Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
File: 9wC7WRwCd4gZrqH1uPZEFns9fC4.mft (raw, json)
Hash identifier: upAEDB+dz1HtobRse5+DRkF+v1mqQ39RHTRTn3bWZ+M=
Subject key identifier: A5:5E:2B:03:30:76:1E:A5:E5:8F:5C:01:77:11:3D:3A:A6:FD:D9:A2
Authority key identifier: F7:00:BB:59:1C:02:77:88:19:AE:A1:F5:B8:F6:44:16:7B:3D:7C:2E
Certificate issuer: /CN=f700bb591c02778819aea1f5b8f644167b3d7c2e
Certificate serial: 0198936D75363CDEE685A6A2E93A3A2B0673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
Manifest number: 0F27
Signing time: Sun 10 Aug 2025 10:01:20 +0000
Manifest this update: Sun 10 Aug 2025 10:01:20 +0000
Manifest next update: Mon 11 Aug 2025 10:01:20 +0000
Files and hashes: 1: 9wC7WRwCd4gZrqH1uPZEFns9fC4.crl (hash: RRffnNz/lyrIcpadHQ1hk0odX/XhTplLc4XVjDo0UgY=)
2: K4Gb3AwaGq3gzkyO-1MyxTIk3gg.roa (hash: DCLfidqg0r72HrTsNGYvW13eljCKxYuCqdsXQsy2ahc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6d:75:36:3c:de:e6:85:a6:a2:e9:3a:3a:2b:06:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f700bb591c02778819aea1f5b8f644167b3d7c2e
Validity
Not Before: Aug 10 10:01:20 2025 GMT
Not After : Aug 11 10:01:20 2025 GMT
Subject: CN=a55e2b0330761ea5e58f5c0177113d3aa6fdd9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:7c:96:80:05:94:80:0f:53:f3:45:19:48:
6a:d5:05:95:58:cb:2d:e5:de:c4:9a:4d:62:ec:3d:
42:24:49:8d:f0:e9:0f:2e:42:5c:8f:ce:b0:32:fc:
8a:01:df:bf:dd:ed:78:8a:91:fa:f6:e2:c9:9e:e5:
e7:2e:13:76:13:3e:50:bd:34:f1:ad:88:b1:e5:2d:
4b:0e:29:83:93:c0:25:e8:0b:85:fa:94:d8:e6:e0:
3a:fb:b7:32:d8:de:bf:5f:0e:1b:c5:da:85:0c:db:
e1:3d:2f:f9:7e:eb:eb:39:e8:8e:de:34:52:b7:9e:
50:4e:0b:71:33:35:3c:d8:ea:ab:d8:4c:3d:32:30:
bf:04:c7:3b:e6:cc:fd:65:c8:0b:21:28:00:09:dd:
46:22:19:69:2d:3f:03:5c:2a:56:45:a2:59:5e:45:
bc:7a:9b:a4:81:28:ff:ea:ec:34:4f:06:60:70:1f:
39:d7:01:d9:54:0e:e3:17:4f:c5:29:d4:a7:b4:60:
c1:f9:a2:57:4a:96:f4:a3:23:7e:7c:7d:68:30:33:
7c:78:fd:c7:7a:7d:35:25:64:7a:84:af:91:2c:fa:
56:d9:46:94:d0:03:b2:6f:47:75:df:58:1f:8f:be:
02:97:c1:7b:10:89:18:22:06:bf:f1:86:1f:de:49:
63:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5E:2B:03:30:76:1E:A5:E5:8F:5C:01:77:11:3D:3A:A6:FD:D9:A2
X509v3 Authority Key Identifier:
keyid:F7:00:BB:59:1C:02:77:88:19:AE:A1:F5:B8:F6:44:16:7B:3D:7C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ea:a7:e3:1a:d3:af:bf:d3:c8:eb:c3:c6:f2:11:4a:d6:56:
c9:2a:84:38:76:5c:a0:73:e6:a0:33:2a:7a:cf:88:1e:03:cc:
0d:ef:a6:70:69:8d:f3:c9:df:31:89:4d:31:07:a7:22:56:08:
01:8d:2a:9e:9e:5b:29:5d:39:a3:25:42:68:3b:c9:06:a9:81:
ed:c1:5e:84:49:50:24:63:e8:cd:72:44:ac:76:bb:99:db:17:
8b:a5:e4:ae:cd:e1:92:10:f5:21:b2:96:3f:fc:c5:45:35:e0:
dc:bf:d9:49:fc:49:2e:ab:18:73:7c:09:fc:14:59:66:9b:be:
a8:91:75:d1:5b:d2:78:9d:dd:10:f7:e7:b2:4a:0f:6f:f7:1d:
2f:bf:3e:77:1d:5d:6e:db:47:ca:4c:33:43:29:c5:b7:29:17:
dd:18:03:10:7b:fc:41:ef:a6:1b:2b:71:f5:0b:ba:15:1e:de:
0a:36:1b:a0:64:4b:77:e4:21:ad:89:b8:ad:2c:5b:f4:83:89:
ba:aa:28:7a:7c:74:68:48:10:b4:22:97:7a:26:a1:e7:09:f4:
f6:af:5a:84:38:c0:f1:21:a3:90:49:cf:20:27:09:42:1f:25:
84:3c:92:f0:a7:86:b5:6e:a2:57:09:69:bb:d7:a4:43:e2:4b:
79:fa:27:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:50:29 2025 by rpki-client