Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
File: 9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json)
Hash identifier: ulGKOaCR3yTtMm6rdSYMAvpZJXWoqbJc7peuOtidbT0=
Subject key identifier: EA:9B:08:A3:7F:05:7B:6B:9D:76:71:A5:BE:B2:E6:76:83:99:09:82
Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
Certificate issuer: /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Certificate serial: 01993E04E0B25E809B847D93B687256A2C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
Manifest number: 0F67
Signing time: Fri 12 Sep 2025 13:02:10 +0000
Manifest this update: Fri 12 Sep 2025 13:02:10 +0000
Manifest next update: Sat 13 Sep 2025 13:02:10 +0000
Files and hashes: 1: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: yjGL5IqYK2FK1rX+YDX7jqwOkR5AuZF7IaW/8Q1CdP4=)
2: OpJ_uz4hg9WS1uTnKXn75qGvb3w.roa (hash: zJt7hWD6hoBRKS4g5AHeuYKclEqIASb0N8YkICHekl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Sep 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3e:04:e0:b2:5e:80:9b:84:7d:93:b6:87:25:6a:2c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Validity
Not Before: Sep 12 13:02:10 2025 GMT
Not After : Sep 13 13:02:10 2025 GMT
Subject: CN=ea9b08a37f057b6b9d7671a5beb2e67683990982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c2:16:5c:87:f1:44:de:64:36:a7:30:3b:76:
28:96:07:b2:5f:12:65:9c:80:89:82:a5:37:16:a2:
ab:6c:77:ca:27:05:05:54:89:64:6a:ac:23:45:c0:
2e:94:78:af:fc:dd:24:40:6a:cd:5d:bb:7f:b9:c0:
29:f4:ce:43:07:fc:b9:96:0c:53:e8:85:74:1f:e5:
aa:e7:ed:ed:e5:60:f2:f2:eb:77:a8:e6:46:3d:a0:
9b:65:9e:cf:5d:fc:98:e5:1a:a2:c7:98:7a:e2:88:
c9:fc:66:10:d4:78:1b:af:1d:35:0f:16:4e:95:f4:
ec:74:6f:5e:c5:3c:3e:51:bf:50:07:b5:4a:c6:8d:
b0:7a:64:8a:00:28:08:3d:6d:da:f5:0b:33:57:7f:
94:0b:13:92:9d:3f:65:f8:b9:51:6d:0f:9f:e4:d1:
0f:a7:de:07:6f:24:20:91:bc:cd:0d:ef:da:77:54:
b7:11:dc:12:1d:fa:cd:c0:a4:02:69:89:05:1f:c8:
6d:c6:db:ba:25:a5:22:90:c6:76:4a:36:ce:26:08:
3e:50:bb:63:46:cf:54:cd:17:c7:b6:3e:9c:70:33:
1a:ad:e2:1e:00:f9:85:39:c7:dd:f6:37:1f:b9:a5:
12:5e:fb:f3:53:d5:36:e4:f1:46:f3:70:c7:6a:32:
fd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9B:08:A3:7F:05:7B:6B:9D:76:71:A5:BE:B2:E6:76:83:99:09:82
X509v3 Authority Key Identifier:
keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c4:ec:d4:ce:72:77:bc:ac:b3:26:7c:f7:69:a0:43:0c:7b:
9f:ad:39:ed:69:f9:ae:48:3b:16:44:82:12:9b:d1:11:a9:ec:
45:68:c5:29:60:c3:18:14:a5:e9:c9:39:90:f2:40:a0:80:fa:
99:4a:07:79:b0:97:d5:36:68:66:ea:d2:f1:f9:3b:4d:24:4f:
4b:2c:47:25:12:43:16:c6:6b:e0:a3:5e:ec:e4:4d:75:c6:a7:
5a:8c:00:02:ca:fe:00:fc:12:ef:6d:20:98:1d:3c:03:bb:bb:
22:91:bf:0e:7e:3b:67:5d:05:70:32:d5:7c:f0:23:20:dd:1e:
20:0a:ea:23:3c:c1:5f:e4:40:ef:45:cb:b4:6b:42:c5:00:d9:
ff:ed:70:f0:87:38:68:a8:81:c1:b8:75:37:c9:d6:7e:11:a1:
ba:ec:fd:c3:5c:a8:db:af:db:70:5a:67:91:c7:10:bc:9f:52:
a4:fc:f4:19:a6:77:7e:aa:6e:f0:d3:fd:68:23:0c:58:f5:b6:
47:c4:f0:03:2d:c6:d1:e8:23:5b:b9:f4:e6:b6:4d:79:26:91:
c0:a7:40:f8:35:55:a4:9b:3d:d0:25:9d:a9:20:e8:84:15:c5:
02:1f:46:67:9c:da:20:d8:f9:07:95:88:c6:8f:ab:8f:ed:33:
1a:6a:c4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 16:31:30 2025 by rpki-client