Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier: BxWFqbERPkndhxAlqoJCUh4RT3OoCk8MeDj9l+X6JDg=
Subject key identifier: 8F:5B:95:A4:DF:E9:A9:11:A0:63:9C:E4:40:C4:95:E6:77:37:05:F1
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 019875D040B00007D1B569F8B5C5EE1FE53B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number: 0793
Signing time: Mon 04 Aug 2025 16:00:38 +0000
Manifest this update: Mon 04 Aug 2025 16:00:38 +0000
Manifest next update: Tue 05 Aug 2025 16:00:38 +0000
Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: 0PplHfB5SQZNxQySzoZFP2W1zvRM+ztTa6vNd4u42l0=)
2: UDIr7Vq2PCUxH-_0XwBbpbKATWw.roa (hash: UYUs+F/DqN2VeFPscjP3XMb/LrOdKx6NTNq37FV037I=)
3: u0FRx2j9PY9XanBbcgTrVe_Co_s.roa (hash: 1340NaWcsmaESfpzP0gVpyoyLiK505bktgSP6n8xPII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:40:b0:00:07:d1:b5:69:f8:b5:c5:ee:1f:e5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: Aug 4 16:00:38 2025 GMT
Not After : Aug 5 16:00:38 2025 GMT
Subject: CN=8f5b95a4dfe9a911a0639ce440c495e6773705f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:b0:23:58:96:ed:c9:a3:aa:26:06:37:ea:
1f:7f:9b:65:53:01:8a:51:96:4a:72:90:9d:f6:a3:
ee:29:37:aa:1b:a0:4b:a1:e2:51:c7:58:42:b1:15:
b8:85:64:e2:be:3b:e8:8b:b7:66:44:e5:5e:5c:13:
04:2f:e7:96:06:a0:0f:c7:7a:c2:e4:bb:41:a2:93:
5a:d3:3b:13:00:ca:a2:2e:41:de:22:62:18:f9:16:
9f:83:b6:d2:5f:a9:88:0c:a4:66:a5:f9:cf:d2:19:
8f:7d:1e:3f:cd:a9:47:cd:1c:52:e2:be:37:74:dc:
9b:51:52:d9:ba:c1:e7:92:e7:cb:45:2a:93:d9:0f:
f8:ab:41:30:3c:b3:39:5f:b3:90:c5:20:45:03:2f:
9d:4b:ea:5c:a1:c9:cb:70:cb:e2:c1:6a:85:5f:bf:
ef:3a:e4:c5:d6:83:64:fa:9b:78:68:97:9c:d3:a6:
fc:99:55:bb:7e:44:8a:2b:97:28:95:fe:69:87:4f:
c9:ae:dc:c7:35:76:1d:21:73:11:1c:b9:70:22:7f:
ab:ee:08:43:4f:3e:35:33:dd:99:bc:f2:0f:44:44:
86:14:72:e9:d0:10:04:99:c8:61:d2:92:66:81:ac:
21:33:60:99:75:39:9a:ac:0c:57:5f:c7:ca:d4:88:
90:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5B:95:A4:DF:E9:A9:11:A0:63:9C:E4:40:C4:95:E6:77:37:05:F1
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:89:31:b3:29:51:79:2e:1d:3e:d8:67:29:73:91:38:18:90:
1c:05:14:96:81:c0:c4:c1:c7:3d:76:65:eb:f2:cf:95:56:24:
d4:01:b9:60:c5:a0:91:96:7e:46:83:ba:f3:b5:a1:8e:8c:44:
c2:7f:01:55:f9:f4:67:ca:4e:4e:95:da:4e:82:b0:5f:90:ad:
a9:22:ad:a1:7b:5e:07:9a:4d:8f:d0:f2:5d:31:d2:fe:98:a6:
d0:de:e2:cb:69:59:b4:ed:55:f4:bf:cc:63:52:0c:cb:6c:d2:
82:ef:b4:e5:bb:74:09:5f:4a:f6:fd:ae:54:34:7d:ec:0f:33:
2b:ec:1d:1e:8d:ba:03:19:c5:a5:91:29:a9:ed:fd:8c:66:b4:
41:22:53:67:4d:2f:fb:95:83:09:a3:a1:90:5c:15:42:90:01:
d0:d4:4d:a5:06:b5:15:5d:4b:bf:38:89:55:d1:13:2e:61:a9:
99:d4:11:00:52:47:eb:e0:6c:8b:bd:ce:64:28:45:04:33:8b:
2c:cb:3c:45:e1:f8:19:eb:1b:93:75:8a:71:27:ef:d3:46:b0:
f3:42:69:f0:f3:b4:71:b5:9b:fa:22:91:f8:55:34:a4:e1:99:
8b:87:1b:71:19:98:7a:d6:9a:3d:af:48:de:b2:8f:5e:a5:35:
2a:16:23:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:11:46 2025 by rpki-client