Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
File: v9P33PxgiR_DiPpcHb118nuVGeI.mft (raw, json)
Hash identifier: qceQfgf9cgjgfzTmL0+qAA1bwrArUbL0wM722pOI1Gg=
Subject key identifier: F4:8E:90:75:96:3D:53:D6:76:44:1D:8F:9A:70:5C:08:76:62:6E:0E
Authority key identifier: BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
Certificate issuer: /CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Certificate serial: 019847788834E18513A2D79BE3B387115E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 16:02:18 +0000
Manifest this update: Sat 26 Jul 2025 16:02:18 +0000
Manifest next update: Sun 27 Jul 2025 16:02:18 +0000
Files and hashes: 1: v9P33PxgiR_DiPpcHb118nuVGeI.crl (hash: VvPpSFDdFpuh+Vn0wE6B9slT+F3ocogc+BY8KWi1gh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:88:34:e1:85:13:a2:d7:9b:e3:b3:87:11:5e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Validity
Not Before: Jul 26 16:02:18 2025 GMT
Not After : Jul 27 16:02:18 2025 GMT
Subject: CN=f48e9075963d53d676441d8f9a705c0876626e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4e:da:06:10:38:aa:9d:4a:41:8e:2d:95:c0:
5c:51:10:b2:b9:ef:b7:15:97:eb:04:c7:d9:68:07:
58:c1:cf:ea:3a:5a:f2:1f:47:5f:d8:5d:e6:9d:69:
7d:34:da:bb:22:65:2c:e9:9c:a8:fc:67:e5:71:a9:
17:9b:39:d9:33:7a:77:a7:24:89:2f:87:3a:d5:00:
3d:75:ca:4a:3a:4b:cc:fc:89:96:6e:e6:7c:5c:4f:
e5:67:05:7e:ce:f8:a2:6d:ab:ce:51:d1:d0:4f:64:
7a:ba:49:61:3a:62:a4:fe:6b:d7:ec:f0:4b:1f:e6:
e5:d4:60:e8:7a:c3:d7:e2:9c:ce:9f:91:df:7b:f5:
83:59:0d:1c:63:45:33:11:8f:39:18:52:c7:8f:c9:
84:51:d8:cc:49:9e:6c:30:0a:95:95:f8:4b:9b:11:
98:6c:19:05:6d:3e:6b:67:cf:65:79:d2:d9:23:14:
ad:d0:24:93:78:b6:ca:90:f0:ef:6e:80:e6:20:a6:
5b:85:b3:2e:55:6a:d2:46:50:30:a2:ae:a5:8e:ec:
a2:e8:f3:f6:18:93:68:dc:ef:09:67:3f:26:34:d9:
d4:e7:b3:11:d4:eb:b3:fb:8d:89:7f:a1:80:e7:9a:
3a:ba:40:d3:c6:d5:b9:fa:9f:02:fe:93:2d:40:38:
29:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8E:90:75:96:3D:53:D6:76:44:1D:8F:9A:70:5C:08:76:62:6E:0E
X509v3 Authority Key Identifier:
keyid:BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4e:23:9e:e6:58:2d:6b:1c:81:49:32:7e:5c:a3:e5:e2:28:
47:ab:6d:e6:ea:28:1f:56:b4:f6:0b:a2:8f:23:06:ad:3f:24:
36:52:1e:ed:f1:24:1f:e1:a3:cf:33:20:cf:b8:cf:9f:8c:4d:
22:96:99:ad:9c:e4:cc:93:92:ca:c1:f6:6d:84:84:27:be:35:
66:f9:c9:28:17:2c:46:2c:8c:db:33:53:0a:ed:5d:ec:6a:7a:
83:e3:62:f7:4f:f0:da:49:90:d8:f8:ab:9f:57:16:60:6c:a4:
ba:8d:bb:e4:05:79:51:93:67:63:c8:a8:ea:13:79:7c:1e:e0:
78:78:5f:da:c6:85:f5:34:07:f0:df:90:37:5a:f0:c9:b0:d9:
2d:dd:f5:22:eb:7f:64:5d:c7:35:56:4a:a9:3b:c0:5f:38:b8:
45:59:50:15:aa:7e:33:86:c4:10:4d:ac:56:6b:dc:c2:1c:f9:
b5:3b:81:40:91:b4:58:20:1b:a3:03:4c:fd:4c:c3:78:3c:b1:
67:9b:80:4a:35:b9:f1:5a:3a:e9:13:ae:36:44:5d:41:5d:33:
4f:7d:cf:ec:44:87:ba:5b:28:04:57:34:74:0c:ff:5e:70:06:
91:48:35:5d:77:de:17:98:96:02:62:c4:bd:2a:2a:4b:c9:e6:
6e:03:72:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:59:37 2025 by rpki-client