Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
File: 9rrOePyQJ42C8ehmiooZ7pmCzcM.mft (raw, json)
Hash identifier: FFQ/7jSGDpxhK3g3aDPWy0tKtwNBHAhHND+n7Cqwoy0=
Subject key identifier: AE:87:8B:B1:F5:1D:E9:A7:A1:22:68:B3:DE:BF:D3:0E:0A:52:41:F4
Authority key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
Certificate issuer: /CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Certificate serial: 0199608FC683F81B064CE089B4A73C418E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
Manifest number: 08B5
Signing time: Fri 19 Sep 2025 06:00:59 +0000
Manifest this update: Fri 19 Sep 2025 06:00:59 +0000
Manifest next update: Sat 20 Sep 2025 06:00:59 +0000
Files and hashes: 1: 9rrOePyQJ42C8ehmiooZ7pmCzcM.crl (hash: 8FByqqJ5g2x0RewQuZmoi/qkfeffGB7zHKmL0UylXfk=)
2: Re-MnmstUpcAurL3wCFgIhLu13s.roa (hash: vb/Pgmd/HetEo03wgkmW9gqUHrd1AuiVR8CC1XhD05w=)
3: Sev5X02oiIv7Gv_3mq5yAVy5Txs.roa (hash: 0c/Q4ud2dbzbznUS25t1/df9lnnZpZNmLVMc8gJSoDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:8f:c6:83:f8:1b:06:4c:e0:89:b4:a7:3c:41:8e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Validity
Not Before: Sep 19 06:00:59 2025 GMT
Not After : Sep 20 06:00:59 2025 GMT
Subject: CN=ae878bb1f51de9a7a12268b3debfd30e0a5241f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:51:fb:22:b5:bb:c0:d8:64:5a:8a:fe:56:
7a:4e:d0:d6:76:fa:07:ef:b8:8c:8a:26:b2:61:a3:
cd:75:fe:55:e7:cd:d3:1a:63:1a:bf:47:9f:7c:b2:
51:19:60:89:70:d5:00:ce:a7:65:51:52:e8:d5:92:
fd:1a:3d:e3:43:a7:ee:5b:d6:c1:22:53:24:b3:ce:
10:0c:7c:5c:28:2d:fd:a4:27:fe:a8:44:79:2f:14:
51:1a:15:22:99:57:53:17:5e:04:0f:eb:d5:da:a9:
66:2f:33:77:6e:6a:14:40:e1:b3:fc:15:69:07:f4:
9d:50:69:c8:3b:79:49:2f:b2:62:8d:62:67:38:2a:
81:4a:9a:bf:fb:05:ff:e1:51:98:09:2d:84:76:2c:
05:d4:2b:32:d0:80:50:cf:16:88:74:d7:d3:76:2c:
e4:80:6f:33:6f:22:be:33:e6:87:16:3e:2b:40:7c:
87:0b:eb:d2:d1:84:50:b9:c0:6d:42:15:df:b8:37:
eb:fb:af:9d:29:da:d6:b6:7a:9a:82:06:00:ab:ec:
8f:be:9c:e9:ea:9b:c2:76:bd:d3:72:4e:66:04:70:
92:60:01:02:1e:c1:4c:7e:42:8a:b0:cf:35:a4:ab:
84:2c:7b:3b:0d:01:6d:c9:11:e3:ab:b3:46:91:8e:
b0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:87:8B:B1:F5:1D:E9:A7:A1:22:68:B3:DE:BF:D3:0E:0A:52:41:F4
X509v3 Authority Key Identifier:
keyid:F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e1:b5:88:67:3b:c9:57:30:7d:8b:d7:92:0c:a6:33:c4:6a:
89:90:f4:75:ce:00:2a:10:15:57:ca:29:60:fc:74:52:c1:e5:
35:95:15:eb:e0:e2:31:3e:99:58:fa:f6:77:10:2a:41:ae:b0:
1a:2a:77:6c:a6:8c:63:8b:a4:45:2c:e9:64:d9:5d:4c:24:4d:
c8:15:11:f2:32:53:6e:eb:dc:2e:b6:5f:d4:b3:7c:ef:b4:45:
16:18:02:03:a4:ca:6c:be:0a:31:65:67:aa:97:8e:c1:be:84:
d9:68:5b:17:ea:fc:07:dc:0f:b4:30:cd:d2:09:04:8e:0a:44:
58:a3:e3:6e:39:5f:d9:3c:b1:dd:8e:18:ee:31:49:78:8c:fe:
21:d8:dc:c8:ce:5b:a5:51:7e:89:7d:fb:77:50:15:32:53:96:
8e:32:bc:be:6a:d9:bf:77:1d:54:80:1e:11:9e:eb:f8:6b:a3:
14:f1:c1:32:36:2c:43:73:f0:fa:0c:33:2a:ce:7d:d0:40:d0:
d3:19:a2:39:17:4e:59:58:f4:62:4b:be:4d:fe:23:1b:92:3f:
02:c3:33:a9:0c:cc:72:0b:35:e3:90:e4:9a:98:8a:ef:4e:15:
80:2c:aa:42:b0:fc:03:fc:1c:ca:7e:5c:84:23:3c:9c:66:3d:
0c:c4:33:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:03:09 2025 by rpki-client