Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
File: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft (raw, json)
Hash identifier: cSpm0nVVf057cJf2ToqN2jZwAmpJ/Zr/PdLgktCyWPg=
Subject key identifier: AF:60:50:38:38:1B:F6:6B:66:FE:55:E8:EB:89:E8:45:AD:39:B2:FE
Authority key identifier: F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
Certificate issuer: /CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Certificate serial: 01989D828E9F0BAAB950F3123373B2400284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
Manifest number: 05AE
Signing time: Tue 12 Aug 2025 09:00:35 +0000
Manifest this update: Tue 12 Aug 2025 09:00:35 +0000
Manifest next update: Wed 13 Aug 2025 09:00:35 +0000
Files and hashes: 1: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl (hash: zsfwXeuUKd9v9+EKMgXBwduVYK4MG7LEVl9/Mg8Dqyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:82:8e:9f:0b:aa:b9:50:f3:12:33:73:b2:40:02:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Validity
Not Before: Aug 12 09:00:35 2025 GMT
Not After : Aug 13 09:00:35 2025 GMT
Subject: CN=af605038381bf66b66fe55e8eb89e845ad39b2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:90:8a:0e:24:33:ad:c8:67:a1:86:44:34:93:
79:4d:57:69:2b:dd:5c:2e:40:69:08:1d:07:d6:23:
8b:ac:4d:0f:5a:5d:df:f2:a1:56:73:20:af:2b:8c:
d9:86:3a:82:10:e8:3f:c2:a6:02:46:42:f2:ee:2e:
98:69:06:f6:ee:0e:d7:09:ca:b0:b3:51:0e:6e:12:
25:40:ec:24:14:99:79:18:0b:d9:8e:02:3c:d8:0c:
53:9e:67:a0:a1:0e:dd:f6:76:b6:ae:a1:76:f7:cf:
22:c4:13:28:90:fb:d8:2a:ff:22:9b:72:87:69:8e:
81:ea:e6:0b:d5:30:29:47:dc:f8:71:f4:34:bf:89:
f4:84:69:33:fa:ce:51:af:81:60:7b:e5:7d:f1:8c:
69:30:a4:8c:a7:0b:b8:74:9f:cd:8a:59:6c:75:ff:
d1:8c:8a:49:2c:b2:85:88:8f:05:f6:3f:f6:65:cd:
8f:b7:fa:61:68:84:c0:e2:00:dc:e4:ae:4e:3a:a8:
72:d6:00:26:a3:f5:0b:ea:b4:0e:e0:b9:d8:3d:48:
84:6e:74:63:b2:ef:83:ff:cd:37:22:d6:bd:9b:22:
1b:4e:ff:55:a3:71:b4:36:62:b4:23:56:25:57:6f:
93:fe:95:d4:fb:7d:3a:fe:dc:35:25:87:39:a7:31:
eb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:60:50:38:38:1B:F6:6B:66:FE:55:E8:EB:89:E8:45:AD:39:B2:FE
X509v3 Authority Key Identifier:
keyid:F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b4:cb:fc:d8:93:23:22:44:15:59:f5:6a:00:91:5e:64:92:
8a:4c:79:73:b9:eb:cb:9e:e0:71:86:e9:a9:43:47:0c:dd:f4:
0d:b8:de:3c:ee:c4:3b:2f:91:0f:b4:3c:52:dd:5d:4c:03:84:
f9:a8:9d:1a:25:20:41:12:17:93:a5:87:c1:1e:88:c9:df:2c:
b7:88:8b:b7:3a:a3:53:95:82:cd:f1:d8:6e:16:61:17:e7:86:
d9:b6:02:20:42:db:be:5d:11:16:46:92:3b:e1:05:21:7a:cd:
2b:33:2d:e2:4e:47:e9:7d:a4:5e:6c:c0:ae:8d:43:b8:c6:30:
bc:b7:85:b5:cb:c0:1b:d6:9a:48:15:d6:de:5d:2c:1d:ab:72:
f4:a5:10:01:91:06:cb:06:50:d3:4b:a0:1b:37:96:fe:65:c0:
19:29:f3:24:51:2c:06:dd:7f:36:f3:77:74:cb:ff:d1:0f:54:
a8:fa:e1:dd:aa:9e:6f:b4:e8:3a:fd:e5:2e:fd:20:97:f4:d2:
eb:6d:d0:61:b7:83:91:51:c3:e7:91:1c:0d:09:d9:5c:08:e4:
5a:10:46:e1:9c:70:a5:f7:67:29:8d:ca:da:24:ab:81:66:79:
24:ac:43:3a:3a:f8:84:6c:87:b9:bc:2f:5c:0b:8a:bf:17:d1:
44:bc:cf:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:33:54 2025 by rpki-client