Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
File: 9krUXSK1888ucc4KwBB0t80hrFc.mft (raw, json)
Hash identifier: dE4I+M8QgYWA+Gd0BlUMWwErqI0z2f2UamOO/L9SuX0=
Subject key identifier: 6A:38:A6:A4:D3:86:24:5C:86:7B:55:C9:02:E8:C4:15:6A:E9:BD:7A
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Certificate issuer: /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial: 01987CAE785E3E5BE98B9B588AF676780CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
Manifest number: 14C9
Signing time: Wed 06 Aug 2025 00:01:05 +0000
Manifest this update: Wed 06 Aug 2025 00:01:05 +0000
Manifest next update: Thu 07 Aug 2025 00:01:05 +0000
Files and hashes: 1: 9krUXSK1888ucc4KwBB0t80hrFc.crl (hash: e+u+jjCo3wvr6TtrJDQECXqk5mWnaNTtSJ0FRaLKyMk=)
2: rnFKFHUDJ2VK_n3nnMWQgvu93Us.roa (hash: ddxwbWDe9h7jTPjb6zGryBRSU7cXly9K/marvCxyA4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:78:5e:3e:5b:e9:8b:9b:58:8a:f6:76:78:0c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Validity
Not Before: Aug 6 00:01:05 2025 GMT
Not After : Aug 7 00:01:05 2025 GMT
Subject: CN=6a38a6a4d386245c867b55c902e8c4156ae9bd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:dd:c7:b6:6d:ea:e9:3f:84:9e:10:96:c6:
36:c7:31:4c:59:57:3e:8b:94:be:e6:70:4f:07:03:
58:9f:14:ce:80:45:37:bf:d0:3c:06:59:7f:56:2c:
fe:76:9c:5f:a2:b0:6a:fe:fd:68:32:a9:c8:cf:cc:
df:d8:80:a5:4a:d2:f6:c3:94:b3:14:73:d5:3f:4a:
cc:b9:17:42:ee:8b:ea:bc:c2:8e:22:0d:98:43:7d:
bf:92:f6:20:f3:8c:f8:d5:01:6e:7f:f2:d3:fd:40:
92:fa:75:ae:88:78:cc:dd:41:bd:f6:18:a6:86:c7:
b1:9d:1b:31:09:90:91:d8:40:a1:a4:fb:55:5b:80:
bf:2d:32:36:61:d9:d1:7d:b9:ea:bc:4e:1f:0d:3b:
3a:ef:32:7d:63:e0:65:99:6e:fa:0c:bf:04:19:6c:
17:b9:64:22:38:13:6a:64:55:de:4c:bf:52:e8:98:
4e:b5:4a:35:7d:c3:d3:cf:41:46:d5:c7:a4:58:be:
53:02:04:be:4a:5e:31:43:35:fe:eb:29:4f:c8:16:
07:13:18:9d:ab:e1:9a:74:ba:b0:14:0c:eb:ec:8f:
4f:ef:ce:0d:75:23:12:bd:3e:8c:94:49:02:5d:63:
13:5d:f8:71:b8:0b:eb:34:2c:61:58:2a:a6:d0:cc:
d3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:38:A6:A4:D3:86:24:5C:86:7B:55:C9:02:E8:C4:15:6A:E9:BD:7A
X509v3 Authority Key Identifier:
keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c1:b2:02:b5:2e:39:e4:b9:1f:3e:f3:66:9e:a2:b1:e6:dc:
aa:95:38:77:54:f8:b2:8d:d9:c5:82:53:06:bc:9e:df:7f:f9:
84:78:e1:df:b7:e0:07:fd:9c:f0:17:b7:58:ac:d6:c7:32:cf:
01:44:a4:0f:4d:f6:82:9c:aa:b7:3e:bb:1f:68:3d:b8:67:25:
a5:6b:be:95:f1:0e:ed:bf:45:3f:2a:90:49:0a:da:51:21:f7:
43:f0:3e:da:c6:dd:36:0d:c0:7f:40:a0:1e:37:b6:00:5f:ae:
66:44:92:eb:fd:24:95:92:3e:36:e2:83:34:64:a3:07:fe:fc:
fe:47:cd:37:c9:48:46:fa:dc:98:02:a3:e7:33:b8:bb:50:9a:
b8:49:8f:ba:12:f5:b2:cf:4d:7a:2f:a3:9c:1d:4a:74:00:1b:
29:99:c2:b8:4b:75:55:3c:84:4a:13:11:4d:7e:10:cf:d8:1d:
1c:fc:3a:12:d5:3f:d5:65:1e:d7:98:7d:59:a4:be:e8:ca:00:
c4:5a:56:7d:b6:82:7b:80:cd:39:5e:26:9f:e1:2d:b5:30:df:
e6:b0:d2:e9:45:0b:17:68:df:d5:70:a9:b5:46:7d:ec:96:9e:
ed:b6:07:95:ac:14:4f:59:df:71:bb:0d:40:fb:ae:34:60:87:
e8:a0:8d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:30:24 2025 by rpki-client