Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
File: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft (raw, json)
Hash identifier: sxFvGJ723GXTZf9O6MTbv4FrtQ7lWgrjdbLr+3EzaVc=
Subject key identifier: 8B:A2:30:00:87:48:6B:42:95:C2:8F:3E:BC:30:73:A6:E5:0C:92:F9
Authority key identifier: F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
Certificate issuer: /CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Certificate serial: 019897134B9960088DE5B60006B161BA2F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
Manifest number: 0D09
Signing time: Mon 11 Aug 2025 03:01:20 +0000
Manifest this update: Mon 11 Aug 2025 03:01:20 +0000
Manifest next update: Tue 12 Aug 2025 03:01:20 +0000
Files and hashes: 1: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl (hash: JpfyIcOD/q3wy/Gzeczgmuju1mm3DMdQuMwTEZxbawY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:4b:99:60:08:8d:e5:b6:00:06:b1:61:ba:2f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Validity
Not Before: Aug 11 03:01:20 2025 GMT
Not After : Aug 12 03:01:20 2025 GMT
Subject: CN=8ba2300087486b4295c28f3ebc3073a6e50c92f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:3a:2b:2c:a6:ba:2b:65:a8:3a:aa:58:4f:
d0:31:33:cd:53:b0:ae:a6:49:00:a0:a0:48:d7:92:
63:90:82:00:b3:8c:52:84:ed:c0:9d:eb:de:2f:3b:
77:c1:dc:e2:da:01:d8:14:04:92:e2:a9:46:1c:da:
d8:83:cf:9e:96:4f:c0:6d:e3:90:b2:9b:63:12:b1:
c0:5a:6e:00:10:36:ae:e9:e4:0f:d7:3a:61:39:c9:
01:47:f3:ea:ad:65:75:82:97:02:fe:8a:46:04:c6:
46:87:e6:44:a4:d8:6f:a1:2d:02:89:b0:b0:89:2b:
ae:2f:14:bd:1e:b3:20:41:a2:db:31:9b:50:35:57:
ad:32:ba:2f:bb:2c:df:92:7f:c7:71:7c:b8:47:e6:
a0:91:24:44:1e:67:49:3d:9b:28:ea:d8:5a:c2:df:
bf:1f:1e:0e:dd:8f:12:a8:e7:f4:10:75:b7:05:61:
19:85:cf:83:db:52:a2:09:44:a5:53:72:8d:40:b9:
5c:6d:9a:85:80:71:68:c4:1a:33:d5:dc:3f:02:7d:
e2:f7:1a:ef:5b:08:7b:81:22:1c:7d:f3:f2:d8:9d:
3f:3a:07:1e:6d:0c:e2:6c:57:bf:b8:28:32:28:a1:
6a:d2:04:02:1b:2d:4c:61:dc:9c:4b:99:e6:3d:ce:
9c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A2:30:00:87:48:6B:42:95:C2:8F:3E:BC:30:73:A6:E5:0C:92:F9
X509v3 Authority Key Identifier:
keyid:F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c8:9a:5f:fb:23:67:25:7b:49:a0:da:93:ba:95:8f:14:f2:
ac:f3:e1:2a:97:fd:cc:1a:58:a4:37:04:5d:9a:bf:c3:33:cd:
f4:5a:96:4f:b9:06:bc:18:cc:13:92:31:1b:41:4b:8d:da:ba:
e9:dd:cb:a9:87:da:9a:e3:9b:e3:20:0d:f9:63:aa:27:7b:09:
ef:a5:46:57:41:f8:2c:2f:4a:36:65:c9:e0:6f:d9:b2:16:16:
40:1c:c7:41:4d:8e:6c:3f:4b:44:24:1b:1d:60:7f:c1:31:11:
f7:8f:b2:f8:7d:7e:2d:39:1d:ad:c2:fb:80:5a:f7:f8:06:73:
2f:e0:ef:56:d5:8a:6e:b2:7f:69:99:f6:06:87:b0:30:c7:f0:
03:71:46:fa:31:c1:a8:aa:73:e5:90:5a:4b:31:e0:04:16:88:
9f:ff:9d:3b:05:b2:63:1b:e9:22:72:8b:e8:2e:63:55:34:50:
72:10:d4:b1:e0:9f:13:b6:1e:71:24:1e:4c:09:08:4f:2a:0e:
e4:68:98:68:30:23:44:dc:50:ea:96:fe:8d:9e:e0:e6:bc:d0:
66:cd:b4:9a:c6:f4:31:d8:32:95:4d:7d:35:cf:ad:18:79:8b:
6d:00:fb:cd:6d:e5:fd:01:7c:44:bd:52:2c:1c:b9:c1:4f:62:
80:3e:f1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:25:12 2025 by rpki-client