Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
File: 9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json)
Hash identifier: zSfiEX4yix/UfeKejDojVbzzzig81nuv7pLpk/ar8w4=
Subject key identifier: C1:8E:DC:DC:46:D3:89:7F:34:92:2F:BD:78:50:F7:3D:BD:17:5E:93
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial: 01992FDA6AD1AC5E71F6C8D7CE02D65EB474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
Manifest number: 096F
Signing time: Tue 09 Sep 2025 19:01:07 +0000
Manifest this update: Tue 09 Sep 2025 19:01:07 +0000
Manifest next update: Wed 10 Sep 2025 19:01:07 +0000
Files and hashes: 1: 84Ad1KJPc9jhr8WAEOEs6s8tmPc.roa (hash: UeaLHRP7oFc/d7B28fPSHAmNwBiXwzZTNmEOfITVZrU=)
2: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: 7l6N+uvueyUZLCJZYv+gja5DvlVvD2WRXZhbOZJiZ/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:da:6a:d1:ac:5e:71:f6:c8:d7:ce:02:d6:5e:b4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Validity
Not Before: Sep 9 19:01:07 2025 GMT
Not After : Sep 10 19:01:07 2025 GMT
Subject: CN=c18edcdc46d3897f34922fbd7850f73dbd175e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:02:fe:93:a1:68:1e:f3:8e:ad:60:7a:db:
d2:40:cf:4f:d8:eb:57:b3:58:9e:da:35:b0:a3:57:
39:c0:99:65:4e:57:6a:25:96:68:2d:49:ce:f3:49:
f1:8a:aa:8e:55:64:6b:a2:8b:d2:0f:0c:18:ca:79:
84:fc:54:64:70:bd:4f:77:34:9d:1b:9c:ba:80:79:
b7:5b:11:0b:54:fa:f5:76:95:68:d2:4c:2c:09:85:
72:85:e4:15:5e:cf:f8:f0:26:a1:6d:26:a2:01:45:
e7:c9:8a:ba:33:32:90:b0:e4:60:70:78:8c:87:88:
cf:f2:d2:fb:13:47:18:87:b0:53:75:7c:d8:0c:9d:
91:34:4b:64:27:50:03:b7:e8:2d:88:9b:6e:a5:7d:
e1:09:51:0c:ce:f0:21:ac:ac:ed:39:4c:c9:03:0b:
39:fb:db:76:58:77:c5:72:41:5a:06:5a:05:e1:d3:
b6:5e:dc:8d:16:ed:a1:27:02:9a:9f:c7:bb:c0:76:
3b:b8:26:f5:4e:8b:27:a3:a4:bc:db:ba:30:a4:78:
9a:64:8e:73:16:80:5e:c7:a4:e9:3c:18:79:37:b6:
5b:72:4c:d7:72:a3:20:a5:6c:88:df:67:0d:6f:73:
4f:50:08:2c:69:1f:65:99:c6:2f:b3:b1:d4:41:7e:
c5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8E:DC:DC:46:D3:89:7F:34:92:2F:BD:78:50:F7:3D:BD:17:5E:93
X509v3 Authority Key Identifier:
keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:69:e7:dd:d2:50:37:66:0a:2a:61:be:0e:41:b2:5c:0d:2f:
d5:42:a4:30:ec:aa:81:54:e5:54:dd:f6:cc:31:ec:03:6d:1d:
0c:b4:28:ac:23:f4:ae:ca:a8:be:77:74:7d:30:89:19:e2:06:
d7:11:df:38:46:c1:f9:b6:cd:bf:e1:e9:86:70:39:51:d4:f1:
fe:6d:e6:74:ac:93:9f:d9:35:c7:99:4f:21:d7:be:bf:80:b8:
ed:be:4f:cd:a6:1c:bc:07:d5:15:05:90:7b:f6:67:73:af:1c:
49:cd:c0:2e:81:4a:27:23:1f:b8:2e:e2:83:70:e1:a3:45:54:
e6:4b:84:e1:a9:0b:6e:04:9d:86:7b:03:82:6c:16:e2:69:2f:
ff:0f:f1:a0:4b:34:f7:41:81:de:94:c0:77:f6:84:aa:52:0e:
5a:3e:b3:a2:37:8e:24:3a:26:e5:6a:34:6e:3f:ca:04:53:79:
5f:59:c2:ab:c4:43:e0:a8:d4:b1:b7:02:ad:50:0d:0d:bf:52:
13:79:27:86:db:be:60:dc:41:ab:a7:c7:bc:94:14:ea:b0:78:
69:3c:05:97:f9:96:c8:8a:b4:54:58:9e:dd:04:13:f2:8a:9f:
8a:69:86:69:59:3a:a1:0d:f9:8c:85:33:9f:a8:9f:c8:af:24:
a1:73:a9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:48:12 2025 by rpki-client