Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
File: 9H0DN3zBCPRAkSa5oMIBYyQhxko.mft (raw, json)
Hash identifier: 69JS3eNdEBSnocK4ErxZItdMC89RQhFW0bnYi0U/Zgg=
Subject key identifier: 85:91:E2:68:4C:97:F8:72:56:64:5D:00:3B:A8:89:C1:D1:EB:30:C5
Authority key identifier: F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
Certificate issuer: /CN=f47d03377cc108f4409126b9a0c201632421c64a
Certificate serial: 019921B09255C4C6F2C8E0AA0F0EFA160A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
Manifest number: 166C
Signing time: Sun 07 Sep 2025 01:00:43 +0000
Manifest this update: Sun 07 Sep 2025 01:00:43 +0000
Manifest next update: Mon 08 Sep 2025 01:00:43 +0000
Files and hashes: 1: 9H0DN3zBCPRAkSa5oMIBYyQhxko.crl (hash: RFd7YikgoqvyMwNF/sgu86VjK0CWh8WCaJ50WUUi7GI=)
2: yhhMqOayivlP0HqWgBqkxI1f14U.roa (hash: w/NNRo63VlTAmPeepIG4fNxKMWjZVte8F0Xs65Wc7u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:92:55:c4:c6:f2:c8:e0:aa:0f:0e:fa:16:0a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d03377cc108f4409126b9a0c201632421c64a
Validity
Not Before: Sep 7 01:00:43 2025 GMT
Not After : Sep 8 01:00:43 2025 GMT
Subject: CN=8591e2684c97f87256645d003ba889c1d1eb30c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:d7:52:86:07:b6:e3:b3:11:13:9c:fb:af:
40:f0:38:5a:cf:92:06:8d:8d:61:27:15:6b:bd:19:
fd:c7:91:a6:a2:64:8c:1e:91:66:1c:ce:bd:85:e8:
7f:53:28:b5:42:52:98:ba:f1:96:a1:30:7d:de:c0:
f9:19:27:cc:1b:9f:c1:25:33:f7:6c:ad:14:53:ef:
5b:8b:38:7f:ee:a6:87:10:51:a1:56:8f:30:1c:00:
4c:bc:62:50:f9:d9:e9:25:b1:55:4d:e0:63:2f:46:
a6:2a:95:f8:d1:64:0a:d6:a5:5b:5a:14:ba:70:84:
99:24:18:ab:5b:9d:fa:0d:20:71:2b:f6:87:16:ee:
88:8f:5b:87:b8:c4:04:9f:42:a9:73:b4:83:c4:33:
25:89:e7:6b:e2:8d:12:38:09:7c:59:da:65:6c:48:
c1:93:22:28:3a:a4:d9:15:18:89:fe:e4:c5:32:d9:
4c:2d:9e:02:33:6b:eb:51:e1:95:3c:a4:61:6f:b9:
95:a6:9c:9e:76:ae:bb:4f:1c:8e:c4:c1:1f:aa:9a:
80:ac:26:27:67:3c:b2:6e:c0:2e:97:af:08:9e:f9:
b4:6a:d7:02:1e:17:e3:3b:cb:71:4a:88:a3:ab:cb:
f6:ef:b7:04:27:0a:c3:4c:5b:f9:8c:af:3c:1b:27:
87:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:91:E2:68:4C:97:F8:72:56:64:5D:00:3B:A8:89:C1:D1:EB:30:C5
X509v3 Authority Key Identifier:
keyid:F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ce:be:34:07:65:b4:f4:b8:8c:76:81:55:b7:5f:9d:f6:df:
57:52:80:6f:bd:73:81:bd:e9:3d:78:fc:1c:53:75:28:c5:01:
c5:68:0f:62:36:0d:5a:0a:bb:8b:9b:41:d2:f7:32:3d:e0:e9:
55:5e:90:b6:75:9a:51:08:a9:9b:08:ea:35:65:8d:e5:16:10:
d4:a4:7f:01:1d:8e:d6:7d:41:24:e4:fd:c7:17:60:ce:f6:4f:
29:61:92:7b:73:86:2f:e1:ee:86:36:d5:90:3d:4e:4d:21:84:
a4:32:06:52:96:5a:32:16:e9:2a:f9:18:1c:74:79:f3:4e:e9:
9f:52:83:62:a4:8b:e3:c4:f9:ee:69:58:77:15:bc:1f:77:8e:
be:bf:09:b8:e2:85:3e:c5:c9:37:82:f1:39:8d:a2:30:a6:10:
f9:a9:0a:63:fb:4b:bb:f4:78:73:af:d1:44:f1:c6:67:72:c9:
79:f2:ab:f4:64:f6:64:52:b7:f5:d0:43:41:38:9b:a0:65:76:
62:34:a6:ce:7d:72:24:7b:58:f5:a2:91:f0:5b:db:e4:76:af:
8e:29:b2:2a:b3:e8:9e:83:ec:0e:9e:ed:c0:5c:53:b4:a6:7f:
54:58:80:e6:e1:89:7e:8b:0f:3d:b9:44:97:32:76:4a:a5:bc:
01:94:24:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:19 2025 by rpki-client