Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
File: 9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json)
Hash identifier: eLxpUh++ZtZBRqFMlYVPyGz8Se5sPeW4ZECeCJOBWCc=
Subject key identifier: C8:1D:93:6B:10:A0:4D:36:F6:56:39:94:26:A5:5F:85:D4:94:B7:8F
Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Certificate serial: 019893DA7BAB320BD511E3AB8A278A0659DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
Manifest number: 1213
Signing time: Sun 10 Aug 2025 12:00:25 +0000
Manifest this update: Sun 10 Aug 2025 12:00:25 +0000
Manifest next update: Mon 11 Aug 2025 12:00:25 +0000
Files and hashes: 1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: Jp4okYrhTUqHKQbw1EjY3Epnv7g7xAAXzGn0L7EVwXs=)
2: jFj_wAVFaMa6v6BwAOU_Uc1FIto.roa (hash: OCl5X/o2fl4tL/vj2OOu1PZNEi03ZxIx2lIN6Tnh8gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:7b:ab:32:0b:d5:11:e3:ab:8a:27:8a:06:59:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Validity
Not Before: Aug 10 12:00:25 2025 GMT
Not After : Aug 11 12:00:25 2025 GMT
Subject: CN=c81d936b10a04d36f656399426a55f85d494b78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:42:d2:69:e4:b8:42:ea:0c:40:46:a8:48:
d3:26:55:63:c3:d7:56:d8:8e:37:0a:7c:2b:d9:be:
cf:11:0a:29:05:20:65:b1:32:3d:b2:61:45:3d:60:
2b:2e:9e:9b:d6:9c:d0:b5:7f:3c:02:7d:eb:de:31:
6f:a0:3e:c9:22:46:b0:4d:b0:90:79:58:c9:12:df:
ea:fc:86:e7:8e:d3:7a:45:8e:4b:72:72:0a:7c:2f:
c7:ff:6b:44:7c:9b:fe:90:d3:71:22:85:cb:87:5e:
9a:87:b8:86:68:10:53:14:a9:a1:dd:c6:d8:fb:9b:
52:92:0b:8b:6a:29:68:f8:bd:01:5f:bb:78:14:78:
1c:fb:34:06:21:23:5b:f7:9a:c9:b7:d9:b1:23:c9:
57:ce:47:be:9b:a3:13:93:86:18:f5:01:a9:1d:69:
f3:cd:36:4c:00:97:eb:47:cc:c9:1e:b7:1e:8a:e7:
07:f6:d7:aa:59:fc:d7:f0:57:3e:20:83:4f:cc:a5:
8f:02:ef:91:b7:66:a3:b5:78:6c:fb:13:af:49:10:
36:87:24:74:20:8b:11:9d:ab:b2:fa:24:2f:a4:25:
1e:77:b0:2b:9e:0a:a0:c4:58:79:ab:de:9e:87:79:
eb:af:57:08:01:a2:63:4b:7a:92:00:6d:e9:94:ec:
87:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1D:93:6B:10:A0:4D:36:F6:56:39:94:26:A5:5F:85:D4:94:B7:8F
X509v3 Authority Key Identifier:
keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:11:10:96:16:7c:83:59:a0:6c:87:92:df:88:34:dc:4c:4e:
d7:e4:f4:6c:a4:ed:dc:db:dd:09:c6:c2:da:5d:72:16:ca:d0:
c4:c2:09:cf:06:d7:75:8b:c5:08:b5:77:72:02:be:1c:4e:ef:
28:24:c7:bc:da:5c:5c:e7:3d:42:42:e3:bf:83:c9:11:65:47:
5a:d3:04:8d:82:84:1c:a6:8a:fb:9f:c4:6b:51:7c:8c:82:f5:
0f:52:63:f6:a4:31:0a:c5:64:60:b4:ff:c2:dc:2b:9e:63:aa:
bd:21:f7:97:fc:c0:23:38:b0:b0:cc:af:94:db:d6:bf:bf:5f:
23:96:2c:f1:06:56:9b:e0:71:ca:b9:0f:a1:5b:16:04:94:14:
ff:16:d2:bb:5d:27:95:4a:24:8d:4a:bc:a3:2b:9b:c7:5e:a7:
09:a1:52:4f:2b:68:57:35:f3:65:e3:bf:27:54:17:cf:f9:be:
a9:02:63:6c:1a:9f:ef:db:44:96:24:6a:16:c8:da:fe:c6:e1:
97:13:c3:ad:82:47:2d:df:e9:26:a5:4c:15:2e:f0:97:69:dc:
c9:e1:2d:d4:41:3a:87:bc:7d:01:97:cf:a5:c5:27:ab:04:53:
31:e9:01:83:1f:6a:51:7b:ae:da:96:d6:bc:d7:94:11:fb:0d:
38:c9:9f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:40 2025 by rpki-client