Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
File: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft (raw, json)
Hash identifier: 8X69EsmWjzMJPsYdY+/JtoZnyOjwCg/7nQYdktAX6+k=
Subject key identifier: DC:66:D2:D5:F8:72:AE:A2:BE:A7:4F:95:58:FB:8D:45:60:88:A3:09
Authority key identifier: 7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24
Certificate issuer: /CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
Certificate serial: 019922FA2FEEB959E33C45B23D505EBF07B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
Manifest number: 0F9C
Signing time: Sun 07 Sep 2025 07:00:45 +0000
Manifest this update: Sun 07 Sep 2025 07:00:45 +0000
Manifest next update: Mon 08 Sep 2025 07:00:45 +0000
Files and hashes: 1: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl (hash: w3c9tSZsMF88W2QpSRyHs8Pwa+wSeC6i2vbl1CmVJs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:2f:ee:b9:59:e3:3c:45:b2:3d:50:5e:bf:07:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
Validity
Not Before: Sep 7 07:00:45 2025 GMT
Not After : Sep 8 07:00:45 2025 GMT
Subject: CN=dc66d2d5f872aea2bea74f9558fb8d456088a309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:0e:63:8f:0d:d7:01:e1:17:c5:ef:89:99:
87:7e:9f:83:7d:4f:d9:25:94:dc:6e:6b:1b:dc:f6:
0e:c0:68:68:0b:a1:79:bc:dc:cb:38:c9:d9:05:1f:
9f:b1:e4:8b:97:03:e9:26:2e:c9:a4:7e:e1:f9:05:
d7:8f:52:f4:29:fc:11:89:71:fb:96:15:4f:b8:0c:
6c:a4:6d:e1:5a:8a:23:1f:bd:b7:6d:74:f2:f3:64:
e7:a9:97:67:f9:ba:e2:29:01:b0:4b:34:b8:13:9e:
5c:c2:b0:15:c5:5c:29:a1:b5:a7:8c:d1:ee:f3:2b:
9f:ba:b5:f7:e9:0e:2f:0e:10:90:45:0e:5c:49:14:
12:c3:05:b4:58:0b:f4:46:21:1f:23:73:4d:f3:22:
37:a2:e7:a6:21:f1:98:e6:36:f5:5a:ad:d7:49:00:
2b:1a:72:2a:9e:1d:69:b1:d8:6c:43:e8:af:de:40:
50:62:ce:f1:8f:c9:82:52:65:12:df:2d:d1:65:c6:
b1:4f:db:b6:05:63:37:3b:15:15:07:7b:87:dc:65:
56:e4:46:78:d6:0b:d4:2d:8a:b4:77:8a:45:78:94:
33:83:84:e4:41:51:2a:28:84:61:cb:0c:1a:17:67:
85:bc:6b:e5:41:64:34:1d:1b:95:a5:b8:14:0c:55:
1d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:66:D2:D5:F8:72:AE:A2:BE:A7:4F:95:58:FB:8D:45:60:88:A3:09
X509v3 Authority Key Identifier:
keyid:7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:17:97:3f:c7:8b:ec:3c:01:9e:95:81:a8:fa:90:71:27:df:
c6:7b:61:6a:d7:25:e8:81:53:f1:79:23:34:0f:13:c5:89:7e:
68:2e:a2:a4:1a:e3:66:11:6e:3a:59:a5:63:f5:87:7d:ef:37:
d2:14:9e:6d:46:40:1b:e5:4f:d0:fe:e2:73:f4:34:00:59:94:
63:ac:27:61:ce:8a:44:76:80:35:5e:e5:4c:09:10:e3:eb:2f:
62:93:64:7b:1f:f5:a7:0e:24:9e:70:97:e5:9b:f9:d5:77:47:
a1:ba:b8:ad:b3:3a:3c:21:e9:35:ad:ce:b0:9a:e7:db:ab:a3:
0b:97:40:a5:c2:20:fa:bd:19:c5:95:28:8d:1a:b8:ae:8a:7c:
a9:5e:aa:7d:66:1a:c7:b6:c9:30:3f:f3:e2:7e:9c:87:d4:1b:
70:f9:0f:ec:79:c5:97:c5:1e:c8:bd:1d:3d:52:72:2d:35:f7:
7a:3a:ee:ab:62:08:26:55:63:e4:73:e2:48:11:5c:c7:83:1f:
b9:2d:41:c8:0c:22:74:78:af:5d:d9:ee:21:db:20:7e:e6:5c:
64:e0:2a:c4:f7:6f:95:df:af:92:9e:1a:88:c5:ce:c3:56:22:
5c:df:cb:b3:29:b8:97:e4:c1:7c:83:0a:9a:71:c6:ec:27:6f:
95:8b:cc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:26 2025 by rpki-client