Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
File: 9LXIjF7ZSvHJnVAboClfQENyUcQ.mft (raw, json)
Hash identifier: VKfS6u3X5ooDxxg+5CB7fnfEhOtluHcZKeuUjQvmOZQ=
Subject key identifier: FA:08:5C:45:93:D8:E9:EB:56:C8:E6:44:6A:18:E6:9B:A4:E8:39:98
Authority key identifier: F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
Certificate issuer: /CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Certificate serial: 0199221F0F1E728A983016F9EAFB450932EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
Manifest number: 1587
Signing time: Sun 07 Sep 2025 03:01:24 +0000
Manifest this update: Sun 07 Sep 2025 03:01:24 +0000
Manifest next update: Mon 08 Sep 2025 03:01:24 +0000
Files and hashes: 1: 9LXIjF7ZSvHJnVAboClfQENyUcQ.crl (hash: 5JVMFXPcm1m6m4XOpOxk/aJfu+sJxi8Ia9SaY+MGHlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:0f:1e:72:8a:98:30:16:f9:ea:fb:45:09:32:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Validity
Not Before: Sep 7 03:01:24 2025 GMT
Not After : Sep 8 03:01:24 2025 GMT
Subject: CN=fa085c4593d8e9eb56c8e6446a18e69ba4e83998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b0:75:43:f6:ff:84:b5:10:38:0d:83:88:fe:
7d:eb:91:55:97:e5:67:bb:2a:d3:4a:3e:c6:78:f0:
53:39:b4:ca:65:42:13:af:cb:0f:5f:18:53:46:c1:
d9:8b:1d:1d:91:6a:59:da:fd:5c:67:c0:41:62:06:
3a:9a:41:11:a0:83:3f:64:33:18:2a:b3:43:de:d1:
c2:08:fc:d9:80:7f:cc:87:da:5d:05:9f:bd:5f:12:
3a:7a:98:ef:10:ae:e3:34:b7:cd:f5:6c:3f:c0:b9:
e5:71:d4:72:6b:6e:b4:f3:4f:6c:c8:8e:50:06:54:
41:ab:cc:6c:b0:6c:c5:c3:d7:1c:e9:e0:d9:4f:d8:
1e:f8:6e:8d:8d:d7:6d:e8:82:88:b9:d3:70:bb:a8:
01:51:f2:9f:36:ba:00:29:dc:f2:cf:bf:44:86:db:
c7:c6:79:38:95:2e:59:d5:c8:8f:60:74:c4:fa:fd:
06:fd:3f:f1:14:73:95:ab:14:3f:80:fe:4d:88:75:
73:2e:45:88:2c:84:55:03:0f:bb:2a:75:fc:d6:a8:
a3:d6:25:51:a8:55:5d:24:d3:f7:c7:f1:eb:4d:4f:
be:b4:3b:8e:33:79:c1:dd:76:86:89:d1:d2:70:5c:
4c:b3:ce:0b:27:be:d8:d6:3a:71:da:44:2d:73:06:
8b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:08:5C:45:93:D8:E9:EB:56:C8:E6:44:6A:18:E6:9B:A4:E8:39:98
X509v3 Authority Key Identifier:
keyid:F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6b:9e:64:12:65:6b:5d:42:b0:bf:b7:6d:ba:c0:54:77:a8:
c9:2d:be:cc:e6:25:41:0b:6f:6b:6f:c1:cd:a8:18:75:d3:2e:
84:d9:d4:94:0e:be:30:cb:82:65:db:0c:6b:3e:6b:04:7b:e2:
aa:3a:25:a1:b8:c7:5e:00:1a:ea:fc:01:65:25:8f:62:67:b7:
d6:93:c5:3d:bc:83:f7:c6:0a:41:1f:9b:a9:9b:ea:90:93:df:
73:6a:91:05:9f:b2:5b:81:c2:36:05:d2:12:7e:87:1f:46:04:
d8:52:33:c5:8e:ed:bc:52:42:69:21:7a:ab:90:a9:50:e6:29:
65:99:c2:f1:7d:ac:c9:c8:63:eb:39:a1:84:9b:fe:b4:05:d6:
ab:80:6e:4d:97:be:1a:b0:65:a5:2f:d2:0f:af:b7:a2:6e:8d:
ad:33:f8:59:d4:77:71:47:6a:89:e9:f4:92:f9:6a:35:39:46:
a0:de:bb:38:a6:fc:28:59:67:8f:95:46:de:e8:bc:1a:1c:9e:
4b:75:00:c0:aa:7c:6d:40:d3:cf:fd:84:3e:c5:1d:eb:82:88:
8d:06:23:71:3b:66:e1:07:01:c0:76:34:a1:36:30:ff:c3:15:
5a:9a:af:e3:67:7d:08:66:48:37:cc:25:69:61:de:25:3f:dd:
0e:99:59:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:20 2025 by rpki-client