Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier: y8+p+GRO8q8w9J3SBgwKF35tj0EqHCUdJ9bPfx7xAL8=
Subject key identifier: 72:A8:7D:68:03:6D:4A:5D:0D:79:1F:00:7D:78:AE:98:B6:85:82:F7
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 01991FC410D18789AD7E612D367DD6F99FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number: 07EB
Signing time: Sat 06 Sep 2025 16:02:47 +0000
Manifest this update: Sat 06 Sep 2025 16:02:47 +0000
Manifest next update: Sun 07 Sep 2025 16:02:47 +0000
Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: HhDaJ1CIegdHuw6qzOGDxpiucCuRATd4otrS+X9NnKA=)
2: UDIr7Vq2PCUxH-_0XwBbpbKATWw.roa (hash: UYUs+F/DqN2VeFPscjP3XMb/LrOdKx6NTNq37FV037I=)
3: u0FRx2j9PY9XanBbcgTrVe_Co_s.roa (hash: 1340NaWcsmaESfpzP0gVpyoyLiK505bktgSP6n8xPII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1f:c4:10:d1:87:89:ad:7e:61:2d:36:7d:d6:f9:9f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: Sep 6 16:02:47 2025 GMT
Not After : Sep 7 16:02:47 2025 GMT
Subject: CN=72a87d68036d4a5d0d791f007d78ae98b68582f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:d0:4b:7d:ef:ba:b6:84:8c:57:46:82:f0:
23:f0:e1:bf:e3:8a:31:94:16:a9:60:6b:e1:d5:c6:
10:56:a3:70:7a:44:d1:9b:f1:e3:8e:55:cb:db:a8:
8d:52:79:a1:53:9e:66:6d:bc:34:3e:93:32:fd:b3:
9d:a0:25:db:36:f6:78:7e:39:46:e8:f7:3d:36:20:
99:b6:de:b2:85:ce:d2:16:b7:21:d0:74:66:97:90:
fb:b4:bf:63:0e:cf:2b:5f:09:18:f9:5e:fb:6c:87:
08:fa:33:f0:3c:0e:41:89:7c:9e:e5:96:6d:df:57:
13:dd:11:2f:ed:8f:4f:b7:d0:1d:f4:17:11:52:69:
c1:b5:45:a8:cc:c6:7e:44:59:a0:1d:49:ec:c8:a5:
69:3a:05:1a:e4:65:bf:ee:eb:ce:4f:f3:16:31:68:
f7:47:87:15:ee:1f:7d:45:94:33:d6:8e:ec:0b:d5:
d2:f7:f9:47:6a:11:3d:63:93:8d:9c:c1:7a:e1:cd:
6b:8f:31:44:0a:24:62:22:30:93:92:00:bd:09:66:
45:d8:4e:24:3a:fa:da:0c:72:9f:3f:a8:9e:62:d9:
cb:5c:87:ce:68:ef:18:1b:66:d1:c9:56:df:46:84:
30:bc:bc:db:35:9f:fb:8a:83:60:e5:51:85:d9:08:
15:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A8:7D:68:03:6D:4A:5D:0D:79:1F:00:7D:78:AE:98:B6:85:82:F7
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:82:09:9e:41:98:b0:60:2c:52:e1:bb:07:fb:3d:c0:86:d7:
f3:eb:d1:ea:84:45:13:07:d2:0c:93:84:c9:81:5a:80:6d:65:
36:02:0a:5a:a3:40:e5:20:3c:60:c1:16:4b:84:ea:3d:0a:99:
6e:88:be:26:3e:1b:59:f5:66:1f:e3:f2:35:58:60:83:9f:a7:
d4:50:ca:19:ff:d1:26:85:33:0c:72:23:e4:88:55:f6:0e:c0:
42:54:47:7e:ad:00:34:dc:62:ce:4b:2c:e1:f6:9a:8f:f9:c1:
c3:6e:9c:7a:29:a0:73:a2:33:dd:eb:68:de:ac:bf:c6:d4:3a:
ff:77:2f:c9:13:a8:d7:31:ec:28:a6:50:ee:28:76:23:16:1f:
6f:d6:03:10:84:4c:7f:0d:31:b7:fa:89:4b:ff:51:59:98:8a:
04:bd:b3:fc:ca:72:43:a0:12:8e:40:8e:5a:cc:fb:62:9b:bc:
bb:28:87:4b:0e:5e:e4:9b:8a:0f:d2:01:e2:e1:5b:c3:29:88:
73:40:b1:61:65:04:49:33:ff:87:6e:f5:1e:be:57:da:8e:b2:
77:a1:2d:e1:ae:4d:14:86:5e:85:c7:fa:06:21:35:66:ed:40:
7f:83:ba:0f:2f:d7:78:ed:86:f4:62:52:80:a4:24:d0:81:c7:
64:54:09:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:58:59 2025 by rpki-client