Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
File: 0o9VSu1_jnFG6ctj9eMaXbHhupM.mft (raw, json)
Hash identifier: b8CIUh1jI4bqz5Q1jDdDRKzxXV7kT4+68NCRnNLJqX8=
Subject key identifier: D4:EF:0D:7D:6A:B8:9B:89:06:4D:47:D3:A2:FA:1D:96:A9:45:AE:07
Authority key identifier: D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
Certificate issuer: /CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Certificate serial: 019A725CD2C53ADBBA6033FDDA920CF3F63E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
Manifest number: 1719
Signing time: Tue 11 Nov 2025 10:01:17 +0000
Manifest this update: Tue 11 Nov 2025 10:01:17 +0000
Manifest next update: Wed 12 Nov 2025 10:01:17 +0000
Files and hashes: 1: 0o9VSu1_jnFG6ctj9eMaXbHhupM.crl (hash: KElC8LdFpkSwqiWxyGnkTOo62djWCVP0y7HSe6q8Kg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d2:c5:3a:db:ba:60:33:fd:da:92:0c:f3:f6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Validity
Not Before: Nov 11 10:01:17 2025 GMT
Not After : Nov 12 10:01:17 2025 GMT
Subject: CN=d4ef0d7d6ab89b89064d47d3a2fa1d96a945ae07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:cc:e3:6b:04:0e:c0:98:8d:28:e5:14:4d:
17:28:0d:87:00:f4:a4:bb:b2:ae:2b:fb:a5:e3:bb:
c9:54:1b:6e:75:fe:75:52:e0:d6:e0:15:33:59:e1:
10:48:25:cc:2c:ff:54:3e:f2:8a:92:90:df:db:d3:
ff:fa:c6:8a:56:61:82:47:b4:84:8e:ba:91:dc:66:
15:52:e9:89:27:fe:f2:44:e3:9f:52:de:8b:a9:0e:
1e:bb:e1:5c:33:1b:61:f4:19:94:33:15:b9:25:1a:
ad:8b:36:42:34:d0:66:b3:7a:df:e8:55:80:9d:02:
df:f5:9b:3c:5f:c4:aa:06:c0:59:5d:12:1f:a1:52:
8d:83:dc:22:5a:40:4e:3d:1d:e0:32:a5:68:a3:6d:
4a:3f:b8:36:b6:55:90:c2:8b:b5:a4:81:43:f3:e5:
5f:74:1c:d1:bb:a4:39:c1:73:52:f2:60:65:47:db:
ea:21:24:aa:c3:3e:f4:40:5b:c7:2c:9b:1f:be:4c:
e5:ce:87:5d:47:91:21:2c:ce:9b:41:c8:b7:8c:04:
24:41:30:25:2e:34:6a:4c:60:6d:13:33:b0:a4:61:
50:2b:a5:de:9f:cc:ef:19:15:fb:81:12:33:91:f6:
a6:33:b2:c5:a5:c4:e7:88:3f:63:0a:b9:84:74:52:
87:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EF:0D:7D:6A:B8:9B:89:06:4D:47:D3:A2:FA:1D:96:A9:45:AE:07
X509v3 Authority Key Identifier:
keyid:D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:21:e2:c1:35:b4:59:ad:60:4c:65:25:dd:1e:f1:5e:a7:8f:
e5:ec:b5:46:ff:38:b3:f7:1b:71:29:2c:3d:23:c9:42:e7:ed:
07:91:ad:0a:14:81:48:cd:a8:5b:96:76:03:ee:08:50:15:7d:
56:15:3e:a6:83:de:fd:31:30:ee:a7:f0:21:b3:b4:85:93:1d:
09:45:27:a0:94:29:6d:4a:1e:25:6a:ff:04:7f:4b:6c:c5:ce:
65:0a:36:20:38:10:e7:b3:c3:f3:f7:d7:a7:35:93:d8:aa:c9:
46:3d:2f:2e:ca:f4:eb:fb:61:5d:ac:33:fc:15:29:95:a0:4b:
8e:48:55:d8:8d:e3:28:fe:74:dd:18:6c:ad:d1:9b:c3:e0:4c:
7f:95:0c:e7:f7:9f:c2:11:68:2f:77:aa:24:02:ba:b1:e8:70:
76:ca:b3:80:49:97:6d:2b:bd:6d:d4:5f:86:60:02:10:64:7f:
ad:bd:3f:ba:b3:80:00:9b:14:e3:74:f7:21:6e:76:c7:37:5c:
2d:25:3b:4b:57:9a:a9:e5:6f:54:f0:65:1a:8f:90:ed:f7:f6:
d9:1c:cb:84:fb:63:78:b4:02:c9:cd:c9:1b:c9:7b:70:fc:61:
d6:a1:ba:be:0f:2f:71:69:bc:e4:fc:a2:51:2d:01:ef:dc:a3:
46:67:d5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:15 2025 by rpki-client