Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
File: 0o9VSu1_jnFG6ctj9eMaXbHhupM.mft (raw, json)
Hash identifier: ygPt43iXZrwvSYR+vupy/+tpnq4X4SYB3uiR9d5jQDA=
Subject key identifier: 09:F5:0E:46:D0:DB:D7:91:0E:0E:5C:84:E0:D7:22:74:0C:A7:AC:DD
Authority key identifier: D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
Certificate issuer: /CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Certificate serial: 01992255CBE5FA8B8A6FA93C1C4B02A95240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
Manifest number: 166B
Signing time: Sun 07 Sep 2025 04:01:11 +0000
Manifest this update: Sun 07 Sep 2025 04:01:11 +0000
Manifest next update: Mon 08 Sep 2025 04:01:11 +0000
Files and hashes: 1: 0o9VSu1_jnFG6ctj9eMaXbHhupM.crl (hash: +QsMAebDyb5vGINh4v1imkaGvVawqyyopKD++weS7X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:cb:e5:fa:8b:8a:6f:a9:3c:1c:4b:02:a9:52:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Validity
Not Before: Sep 7 04:01:11 2025 GMT
Not After : Sep 8 04:01:11 2025 GMT
Subject: CN=09f50e46d0dbd7910e0e5c84e0d722740ca7acdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:00:a0:b9:82:84:cd:b6:49:e3:58:1d:dc:
d4:96:51:f3:ff:9b:d1:e1:ed:4a:08:97:08:55:e8:
a3:f4:21:80:4d:e9:b4:4e:34:91:94:6d:5c:02:28:
82:14:ce:36:28:58:99:8f:14:2a:10:19:85:54:dd:
e7:f3:cc:d3:63:97:a6:bd:0c:18:b1:37:c5:47:4a:
a4:d2:1a:7d:9d:17:45:d3:43:f9:f4:6b:f0:cf:af:
af:26:d2:1b:34:f5:dd:0a:2a:3a:83:76:bc:bb:75:
94:57:e4:7e:7d:db:ac:ab:bc:c8:82:05:04:bc:6e:
e5:35:67:95:c1:3d:db:f8:14:28:c4:37:49:e4:b3:
7c:c2:85:90:10:a0:6c:d9:2f:9b:e1:f2:16:a9:ef:
6b:e0:57:2f:9c:34:09:92:d4:55:6e:08:69:3f:4a:
03:2d:96:ce:e8:7a:7d:d6:c4:69:6f:b4:b4:5f:24:
2a:ed:06:2d:c5:7e:f0:ff:63:a3:7e:92:19:12:e3:
4a:75:ef:ae:5c:27:b0:19:ed:f8:99:2e:c8:07:f6:
62:92:8d:6b:a5:96:77:7f:77:7f:86:c8:8e:2f:dd:
43:24:eb:77:73:00:8a:91:ab:7a:f7:4c:bc:98:2c:
6b:11:ad:be:35:28:3e:e1:9d:b1:b0:60:d1:34:67:
00:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F5:0E:46:D0:DB:D7:91:0E:0E:5C:84:E0:D7:22:74:0C:A7:AC:DD
X509v3 Authority Key Identifier:
keyid:D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:48:c6:96:48:6d:2f:37:dc:87:93:65:f2:51:10:0a:b4:cd:
7e:e4:d8:84:b7:2e:9c:08:c4:93:1d:79:e1:7b:d5:47:44:89:
ec:83:66:83:81:5b:0f:4d:d0:09:f8:be:23:73:e2:79:6a:f5:
7d:83:b5:8c:62:a6:5c:22:34:fd:90:7a:dc:92:a5:44:ca:37:
21:19:78:bd:42:0d:22:9b:99:41:59:69:82:03:e7:25:18:78:
50:59:c1:92:58:3e:89:1e:8e:46:66:78:8e:42:96:a5:8a:12:
2f:d0:d0:d5:04:84:9c:18:e1:2c:d5:26:58:84:18:65:b1:72:
1b:ca:da:4d:d1:e5:f8:ca:26:6d:f0:6c:a8:25:b7:ff:29:db:
2d:6f:6d:9b:10:0d:89:75:ce:b5:19:cf:39:a5:bd:db:a8:98:
a1:76:86:e9:b2:08:4f:5b:a7:68:8d:cb:8c:9e:bf:de:b4:0b:
fa:24:19:dd:2f:88:b2:b8:b2:f0:ae:43:22:b7:dd:14:f9:9e:
b5:93:ae:dd:ec:75:4c:f2:aa:71:09:a1:60:fe:de:7e:c1:f0:
20:37:d2:62:1f:2e:ea:4b:83:6a:28:ad:ab:58:ec:50:ae:6e:
62:49:0a:f9:47:f2:73:08:0c:75:09:d2:9d:6f:ad:2f:cf:f4:
2f:16:64:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:08 2025 by rpki-client