Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
File: 9bulXh8L-GE-qbu-KXooGzyDgYA.mft (raw, json)
Hash identifier: +OZ7KbencaZu15UtbJl1nDLSwxBbYQMZ7EnlrbrcMLQ=
Subject key identifier: CF:07:87:FE:BE:A5:36:3A:04:6F:1D:20:81:95:EC:06:1E:DA:A6:7B
Authority key identifier: F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
Certificate issuer: /CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Certificate serial: 019A71B909970DEBF4F3ACBAC8544E88D719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:23 +0000
Manifest this update: Tue 11 Nov 2025 07:02:23 +0000
Manifest next update: Wed 12 Nov 2025 07:02:23 +0000
Files and hashes: 1: 9bulXh8L-GE-qbu-KXooGzyDgYA.crl (hash: IYpaSwB5Xx8dZS/0x1qOifUrvZHTGxCosyVhIa+zB6c=)
2: UKsojMJQKjwqEBjlQ0hvZzPL5fM.roa (hash: JwS6NOp3JTf4Gv4MdW3hpkLuh9j4F7ahSArR1W30tPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:09:97:0d:eb:f4:f3:ac:ba:c8:54:4e:88:d7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Validity
Not Before: Nov 11 07:02:23 2025 GMT
Not After : Nov 12 07:02:23 2025 GMT
Subject: CN=cf0787febea5363a046f1d208195ec061edaa67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ac:2b:9c:f1:4f:31:a2:b0:c5:31:15:e4:30:
b2:68:7e:94:da:43:f5:8e:0a:20:31:f0:53:62:1e:
f4:6f:53:fd:3f:cd:6c:25:9a:99:cc:f1:af:cc:7e:
2c:17:15:78:4f:1a:f3:08:39:97:77:f9:a2:cb:3c:
78:91:30:c7:9d:61:ce:43:ca:fa:8b:4d:34:98:f9:
b5:ef:5f:07:fb:a5:14:ec:d8:ba:0e:11:39:a2:d6:
d4:d9:90:b9:03:41:2e:10:79:5b:51:7f:c2:a9:04:
49:cb:10:51:92:d9:7f:41:21:47:78:6f:e3:4b:85:
65:c4:79:82:1e:22:2e:03:c2:51:e3:87:b8:d9:62:
d6:40:a9:59:f0:fa:60:07:4f:9d:d9:c1:e1:e0:cc:
6a:17:8f:55:7c:fd:74:c1:6d:7b:59:41:65:40:5e:
b6:96:ee:35:b1:09:dc:83:54:f0:b4:51:60:9e:37:
2b:11:f0:6e:08:56:68:76:f5:c2:31:5b:d7:47:cf:
be:da:d2:89:c3:cf:14:9c:d0:a8:a3:d4:72:1e:57:
7d:7f:5a:f1:37:8e:e1:3d:20:dd:00:04:11:5f:2e:
cb:40:c6:31:88:8e:da:d1:82:d8:78:83:ad:ea:45:
9f:16:4c:32:49:26:19:40:b8:af:45:ac:d3:f4:de:
29:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:07:87:FE:BE:A5:36:3A:04:6F:1D:20:81:95:EC:06:1E:DA:A6:7B
X509v3 Authority Key Identifier:
keyid:F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e1:f3:13:3d:26:77:10:50:0d:95:0d:12:8d:1d:13:f8:64:
2d:58:b2:c9:d4:5e:d8:52:b5:ec:f9:c3:f8:53:26:28:70:8a:
e7:23:c5:ef:2d:5f:31:83:60:3b:b6:09:da:95:ef:c4:63:84:
05:49:12:bd:a5:97:47:0e:7b:dd:ce:b2:07:4b:54:06:bb:74:
6e:fe:ee:ad:97:10:35:58:9c:2c:c4:06:7a:fb:be:cc:16:38:
32:06:c3:1a:33:f0:e5:bb:21:4c:86:e5:fd:e7:5b:2a:74:2d:
27:27:a0:9c:ce:c6:b9:da:3d:03:ea:0e:1c:c3:49:dc:ac:8d:
38:10:fd:72:08:61:5c:82:2a:82:f5:79:cf:12:84:04:5c:42:
1e:06:bf:4b:c9:ee:a2:e4:b9:c9:10:49:0a:dd:b0:51:6d:8a:
98:12:f1:a7:3c:04:cc:7e:79:c4:96:8f:96:5f:13:5c:0b:c2:
60:3e:fa:6b:91:10:59:58:d3:13:8f:b2:e2:e1:06:90:b7:2d:
ff:37:fb:17:e7:d4:e3:31:91:93:1a:ff:82:28:1e:fd:b2:ca:
30:34:be:3b:22:0f:21:c3:2d:30:74:ca:2a:ee:dc:a9:32:7f:
7a:fe:8a:0f:f3:27:48:ba:5f:80:45:5f:03:fa:44:e9:2a:e3:
95:77:b9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:21 2025 by rpki-client