d8:79:85:ad:ec:4e:
c5:34:e0:e3:8d:3b:8d:84:98:fb:7e:df:88:a9:81:
1b:12:79:15:23:c6:fa:60:fb:c7:78:f7:a0:dd:07:
95:d3:f0:a9:74:32:61:67:4e:78:18:de:77:84:41:
d1:0b:bc:11:da:93:24:9d:5d:8d:53:f4:21:86:3f:
cf:ee:29:a4:f3:e3:1d:25:13:d4:72:0c:9a:c8:fb:
5d:98:8a:0d:31:b5:da:58:1c:aa:42:c4:45:08:36:
bc:ae:81:78:ca:d3:47:cd:da:c9:82:12:22:8c:2f:
b9:1e:2e:8f:25:a5:93:c2:b3:9b:a3:a9:fc:21:85:
09:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:98:93:19:8B:0D:C5:17:79:9C:1B:D3:19:35:98:D4:63:E4:E0:13
X509v3 Authority Key Identifier:
keyid:F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4a:89:c4:d2:04:72:e6:da:0d:29:7d:cd:f4:16:39:03:34:
c3:8a:e0:4d:b9:2e:b9:d9:b6:77:f2:59:6b:fb:92:fc:f1:41:
7c:7a:e6:3d:8f:75:55:ed:b0:b8:fa:85:ee:a7:38:2a:bb:c7:
24:f1:b4:6b:42:9e:98:ea:da:87:6d:b8:4e:a4:50:70:41:79:
f4:ec:a3:03:f2:93:a5:3f:9d:9a:85:f9:93:45:6d:89:77:60:
c7:f5:83:16:ec:98:60:0e:a7:88:b0:9c:f8:d8:ab:db:a4:e1:
2b:fe:cc:f6:09:b7:5a:eb:f1:60:e3:9a:cb:cf:30:10:4f:2d:
b0:35:f3:d9:d9:a1:c3:1a:6c:5c:59:2b:24:c7:cf:82:b0:b4:
b3:17:64:47:59:af:a5:1e:1d:f7:f5:cb:21:21:7d:96:50:43:
77:ba:bd:e8:14:4e:45:0e:c7:b7:86:eb:68:34:ca:33:5e:03:
d7:ee:2e:0e:5e:53:59:14:59:e6:17:28:96:23:a1:31:33:ba:
8c:fb:13:72:e5:d4:b4:99:9e:6e:c9:db:b8:57:44:76:76:1c:
1e:c8:3b:dd:c2:37:16:12:93:5a:ba:a1:93:6b:ba:d1:09:14:
8f:c8:ab:5b:d0:fd:2c:c1:e2:70:42:76:d5:ec:0e:2d:8d:18:
86:68:bc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:34 2025 by rpki-client