Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
File: 9GRgXq8UuLXSjujQdsHjc491glM.mft (raw, json)
Hash identifier: NMVXPr0z938bL3HYrzBRjxMdkI6qfDogjZws6epMby0=
Subject key identifier: 9D:5F:9C:85:EB:1F:6D:19:85:5A:DB:60:CD:9A:F8:11:1D:CF:C5:DE
Authority key identifier: F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
Certificate issuer: /CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Certificate serial: 019849659D020000A74827D93AB8E78FF34A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
Manifest number: 10BF
Signing time: Sun 27 Jul 2025 01:00:52 +0000
Manifest this update: Sun 27 Jul 2025 01:00:52 +0000
Manifest next update: Mon 28 Jul 2025 01:00:52 +0000
Files and hashes: 1: 9GRgXq8UuLXSjujQdsHjc491glM.crl (hash: +CzOqwUNaVIVdgA1maka1i0CeuvcW1pN9eYU7SLtknE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:9d:02:00:00:a7:48:27:d9:3a:b8:e7:8f:f3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Validity
Not Before: Jul 27 01:00:52 2025 GMT
Not After : Jul 28 01:00:52 2025 GMT
Subject: CN=9d5f9c85eb1f6d19855adb60cd9af8111dcfc5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1f:62:dc:35:b2:71:cc:a9:ee:06:80:51:88:
57:92:ca:9e:b8:39:d6:28:0b:b2:53:dd:1d:a6:0c:
af:6e:84:e6:36:c4:2f:ad:6e:ee:4f:3c:74:b7:d8:
9f:17:3b:f2:51:43:fb:8d:8b:ba:82:8c:a8:34:51:
42:f6:3a:98:2e:02:97:5c:12:33:df:75:a6:1a:97:
d9:03:7f:e9:69:6c:1f:11:a0:1a:a4:ee:fd:8f:60:
00:2a:c8:95:6e:47:22:41:7c:56:30:ac:f6:99:95:
a4:a1:cd:80:96:18:df:25:73:aa:77:c8:62:6b:5e:
11:3a:0f:19:9f:25:f0:73:50:53:c0:e6:1a:d6:07:
7b:b2:c2:8b:26:30:92:ea:73:a4:9c:cd:bc:12:48:
a6:39:7e:b6:51:c4:37:36:93:fd:1d:1a:a3:a4:25:
d5:15:a1:29:21:c1:ce:dd:9b:05:f5:95:69:1e:af:
30:67:cb:8d:87:c7:07:67:95:9e:61:3c:1c:b5:4f:
d9:61:ec:75:a8:d4:b1:5a:34:77:06:74:6f:6a:99:
40:61:a3:d8:04:35:0a:61:75:f1:c3:90:88:46:d9:
9e:5f:d0:b5:ff:f6:04:fe:52:d6:fb:98:3b:aa:2d:
6e:20:4d:e1:02:14:00:15:7a:c6:b4:a2:b0:cf:d3:
cd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5F:9C:85:EB:1F:6D:19:85:5A:DB:60:CD:9A:F8:11:1D:CF:C5:DE
X509v3 Authority Key Identifier:
keyid:F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:95:11:32:02:98:6b:cd:00:ac:ed:78:bb:95:8d:de:5e:a0:
f9:e9:af:f1:58:bf:09:57:62:e6:b6:0f:22:b2:d7:c8:05:19:
a1:60:85:9e:f7:a8:53:7e:82:24:73:4f:a9:82:c3:ad:5c:80:
39:28:59:25:6c:7e:ae:db:7d:02:3c:12:4a:6b:7f:64:98:be:
e0:d8:2f:ca:10:8e:a0:6f:83:dc:8e:1e:73:23:27:d9:57:c6:
35:a2:e4:00:c0:cd:4d:41:99:39:9c:06:00:5c:15:a3:82:06:
29:82:48:38:67:4a:6f:ab:94:0c:8a:77:3c:5d:b7:47:7a:76:
41:4e:c3:cf:44:42:9d:ff:dc:a9:e8:60:74:55:9b:8b:90:2a:
11:15:ba:62:f5:dc:88:d8:d8:2d:90:be:08:a0:a7:5d:76:07:
f0:4b:48:c8:9f:6c:15:2b:26:11:94:1b:a7:61:4d:09:0d:81:
24:a4:0c:ea:c0:6d:28:a0:20:f8:9a:53:a1:bd:b1:b7:b1:20:
a1:52:43:ef:9e:d3:9a:01:ec:35:51:55:00:bd:5d:bd:eb:4d:
92:30:62:df:a5:ab:0b:6f:9a:21:53:68:20:7c:a7:93:85:89:
5d:f5:1a:2c:1d:cc:89:ca:6a:5c:09:f0:c9:66:fe:fb:f3:f2:
e9:d0:f8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:26:23 2025 by rpki-client