Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
File: 9Il_29x9JQjfzRTP9gCtQ7knkks.mft (raw, json)
Hash identifier: zQZdsbvnIoiCex2VctxS5tuqKqQGSErbGaapnANRWpY=
Subject key identifier: 63:37:55:75:2F:55:45:07:8D:05:B5:0F:5F:A6:07:18:28:FE:81:50
Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
Certificate issuer: /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Certificate serial: 01989CA6A8B6388B26C7C22EF53D20B61F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
Manifest number: 0B5E
Signing time: Tue 12 Aug 2025 05:00:24 +0000
Manifest this update: Tue 12 Aug 2025 05:00:24 +0000
Manifest next update: Wed 13 Aug 2025 05:00:24 +0000
Files and hashes: 1: 9Il_29x9JQjfzRTP9gCtQ7knkks.crl (hash: i/Js6N8ZCv27UtnlVxKjCPxjomzEoe7tO7mh2MLfObQ=)
2: goWXgCcrT8sdpWvs98SjkshS1QQ.roa (hash: pL/QBtJXrUgZbyv/2j+3PUPuF0UtD1Pg09swJJxayTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:a6:a8:b6:38:8b:26:c7:c2:2e:f5:3d:20:b6:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Validity
Not Before: Aug 12 05:00:24 2025 GMT
Not After : Aug 13 05:00:24 2025 GMT
Subject: CN=633755752f5545078d05b50f5fa6071828fe8150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:df:80:00:38:bb:a3:e8:f9:81:bd:31:84:06:
a1:1e:59:ef:d7:5b:63:9f:2b:0d:8d:90:26:5d:a7:
61:e0:42:1a:a6:c3:f4:4a:57:fa:51:98:87:e0:1d:
8d:5c:c7:9d:e7:6a:cd:38:96:63:4c:f3:6b:77:9a:
87:f2:95:ee:1f:59:83:5b:fe:b1:1c:42:75:53:ba:
70:da:9b:04:fe:dd:ba:d5:e9:a7:88:12:71:a5:11:
a4:5c:fa:75:93:92:b4:1f:58:d7:73:75:8a:48:90:
60:65:81:97:b2:5a:91:dd:94:38:73:42:dd:d8:6e:
2f:2c:71:d1:33:b1:63:76:5f:b5:11:40:9a:f2:20:
0c:20:25:b6:22:4a:ec:ab:95:94:86:ec:5e:46:27:
9e:ce:2c:8a:2a:b9:06:b5:e9:2f:7d:7a:c4:4e:83:
aa:7c:28:40:36:a2:db:1a:6e:8a:71:c1:fa:bb:2d:
8d:26:ae:5e:46:24:78:b1:89:bc:73:c9:f2:0f:c8:
42:11:40:db:0e:fe:5c:92:20:8a:13:e6:3d:52:5a:
d3:1b:e2:62:18:5d:a6:f3:a4:7b:0e:b2:c4:93:83:
09:ab:45:4d:28:bf:d5:d0:34:ed:72:40:f2:62:8c:
da:34:eb:75:8d:4b:65:54:32:35:0a:0c:70:d5:c9:
a4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:37:55:75:2F:55:45:07:8D:05:B5:0F:5F:A6:07:18:28:FE:81:50
X509v3 Authority Key Identifier:
keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b9:f2:b7:17:31:64:b8:72:18:2a:7c:15:ef:e2:ca:78:20:
1e:cf:ec:a9:e9:e4:0d:4f:83:d4:43:45:68:7f:e2:0d:94:b1:
d7:8f:5e:bc:a8:f9:2e:2c:6b:b6:3b:87:c7:9d:e0:33:4c:3b:
64:2e:1a:81:ef:e4:0f:ca:90:85:5c:19:8d:ec:bf:92:f7:e9:
cf:b5:6e:22:c6:f1:62:dc:a6:4a:2d:ec:02:eb:3a:4a:57:64:
77:bd:08:5c:4c:4a:02:08:89:ba:e0:91:44:0c:d6:54:b8:11:
ad:ef:91:c9:25:46:ea:24:52:96:be:a1:c8:8d:d5:00:b1:49:
1e:68:e9:4a:b8:33:59:57:9b:49:34:4b:b0:b9:0c:ac:3b:b6:
f2:25:be:fe:06:ab:42:36:f2:65:fb:2f:d8:ec:56:a8:b1:ba:
d1:6a:04:74:a9:40:6d:20:37:fa:09:b4:62:98:b2:0e:f5:81:
83:19:6b:2d:73:d3:86:05:34:62:27:42:3a:a7:ae:8f:94:5b:
f4:f7:f6:88:a2:6f:33:53:b0:66:c5:36:c1:d3:fc:a2:19:31:
16:94:f6:36:29:6d:df:d1:f8:89:0e:e8:91:b2:f2:43:09:42:
f6:c3:94:e9:15:9f:ea:56:59:9e:d1:b4:cb:27:b7:dc:7f:e1:
a3:0a:aa:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:38:54 2025 by rpki-client