Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
File: 9URgWW1tUyQB3jE9-JA2blN21gI.mft (raw, json)
Hash identifier: LtlAKcVxgeBCaBtcr1z8FHt5YaZz1En2ipCHA23t8/0=
Subject key identifier: D9:92:B3:C8:07:87:FD:90:94:6F:65:C7:9E:98:86:AA:E1:4C:27:BB
Authority key identifier: F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
Certificate issuer: /CN=f54460596d6d532401de313df890366e5376d602
Certificate serial: 0198933631149D29A224E016B6D612F9366F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
Manifest number: 05F9
Signing time: Sun 10 Aug 2025 09:00:58 +0000
Manifest this update: Sun 10 Aug 2025 09:00:58 +0000
Manifest next update: Mon 11 Aug 2025 09:00:58 +0000
Files and hashes: 1: 9URgWW1tUyQB3jE9-JA2blN21gI.crl (hash: zYuRplvPAmRdYV/+sjJ+nl0QRBqaV51ZUyO5u+djZGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:31:14:9d:29:a2:24:e0:16:b6:d6:12:f9:36:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54460596d6d532401de313df890366e5376d602
Validity
Not Before: Aug 10 09:00:58 2025 GMT
Not After : Aug 11 09:00:58 2025 GMT
Subject: CN=d992b3c80787fd90946f65c79e9886aae14c27bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b3:29:32:3c:78:7a:bd:37:67:a3:02:d2:ac:
ab:a5:b4:b0:34:98:db:2f:ca:4b:24:40:f3:8c:53:
a7:ba:b7:79:86:e4:80:27:f6:cd:3c:fb:44:e6:5a:
56:98:29:43:01:45:a4:2e:f2:56:77:96:67:9c:f4:
de:5a:6a:5c:9c:c7:83:69:24:54:02:80:a2:7d:47:
60:21:9e:8a:27:0d:b8:38:ec:30:b5:51:9f:b8:30:
b7:be:04:b5:3e:d4:23:c0:08:f8:03:83:b7:15:b5:
68:e8:f1:be:35:15:fd:10:f7:cd:65:69:f3:d6:0f:
01:a5:a4:cb:8e:7b:2b:09:a9:81:e7:a7:7e:ed:c1:
e0:c7:42:80:f8:0a:04:71:73:fe:a3:45:f2:9a:9e:
c5:09:ed:6d:6d:9e:70:a2:07:ed:56:c7:0d:f1:df:
52:a9:8b:dc:da:a1:18:ad:e0:14:42:d5:45:1d:29:
56:c8:48:1c:6f:cf:e7:07:5d:79:08:1e:9b:c2:f9:
f9:1b:ad:6d:cb:a3:56:4d:9e:4c:f6:cc:18:28:53:
54:81:e2:5f:b0:4d:b1:c2:06:07:97:4b:d8:c8:cf:
f0:85:2b:e0:4e:82:fd:96:05:d2:4d:08:94:58:dc:
41:c4:c5:36:a2:24:63:c2:f3:9a:3f:bf:0f:25:74:
9d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:92:B3:C8:07:87:FD:90:94:6F:65:C7:9E:98:86:AA:E1:4C:27:BB
X509v3 Authority Key Identifier:
keyid:F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b1:4a:fb:0f:65:43:01:ee:53:44:df:c9:b8:1e:38:11:c0:
73:cb:1e:ac:2c:b3:88:ca:29:29:19:64:48:03:b2:bc:6d:34:
8b:a1:21:ae:eb:91:2d:63:8a:ba:ed:1d:2f:7e:92:63:23:46:
50:53:d6:da:05:fa:1f:0b:d0:eb:fe:9d:d2:0f:be:90:44:a7:
40:d4:9f:c0:7f:48:de:ee:c0:5f:58:40:c6:75:66:10:fe:28:
82:39:a8:6c:58:1d:da:67:b2:74:09:06:56:f7:27:39:dc:1d:
0e:a3:3c:f5:57:4e:8f:6f:14:85:1c:7b:ee:09:6f:89:17:a1:
46:0e:7c:03:1d:9e:ff:6a:eb:7b:5b:eb:5e:6b:71:30:03:77:
3b:d8:56:4c:a4:62:ea:d2:4d:52:e3:0c:2a:06:f7:68:01:04:
1d:60:63:26:9c:da:17:09:13:04:12:1f:96:ce:69:5b:b1:f8:
2c:5e:db:a6:12:10:29:de:93:95:26:a0:06:02:d4:cf:84:5e:
13:a3:73:49:69:7b:f7:7a:28:07:8d:db:8d:1c:9b:48:60:df:
f3:e6:0b:e2:31:27:7e:c7:57:51:78:ce:e6:fb:e5:2f:38:28:
68:64:58:d8:72:b3:fc:db:84:5d:d6:e4:3c:f7:9e:1e:68:70:
fa:31:a2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:06 2025 by rpki-client