Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
File: 9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json)
Hash identifier: uLj3K2hDFJiBOWRIdBms4TXOBROJEk+e1M3fohUOifo=
Subject key identifier: 9B:54:C1:45:F0:C1:42:DE:10:0F:9A:F8:6E:BB:F4:0E:0A:50:26:42
Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Certificate serial: 01984A77BB46C16A66CDEDC2076425DFFEB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
Manifest number: 11ED
Signing time: Sun 27 Jul 2025 06:00:17 +0000
Manifest this update: Sun 27 Jul 2025 06:00:17 +0000
Manifest next update: Mon 28 Jul 2025 06:00:17 +0000
Files and hashes: 1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: YKVxRPZXaYbkVfguMlV/bDLWKcNAXcPDCjzKIAQFgwE=)
2: jFj_wAVFaMa6v6BwAOU_Uc1FIto.roa (hash: OCl5X/o2fl4tL/vj2OOu1PZNEi03ZxIx2lIN6Tnh8gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:bb:46:c1:6a:66:cd:ed:c2:07:64:25:df:fe:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Validity
Not Before: Jul 27 06:00:17 2025 GMT
Not After : Jul 28 06:00:17 2025 GMT
Subject: CN=9b54c145f0c142de100f9af86ebbf40e0a502642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:83:5d:d8:67:6e:26:9f:12:bb:a9:f1:cd:db:
37:68:ad:7b:99:c5:db:1c:56:15:ed:19:f1:53:a3:
8c:07:8f:cf:02:2a:59:99:cd:e1:00:1f:64:d2:bc:
91:b8:13:35:e4:1e:fd:bd:39:1c:7c:ee:26:b7:ab:
3b:92:1b:d2:b4:f1:11:76:84:d3:bf:8f:cc:a8:f0:
f1:7d:26:75:d5:ad:89:76:2a:04:b7:87:96:e5:86:
70:ad:91:cc:41:35:d9:2b:58:83:84:5c:be:61:c9:
1b:f1:a0:1a:c9:9b:34:de:6a:37:5f:31:ad:a3:60:
2b:5f:43:a0:d4:bf:e6:ab:c2:8e:74:a8:4a:93:71:
4f:0f:77:3f:ba:fd:28:b6:51:42:a4:3d:04:a2:e7:
a0:17:6f:28:7b:d4:13:3b:7b:40:1e:58:f1:10:3c:
22:8c:c3:2b:21:ae:cf:3b:c1:96:c2:bd:ca:9c:e5:
07:eb:e3:79:bc:63:bd:ca:8a:8a:72:de:3a:1f:a6:
6a:43:f0:fc:90:89:6b:08:e8:09:7b:9d:76:20:7c:
60:52:9f:6c:8e:61:36:25:bf:73:31:f5:d3:2b:86:
99:90:c7:1f:b1:2d:53:b5:56:65:68:4d:d2:d7:79:
c8:3a:64:81:48:db:5c:95:35:26:6d:58:bb:3f:4e:
e4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:54:C1:45:F0:C1:42:DE:10:0F:9A:F8:6E:BB:F4:0E:0A:50:26:42
X509v3 Authority Key Identifier:
keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:80:f9:7d:6c:5e:81:f4:38:12:d3:61:cf:5b:81:c5:2a:a6:
63:11:2c:24:18:ca:18:bc:9a:c3:b2:ed:1b:8b:c0:95:0a:f4:
df:f2:69:22:78:b4:eb:6d:10:e2:0e:f5:83:db:01:f7:33:10:
42:80:76:57:04:0c:19:56:cc:2b:77:25:6b:6b:34:0f:d9:08:
85:aa:89:ff:2d:f7:41:ee:d7:98:88:82:ac:c3:97:e2:b6:e9:
c0:4f:5d:df:08:8f:69:36:96:29:8e:63:17:f8:36:e8:bf:b8:
31:5f:a8:2b:90:74:68:f6:6b:6a:51:6c:2f:57:1f:35:b1:26:
0f:b0:ba:08:72:15:31:a8:42:03:8a:27:a3:d7:43:84:01:c6:
8c:8e:6e:23:f6:a5:57:52:53:c9:29:86:9c:cd:ab:f5:e0:7e:
c5:bb:3e:a7:9a:6b:d4:39:fa:c0:b7:d0:13:87:7c:da:9f:a8:
28:c8:99:eb:ac:23:01:0f:72:0e:2f:ce:b7:ee:73:d4:7f:1a:
f4:d7:76:b5:54:b8:02:a9:98:7b:77:c7:8b:a5:68:51:e6:52:
76:f5:a4:fc:fe:7f:d9:10:dd:0e:81:94:58:87:c0:d8:12:94:
90:2c:3a:a0:80:12:b2:d5:58:9b:24:e1:68:b4:8c:23:63:0f:
21:e8:a8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:23:34 2025 by rpki-client