
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
File: 9zHDObGGFyK__oZyGDFM4SlcPIU.mft (raw, json)
Hash identifier: 8SSGJoAfaGtKLjBghAT631GNq+tw5rnJSyqH7Ad6p4M=
Subject key identifier: 21:9F:3D:53:D6:9E:F4:84:C2:5F:6D:F7:27:B8:58:33:B2:C2:7B:06
Authority key identifier: F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85
Certificate issuer: /CN=f731c339b1861722bffe867218314ce1295c3c85
Certificate serial: 0198744FA1FF7F39EA18D97A05EDCA1E43B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 09:00:32 +0000
Manifest this update: Mon 04 Aug 2025 09:00:32 +0000
Manifest next update: Tue 05 Aug 2025 09:00:32 +0000
Files and hashes: 1: 9UQ0_3_mS41_iKwg1qjiuH2k8kg.roa (hash: kiU7QM0C1mwEaOQNcthFFJZevyv4iXHm9WMDBPMiwH8=)
2: 9zHDObGGFyK__oZyGDFM4SlcPIU.crl (hash: jsPxLAS+aPybBdbwUZRkiVlOrhJv73zq+pMRLEIZ+S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:a1:ff:7f:39:ea:18:d9:7a:05:ed:ca:1e:43:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f731c339b1861722bffe867218314ce1295c3c85
Validity
Not Before: Aug 4 09:00:32 2025 GMT
Not After : Aug 5 09:00:32 2025 GMT
Subject: CN=219f3d53d69ef484c25f6df727b85833b2c27b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:33:d9:b7:bc:6e:1a:08:56:04:9a:09:61:
de:86:a8:0e:a3:0a:b3:c3:e7:16:ea:84:93:16:85:
88:0c:0d:37:9b:a6:c5:83:f5:8d:6d:77:2d:7a:0b:
3a:6b:e2:c0:bc:a5:36:2e:6b:14:84:8a:aa:ac:a2:
50:a7:08:e7:fd:b8:0d:47:57:53:f4:b6:d2:0d:72:
91:ed:45:3b:fc:5e:5b:ba:71:65:fb:00:b7:70:a5:
32:11:73:3a:e1:28:65:b0:29:31:81:2f:51:ef:16:
59:11:46:81:75:3d:43:7a:e3:2c:13:76:6c:3f:7e:
97:99:c2:d2:f7:1d:4b:db:8f:ed:ad:35:5d:0d:83:
2f:02:fb:c5:ef:c8:ca:6d:45:5b:90:b3:83:66:c7:
2c:4a:64:a1:01:02:f9:5f:e4:2b:a2:00:d9:b7:4f:
83:ec:be:77:74:88:72:4b:99:26:ee:1e:07:36:16:
3a:2c:ad:3b:22:26:97:46:c7:e7:29:f8:bf:18:da:
ce:9a:5b:78:f0:25:53:ee:f2:7f:f6:66:d8:48:96:
4a:80:1d:d1:9b:3a:05:19:77:cf:f1:29:52:b5:df:
d0:7f:ff:e5:34:1f:38:c8:5e:f7:99:08:ba:e9:eb:
d6:7d:94:82:ba:38:7a:5a:87:97:fe:9a:a0:97:5e:
af:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9F:3D:53:D6:9E:F4:84:C2:5F:6D:F7:27:B8:58:33:B2:C2:7B:06
X509v3 Authority Key Identifier:
keyid:F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:24:4c:e7:22:7a:f4:97:eb:a0:b9:5e:8c:92:83:3b:f9:54:
c1:37:4e:68:e6:03:9a:3d:ff:c7:0c:0f:2f:4c:da:11:77:91:
fc:f9:a7:b7:fa:f6:bb:76:58:ee:ab:57:6a:93:f1:cd:04:d0:
4f:dd:d2:44:e4:c7:e0:a4:12:9f:dd:8d:b0:cd:ff:f2:05:5b:
c0:6f:38:71:17:1f:bd:fd:a6:8e:4c:c8:4c:9f:6a:5a:f5:1b:
ec:51:c1:7c:1c:6b:14:b1:30:fc:0c:f3:86:1b:e1:66:e9:4b:
d6:ba:9f:f1:43:d2:87:37:3f:40:0c:31:19:98:fa:9d:c5:eb:
69:03:8f:d9:22:db:e9:d9:d0:83:0a:20:43:f5:df:91:e0:f7:
dd:a3:5c:32:54:59:08:53:e1:8b:d1:42:e3:bc:80:d7:a6:c5:
05:2b:f6:92:1b:6e:09:c7:8c:0a:7e:62:c9:da:fb:e6:69:31:
41:30:f2:66:2f:22:28:2b:11:ca:9b:f2:e0:ce:15:4e:e0:0c:
87:93:56:86:79:61:8d:17:7c:72:be:3d:ef:f5:13:19:29:1c:
1c:47:53:6b:e3:eb:1d:05:3c:18:ab:03:01:ac:c7:54:78:25:
ea:72:c8:98:31:93:21:5f:39:a3:c1:4e:d7:70:9f:a4:ef:b9:
30:b8:bc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:13 2025 by rpki-client