Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
File: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft (raw, json)
Hash identifier: PDLrccNGPI7y3vZ7rDYNBv7F6x70dcsZDJrLhRUV278=
Subject key identifier: E8:43:E9:BE:65:80:03:31:C1:88:9D:C7:4A:33:C7:ED:33:CA:00:02
Authority key identifier: 73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
Certificate issuer: /CN=73d85f8438d73b5668e89cc692646f9487965fa9
Certificate serial: 019896A6A901B4264EA3E2A4C305265F8CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
Manifest number: 01EC
Signing time: Mon 11 Aug 2025 01:02:41 +0000
Manifest this update: Mon 11 Aug 2025 01:02:41 +0000
Manifest next update: Tue 12 Aug 2025 01:02:41 +0000
Files and hashes: 1: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl (hash: /WvS4QxxpujY4mJFotn4zGQjGFeTTckhFZ3RZ5/PyKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:a9:01:b4:26:4e:a3:e2:a4:c3:05:26:5f:8c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d85f8438d73b5668e89cc692646f9487965fa9
Validity
Not Before: Aug 11 01:02:41 2025 GMT
Not After : Aug 12 01:02:41 2025 GMT
Subject: CN=e843e9be65800331c1889dc74a33c7ed33ca0002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b6:a8:04:14:e2:f2:36:7f:46:21:61:ca:4f:
ed:0f:f2:34:f1:cc:22:34:c7:21:57:dc:01:66:5a:
47:03:53:b9:b5:87:b6:cc:09:37:b4:00:fd:86:14:
20:e2:7b:df:10:5a:ee:15:5a:32:a1:ac:97:33:17:
2d:75:66:d9:87:b0:34:59:a7:5e:f8:bc:91:64:5f:
df:bf:2d:c8:2b:9b:7b:2b:4f:11:66:02:b4:67:a5:
19:88:64:4c:e7:9c:75:61:c1:eb:85:9e:6f:ef:0a:
6d:f9:59:c5:4e:5d:0e:07:98:ae:b1:fc:db:4c:24:
56:1b:fb:17:18:4d:eb:99:17:1b:d4:b9:2d:c2:60:
02:bc:bb:4b:47:8f:c5:81:0e:dc:21:0c:4e:e9:f3:
1d:67:80:0c:a1:0e:8f:85:ba:74:3a:95:a6:3e:f5:
d5:c0:da:7c:0d:9c:a2:a1:63:bc:66:19:00:3a:f7:
9c:85:32:f2:b5:f5:9c:89:79:36:01:0a:9c:77:78:
c1:d5:64:e0:8a:8a:7d:ae:3b:0f:64:64:30:d5:64:
75:c5:ea:65:75:01:6c:16:6a:dd:60:3a:a1:c1:01:
13:f7:8e:71:f4:71:65:35:07:7f:41:33:35:93:29:
12:74:c1:d7:9a:f5:60:2d:c0:31:51:34:3a:f2:c4:
cb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:43:E9:BE:65:80:03:31:C1:88:9D:C7:4A:33:C7:ED:33:CA:00:02
X509v3 Authority Key Identifier:
keyid:73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0d:2f:82:ef:c2:24:ac:12:b8:d5:c2:91:3b:c1:07:d7:5c:
27:e6:6d:b1:d8:8e:9a:d6:be:81:5e:a3:3c:c9:01:8b:89:b7:
6b:c2:d2:58:0d:f8:dc:56:25:99:ee:f1:d9:52:e3:ab:bd:3f:
bf:af:38:a6:cf:a8:c1:67:03:1c:93:1e:86:74:0d:c5:ef:50:
48:50:cb:a9:9c:8b:48:39:7c:e2:8b:1d:09:90:22:61:87:49:
d1:89:db:e9:53:23:f9:05:a0:e4:bd:da:9a:30:2c:81:d9:12:
83:23:e3:60:d2:1e:e8:51:44:11:31:21:c6:2e:d4:32:d9:30:
3b:ca:03:ed:8d:ca:d6:8e:c4:1d:f6:e8:32:b2:db:6e:09:b4:
68:8e:07:f6:28:3b:90:c0:ae:b3:ae:70:2d:de:72:77:ec:ba:
09:7a:2c:fc:3d:6a:ea:f9:d0:5a:ea:9b:85:17:09:e1:02:06:
ec:2a:ab:0b:f3:35:d0:fa:41:86:97:c7:06:f3:a2:5f:94:73:
1a:3f:1d:16:1d:54:42:35:3a:53:e0:63:19:77:05:5b:23:27:
4d:e1:fa:5c:65:38:11:d7:72:2d:52:dd:2c:22:26:44:c0:2f:
46:c9:40:31:92:3b:fc:16:e1:7f:15:5d:17:7d:b4:4a:74:2c:
7e:fd:b1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:45 2025 by rpki-client