Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/4ef8b4-7e06-4768-b47a-970fb0e44c47/1/pL9-XCjULmcUGeYsMmBJ5cedSOA.mft
File: pL9-XCjULmcUGeYsMmBJ5cedSOA.mft (raw, json)
Hash identifier: irkJP52MQF8NQ3na3/QiCl3GFaF5GCmwUTnenB7eJq8=
Subject key identifier: FF:02:4E:D3:BB:FA:0A:30:53:CB:35:45:0A:FA:FE:FC:43:F9:2C:2F
Authority key identifier: A4:BF:7E:5C:28:D4:2E:67:14:19:E6:2C:32:60:49:E5:C7:9D:48:E0
Certificate issuer: /CN=a4bf7e5c28d42e671419e62c326049e5c79d48e0
Certificate serial: 019847090C87C3E7BC478678C2410A0741F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pL9-XCjULmcUGeYsMmBJ5cedSOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/4ef8b4-7e06-4768-b47a-970fb0e44c47/1/pL9-XCjULmcUGeYsMmBJ5cedSOA.mft
Manifest number: 08
Signing time: Sat 26 Jul 2025 14:00:31 +0000
Manifest this update: Sat 26 Jul 2025 14:00:31 +0000
Manifest next update: Sun 27 Jul 2025 14:00:31 +0000
Files and hashes: 1: pL9-XCjULmcUGeYsMmBJ5cedSOA.crl (hash: WbBINvi99EYHRNRz0VFUKg1zBljvLJ5aF1HU8Z/UWjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/4ef8b4-7e06-4768-b47a-970fb0e44c47/1/pL9-XCjULmcUGeYsMmBJ5cedSOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/4ef8b4-7e06-4768-b47a-970fb0e44c47/1/pL9-XCjULmcUGeYsMmBJ5cedSOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pL9-XCjULmcUGeYsMmBJ5cedSOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:09:0c:87:c3:e7:bc:47:86:78:c2:41:0a:07:41:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bf7e5c28d42e671419e62c326049e5c79d48e0
Validity
Not Before: Jul 26 14:00:31 2025 GMT
Not After : Jul 27 14:00:31 2025 GMT
Subject: CN=ff024ed3bbfa0a3053cb35450afafefc43f92c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fb:c4:bc:fd:a3:89:7e:5f:b6:ee:5c:52:e1:
6b:e8:af:5b:a0:63:98:56:66:2a:d9:85:6b:e9:04:
e9:f9:aa:4e:fc:d0:40:14:56:1c:2a:e7:5a:83:6d:
62:c6:27:b1:d3:c3:16:f2:dc:d7:b3:86:64:7b:a2:
d1:ba:70:ab:d1:fd:d4:ff:6f:9c:8c:3f:78:03:77:
8b:f6:24:49:11:2b:fb:db:d9:ee:12:a2:89:18:c7:
3e:ef:5e:3b:2c:a3:e2:35:50:8d:13:44:2b:29:06:
4a:ef:11:eb:c3:81:56:14:d9:95:5d:4e:65:48:5f:
02:e9:9f:98:23:ee:7e:37:12:23:cc:a5:1e:7c:3a:
c5:92:bd:73:46:99:9e:b1:1c:9f:3f:39:cd:8c:b2:
9a:95:36:68:c7:3b:fa:80:b9:96:97:65:69:ff:69:
73:31:8e:62:bc:23:b8:df:aa:e3:3c:df:ba:ee:57:
a4:36:a2:ae:ef:11:ac:aa:76:6b:77:77:86:3c:e3:
80:27:9b:ad:97:f8:c2:a7:df:0e:27:48:a0:f2:b5:
b4:c3:a4:b0:d7:9c:71:fb:ac:4b:03:2f:be:95:1f:
66:98:28:23:9e:e5:c5:2b:45:45:4b:8d:8b:f2:b7:
87:49:84:5b:ec:05:92:a8:b8:b2:a7:ee:da:ef:04:
ce:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:02:4E:D3:BB:FA:0A:30:53:CB:35:45:0A:FA:FE:FC:43:F9:2C:2F
X509v3 Authority Key Identifier:
keyid:A4:BF:7E:5C:28:D4:2E:67:14:19:E6:2C:32:60:49:E5:C7:9D:48:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pL9-XCjULmcUGeYsMmBJ5cedSOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4ef8b4-7e06-4768-b47a-970fb0e44c47/1/pL9-XCjULmcUGeYsMmBJ5cedSOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4ef8b4-7e06-4768-b47a-970fb0e44c47/1/pL9-XCjULmcUGeYsMmBJ5cedSOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:34:60:0b:1e:ae:e5:6a:b0:d3:20:05:23:d4:68:0a:e8:a5:
d3:ac:ce:10:a9:7b:4d:b1:eb:46:86:3e:33:2d:42:43:43:d7:
a4:5d:5c:08:77:17:10:57:2c:cd:93:ce:b7:1f:23:69:55:06:
b5:4e:b7:c1:fc:64:f9:de:b8:4d:e9:75:85:f8:bb:35:53:20:
5e:93:b9:9b:c5:21:84:f3:d4:2f:58:c5:1b:72:b9:a2:55:1a:
02:7f:9f:d9:d6:20:00:0d:0d:52:b9:48:c1:47:ae:5f:89:70:
52:b6:7f:40:29:16:7a:31:a2:09:9b:b9:f4:b1:d9:a8:7e:d8:
a8:99:ff:3a:00:fd:3c:f3:e1:a6:38:67:4f:4f:db:a9:25:ea:
1c:6a:a7:13:da:b8:d9:47:f7:b4:7f:d0:5d:c6:5d:58:b1:0d:
50:7d:db:04:86:67:04:53:72:9c:b1:8d:ea:69:05:42:6d:3e:
ca:27:ef:4b:82:e2:8e:6e:92:81:bc:7d:17:30:10:1d:fd:d8:
0f:02:f3:8e:d9:5a:4b:7a:d3:94:5f:23:e4:b6:1b:c9:c3:0b:
91:72:56:f6:79:6a:f7:79:59:2d:88:11:b0:53:bf:ab:f5:98:
49:2f:97:a8:26:db:92:a3:94:5e:33:f5:86:fc:86:36:d0:cc:
6b:6c:d0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:26:57 2025 by rpki-client