Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
File: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft (raw, json)
Hash identifier: DVMemN8KMlCnQuLLneXybC8E+NOpSsxjaaaB0Ud5vS0=
Subject key identifier: 63:A2:0B:A6:BD:37:AE:2F:83:81:FC:AA:6E:BE:05:D7:6C:EB:41:2C
Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
Certificate issuer: /CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Certificate serial: 019874BDFF651B080802143C0B3A5A162230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
Manifest number: 0F7B
Signing time: Mon 04 Aug 2025 11:01:05 +0000
Manifest this update: Mon 04 Aug 2025 11:01:05 +0000
Manifest next update: Tue 05 Aug 2025 11:01:05 +0000
Files and hashes: 1: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl (hash: wgYL+pWjbRJaqnMYzkS0sizGzYctkCNh8yn+s1NSlY8=)
2: JKDoGMCZzjSndX7Ct7p3CxyKJR4.roa (hash: bo2ZyeRjzsKv0IsXJYurWXlAoWDOMikTk02MIFIPMnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:ff:65:1b:08:08:02:14:3c:0b:3a:5a:16:22:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Validity
Not Before: Aug 4 11:01:05 2025 GMT
Not After : Aug 5 11:01:05 2025 GMT
Subject: CN=63a20ba6bd37ae2f8381fcaa6ebe05d76ceb412c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:89:ad:59:d8:cb:ae:71:13:56:ba:7f:25:
67:c0:24:db:e5:c6:f9:5d:97:46:65:29:fa:f9:c2:
a0:fb:7a:3c:88:a1:20:cd:bb:27:61:1e:7d:94:cf:
17:e4:98:35:7d:bf:2d:d1:20:ac:09:88:61:39:ec:
a5:6b:c0:d9:9f:4d:20:b0:6a:ab:2b:c9:e4:01:d9:
6b:1a:7d:40:f7:1e:20:30:59:d1:57:85:0c:12:ca:
07:29:a7:6b:98:58:17:85:5b:e2:c5:5a:3b:c8:86:
4a:19:8b:ea:7f:8d:a5:3a:c1:8c:54:4e:db:c0:d1:
7f:e2:d0:e3:4a:a2:f3:ca:67:7f:84:49:0e:e1:e7:
e2:46:f5:5d:8e:99:c4:aa:d0:25:4d:32:6b:5b:bf:
00:9a:a1:5b:51:23:c2:14:ff:ef:9b:e3:a6:23:70:
75:57:51:7c:82:93:5d:ca:f3:64:e3:c1:dc:76:79:
24:af:11:a9:c7:9c:47:70:c6:ea:c2:67:b2:f1:c7:
e3:09:27:20:1e:69:2c:60:b6:c0:3d:bd:ac:a3:36:
86:53:ca:aa:2b:68:45:d8:b3:87:03:ba:01:36:09:
af:c5:8c:d7:da:30:ee:65:2a:42:6d:54:d2:b2:97:
9a:75:20:ca:a8:e5:62:1d:2a:f9:a0:7f:9b:5b:f8:
65:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A2:0B:A6:BD:37:AE:2F:83:81:FC:AA:6E:BE:05:D7:6C:EB:41:2C
X509v3 Authority Key Identifier:
keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1e:0a:f6:5b:7c:33:aa:7b:55:d6:ae:4a:01:69:c3:8d:9d:
04:48:e9:bc:e9:1d:6c:bf:e2:b5:54:f5:e0:ac:7b:a6:dc:3a:
b5:0a:53:2c:79:4f:e6:5c:ca:ef:98:b3:88:8c:0f:8c:e3:aa:
f1:3e:c0:cc:00:9a:8f:d4:60:e8:2a:8f:28:be:82:f6:78:7d:
39:86:6e:02:e7:7d:41:6d:4f:99:4c:5d:7a:60:9d:09:13:26:
1b:4d:3e:6d:f8:0a:53:38:ce:69:ee:1a:90:3b:9b:18:29:45:
2f:1f:81:4f:f0:c2:b7:c3:39:7d:74:e2:fe:7e:ec:8d:f3:b8:
17:7a:27:ad:5a:3a:14:56:77:eb:63:d1:33:58:bd:f2:24:9b:
24:72:b0:87:77:e5:d9:6d:02:8d:24:cf:64:da:b8:c6:5c:f3:
91:09:7e:47:cb:30:a5:47:40:e7:9b:cd:28:6c:46:25:43:74:
5e:09:1c:2d:a7:99:cc:11:97:4f:4d:4b:3d:cf:69:2d:3f:79:
70:e5:c1:29:7e:6b:87:4b:74:68:89:cc:0a:b6:2e:b0:8d:e2:
66:7c:92:7a:69:a1:1e:f1:a6:77:a4:73:fc:8a:1c:b3:61:fc:
48:34:2a:d8:26:b5:4c:ad:63:6f:83:92:04:4e:dc:d6:c8:f3:
3b:cc:51:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:05:13 2025 by rpki-client