
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
File: 9rG5O-fUO4bWT4tLljvJFWJfI_I.mft (raw, json)
Hash identifier: jKYvKj1loCzs5uLzCoZ/PccwYIvCiniM6YPx9P8jCe8=
Subject key identifier: 11:9E:44:7C:D9:03:02:5C:AD:AB:57:07:63:79:4A:D1:86:91:FB:CB
Authority key identifier: F6:B1:B9:3B:E7:D4:3B:86:D6:4F:8B:4B:96:3B:C9:15:62:5F:23:F2
Certificate issuer: /CN=f6b1b93be7d43b86d64f8b4b963bc915625f23f2
Certificate serial: 019873E43BE2ACC351FE971D99FAF07D6BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
Manifest number: 02A8
Signing time: Mon 04 Aug 2025 07:03:13 +0000
Manifest this update: Mon 04 Aug 2025 07:03:13 +0000
Manifest next update: Tue 05 Aug 2025 07:03:13 +0000
Files and hashes: 1: 9rG5O-fUO4bWT4tLljvJFWJfI_I.crl (hash: 4TtLiUnhIl+ZHANQaoA1oQKiDF9vCr0x7En0ZVHV7z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e4:3b:e2:ac:c3:51:fe:97:1d:99:fa:f0:7d:6b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b1b93be7d43b86d64f8b4b963bc915625f23f2
Validity
Not Before: Aug 4 07:03:13 2025 GMT
Not After : Aug 5 07:03:13 2025 GMT
Subject: CN=119e447cd903025cadab570763794ad18691fbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:e6:27:24:38:e1:d2:f9:14:0a:14:7c:34:
9c:2f:e0:de:09:d1:9c:c8:82:ce:f6:b8:34:92:ba:
1b:4b:5d:b9:53:a5:b5:55:da:f0:da:38:b0:e0:3f:
15:17:8c:29:22:35:3b:2b:d6:cd:34:88:24:bb:9b:
bc:16:a0:c6:9d:8d:6d:ad:47:11:a2:c2:e8:43:15:
39:b9:0f:e3:15:7f:e4:f5:4c:cc:1c:5a:35:0f:5a:
38:06:9f:b9:4b:c9:3f:3c:00:c2:02:b3:fe:eb:6a:
e8:0a:b3:c4:0f:b9:f6:55:ce:90:e7:d4:09:60:73:
00:35:0a:18:9a:47:6f:f5:fd:46:ec:c9:50:9a:94:
17:43:93:2e:63:61:b4:3c:75:25:73:f3:9b:0c:c3:
bb:b2:72:b7:91:75:2b:a9:e4:fe:cf:83:31:0b:b9:
b4:d4:d3:81:d4:de:59:05:af:cd:7e:d3:6b:26:fd:
16:af:e2:37:67:ab:86:5c:05:29:d5:36:9b:52:00:
be:5a:9a:17:df:1b:3e:55:96:65:8d:53:51:ef:46:
b6:f9:d3:03:7c:c5:5d:81:3a:b5:e4:81:dc:46:37:
8c:0c:77:42:02:f6:0b:a2:d5:c4:4d:c4:7a:a8:28:
2a:65:2e:ff:91:d0:f9:11:06:67:13:bd:6a:70:8c:
57:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9E:44:7C:D9:03:02:5C:AD:AB:57:07:63:79:4A:D1:86:91:FB:CB
X509v3 Authority Key Identifier:
keyid:F6:B1:B9:3B:E7:D4:3B:86:D6:4F:8B:4B:96:3B:C9:15:62:5F:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ad:c0:17:29:75:33:87:9a:6c:78:0a:34:ad:93:3c:95:5e:
6f:a7:ce:09:eb:5b:f2:27:86:a3:2f:a2:6f:82:8a:bb:38:2f:
44:cb:93:e4:77:87:8e:16:0f:a2:32:eb:8f:6b:1e:3a:de:6d:
fd:5a:5d:77:e2:90:86:20:28:9c:78:bc:05:77:04:d8:3b:38:
8d:a9:28:3e:0c:d1:69:2e:ac:92:92:3b:e8:00:d2:74:cc:02:
8a:44:38:1f:2d:56:11:91:6d:7c:db:54:65:93:91:df:8e:2a:
32:3f:d0:6b:ec:63:09:75:d8:44:35:ee:d0:7a:77:ac:9f:7e:
7d:48:e6:06:1a:2d:03:92:6c:5c:59:23:d2:2c:53:71:c7:2d:
19:f4:85:10:fb:5c:ce:10:4a:99:85:5e:4b:77:2c:91:e4:7b:
e2:d8:30:da:d9:7b:93:0c:36:ee:10:3c:a0:c9:50:8b:f8:c9:
60:28:00:ef:ff:6d:5f:39:e8:f5:cf:06:6f:d2:10:cd:6b:22:
23:3d:e5:3d:2d:f7:d9:a9:60:2a:d8:be:69:88:ae:36:bf:d8:
f7:20:a8:3c:97:87:e3:39:ed:85:17:72:fd:be:2d:dc:44:c8:
78:86:87:c9:94:6c:a3:5e:df:9d:ce:5a:77:65:cb:a5:96:6d:
b1:3c:dd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:15:30 2025 by rpki-client