Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
File: 9kixVYLTS9UXCp3RO4EyW6uuXjo.mft (raw, json)
Hash identifier: KvAkq5QyCRPQshFusf8ztQrBEGCi6xozAW4b/oESpCg=
Subject key identifier: 3A:EE:DD:79:7A:BC:98:27:9F:BA:EE:B5:0E:75:E0:6B:C4:62:3B:48
Authority key identifier: F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
Certificate issuer: /CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Certificate serial: 01987AF73ACA7C9B10A3260FEFA5773843BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 16:01:19 +0000
Manifest this update: Tue 05 Aug 2025 16:01:19 +0000
Manifest next update: Wed 06 Aug 2025 16:01:19 +0000
Files and hashes: 1: 9kixVYLTS9UXCp3RO4EyW6uuXjo.crl (hash: recKiPW45sb9o2JIJRFmK6izyYjuPZTpOfLo1KiuP8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f7:3a:ca:7c:9b:10:a3:26:0f:ef:a5:77:38:43:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Validity
Not Before: Aug 5 16:01:19 2025 GMT
Not After : Aug 6 16:01:19 2025 GMT
Subject: CN=3aeedd797abc98279fbaeeb50e75e06bc4623b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:5f:63:89:7e:84:9c:53:71:5d:e2:40:a6:
30:52:6b:a3:66:1b:6e:1b:dd:e8:8b:0d:b1:f1:21:
a8:28:6f:c3:ba:0f:ad:bf:e3:fb:44:de:f1:38:98:
9a:76:97:31:29:2f:9b:30:b1:1f:c0:b1:da:c4:ae:
de:de:d1:64:6e:bd:07:96:99:67:ef:5a:f4:4f:54:
51:db:e5:08:2b:9c:b3:5c:3c:17:2c:60:c5:bd:c9:
0a:1a:ab:7a:09:60:23:5b:34:a5:ce:df:5e:56:ca:
60:f9:6d:d9:98:9c:2e:ef:41:46:f1:ba:61:99:5f:
c1:4d:bb:4d:0d:6a:83:4f:89:f3:06:4c:73:c7:0f:
4d:82:3b:9c:a8:5d:6f:0a:5d:7d:04:10:68:5c:ce:
35:fa:17:b3:f0:b7:64:a9:84:d4:b9:43:1e:26:6a:
92:e3:cc:fb:ec:fa:08:89:3b:c2:e9:2b:0a:f5:41:
91:34:e7:89:c2:49:66:42:1c:9c:16:40:ce:cc:73:
62:90:8c:cd:ac:fa:3c:cf:36:ba:92:57:af:fb:27:
d7:2f:6e:7d:e5:60:a9:22:5d:32:25:bf:16:99:5e:
62:c3:42:c1:be:a8:aa:72:2c:e1:e4:57:17:0f:b5:
38:5e:c7:36:98:0e:43:2c:2a:53:64:1d:fc:ec:ea:
53:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EE:DD:79:7A:BC:98:27:9F:BA:EE:B5:0E:75:E0:6B:C4:62:3B:48
X509v3 Authority Key Identifier:
keyid:F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:70:8a:fb:2f:5e:17:4f:78:22:ff:f1:45:17:e2:23:2b:7d:
60:70:31:40:d8:d1:73:43:23:e5:02:6d:1a:d5:55:27:69:4d:
a6:d4:38:b2:3b:95:b3:61:d1:30:2a:2c:0d:aa:df:d3:e9:58:
c0:2e:36:ed:a0:b0:01:ba:7b:b5:26:a9:01:db:84:c9:b9:38:
f7:a6:8f:f3:7f:cc:12:fe:6c:8d:21:72:c9:60:2e:fe:b0:69:
2f:6d:21:82:86:a7:a3:c3:1d:8d:fd:0b:7e:64:3e:24:28:aa:
f2:96:90:87:95:ae:9a:39:54:d2:cb:66:30:88:30:98:fb:1c:
66:c3:60:03:b4:0e:40:78:d4:ea:a9:fa:e0:72:a8:47:79:95:
57:9c:e6:79:8f:7a:16:d5:22:65:ef:78:4e:3f:1b:f8:51:02:
71:39:81:2a:46:03:62:b2:22:a0:ed:1e:a3:bb:f9:ce:66:ef:
85:b4:81:ee:f9:c9:76:cc:24:76:8f:3e:56:6b:c6:c1:34:b2:
f1:60:93:be:51:17:99:36:f5:95:8f:70:fa:be:cd:d8:00:21:
d2:56:0a:67:ab:05:1e:b5:4c:cd:bb:b9:a9:e0:dc:3b:83:80:
ac:04:6e:fd:ca:ab:04:66:ee:21:33:31:8e:06:d4:52:11:93:
ae:52:39:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:36:12 2025 by rpki-client