Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.mft
File: 9z1njq7ZSnm3Qt1DveP1TynbMVI.mft (raw, json)
Hash identifier: l3f0/Q0VbToW5siPO3Tfxpy1GkvnRUcX9NNxw9BBSRQ=
Subject key identifier: 2A:A6:13:0D:CF:94:F1:2B:23:34:7E:1E:F8:09:5F:0B:35:FA:DA:58
Authority key identifier: F7:3D:67:8E:AE:D9:4A:79:B7:42:DD:43:BD:E3:F5:4F:29:DB:31:52
Certificate issuer: /CN=f73d678eaed94a79b742dd43bde3f54f29db3152
Certificate serial: 0198741941AFFB7FE6BFCD49C9B8824CA48F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9z1njq7ZSnm3Qt1DveP1TynbMVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.mft
Manifest number: 11
Signing time: Mon 04 Aug 2025 08:01:08 +0000
Manifest this update: Mon 04 Aug 2025 08:01:08 +0000
Manifest next update: Tue 05 Aug 2025 08:01:08 +0000
Files and hashes: 1: 9z1njq7ZSnm3Qt1DveP1TynbMVI.crl (hash: yFGy/anbzSB7waGECn+2IucwE+Ilxh557reYH/eNMvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9z1njq7ZSnm3Qt1DveP1TynbMVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:41:af:fb:7f:e6:bf:cd:49:c9:b8:82:4c:a4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73d678eaed94a79b742dd43bde3f54f29db3152
Validity
Not Before: Aug 4 08:01:08 2025 GMT
Not After : Aug 5 08:01:08 2025 GMT
Subject: CN=2aa6130dcf94f12b23347e1ef8095f0b35fada58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c0:42:65:c9:16:fb:ac:28:7c:3e:2b:b5:c8:
e4:c9:39:9d:f6:4b:bd:c5:00:6d:d3:df:e0:5a:b8:
d5:d9:e8:f8:13:47:18:82:11:86:4e:6f:4c:27:d5:
4a:78:bb:a4:6c:b9:a2:29:79:4c:a1:06:cc:b4:4a:
b4:9f:be:95:7e:8d:d3:60:b0:d8:95:e8:1b:4f:55:
d2:91:f8:ce:71:15:1b:c2:be:09:28:72:ca:81:80:
39:9f:d0:07:56:23:16:51:e5:c0:48:36:f8:1b:d6:
e6:3b:1a:85:23:a8:2d:93:93:ef:8b:9d:53:a1:bb:
7e:25:eb:9b:df:02:08:ca:5f:24:15:0b:14:c2:be:
ca:61:49:e5:3c:c2:78:70:43:39:9c:e4:d0:2f:a0:
25:22:64:a0:4d:c0:f3:7d:d0:d5:bc:ca:ec:a7:31:
a9:c1:2d:1f:5c:d5:9f:5b:9a:57:88:82:36:40:31:
f5:5c:18:b4:e1:ff:56:c2:6a:98:78:ea:70:4b:c5:
7e:e7:05:17:98:21:65:73:a8:01:13:a1:58:1a:c1:
be:fb:ae:ec:6e:15:b5:40:8b:13:d2:f6:61:f9:37:
c8:84:49:03:01:bb:8f:74:3d:c4:d2:5e:ce:1f:d4:
7b:79:59:4a:b1:69:da:dc:e5:52:ff:2f:2c:d6:f2:
48:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A6:13:0D:CF:94:F1:2B:23:34:7E:1E:F8:09:5F:0B:35:FA:DA:58
X509v3 Authority Key Identifier:
keyid:F7:3D:67:8E:AE:D9:4A:79:B7:42:DD:43:BD:E3:F5:4F:29:DB:31:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9z1njq7ZSnm3Qt1DveP1TynbMVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:82:8a:f9:3a:2f:a4:2f:d3:4e:7a:d7:91:41:7a:1e:84:db:
20:72:ce:e0:53:ef:d2:94:8f:f1:77:e9:4a:4c:5f:fa:99:6b:
38:85:3c:d8:d2:8e:6e:fb:23:a8:da:0f:ca:89:99:65:1b:d1:
16:ae:8c:43:cb:f4:87:4b:ab:03:9b:c7:66:fd:79:19:2a:e1:
79:20:1a:1c:8a:03:3c:0d:79:ae:5d:b5:3a:2a:7d:ca:f6:71:
35:96:00:fa:c8:44:ae:1f:6a:4c:fc:ac:0c:72:2c:f7:99:db:
03:a5:85:36:68:69:d6:b4:aa:bf:61:35:97:b7:cd:e2:6b:f3:
d8:ee:22:6a:26:9f:de:a8:7b:1d:b1:e1:b0:0b:9f:82:11:45:
c7:e6:83:42:43:7c:f0:1a:f0:51:52:f6:81:8d:d5:96:2d:17:
ea:a7:c8:ac:51:ef:61:18:b7:b1:16:3f:d9:d2:35:32:7d:b9:
10:be:31:b0:a7:ac:ad:90:9c:67:11:e7:86:64:bb:84:b7:13:
0d:bc:6a:45:ed:2b:51:6a:9a:73:7c:0f:f4:48:60:b0:42:2f:
ba:2e:92:87:5c:ef:bd:1f:62:87:71:b7:ec:60:fe:7e:e3:85:
b4:c6:44:67:77:56:51:68:16:99:87:f1:e1:d3:67:d0:07:76:
29:0d:78:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:30 2025 by rpki-client