Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
File: o9KLNY1BezfsyLKRv5nBUVvOj3I.mft (raw, json)
Hash identifier: CLsnopa0ypXqtbhLlAcd4hekoPFY80efE3MDY+IStuQ=
Subject key identifier: 22:F2:1D:85:21:62:DE:1E:4E:6D:80:8E:E1:F8:95:EE:49:89:12:FA
Authority key identifier: A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
Certificate issuer: /CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Certificate serial: 0199239EFF248023FA214C449FDA8175139A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
Manifest number: 11F0
Signing time: Sun 07 Sep 2025 10:00:46 +0000
Manifest this update: Sun 07 Sep 2025 10:00:46 +0000
Manifest next update: Mon 08 Sep 2025 10:00:46 +0000
Files and hashes: 1: o9KLNY1BezfsyLKRv5nBUVvOj3I.crl (hash: PowQLvpMaal2Pn5ty6A0Hei+TjjG5pIbLlEJhVtP8Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:ff:24:80:23:fa:21:4c:44:9f:da:81:75:13:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Validity
Not Before: Sep 7 10:00:46 2025 GMT
Not After : Sep 8 10:00:46 2025 GMT
Subject: CN=22f21d852162de1e4e6d808ee1f895ee498912fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3a:76:5e:cb:a8:56:6e:e1:6f:d4:44:ba:53:
10:6e:29:fb:9d:9d:f7:5b:45:f0:94:49:32:67:6d:
6e:85:c2:59:11:62:42:37:6c:5b:2d:44:27:00:84:
cf:fb:cb:58:9f:5f:f0:4a:38:05:27:78:26:15:8f:
dc:cb:f1:f4:96:57:03:6a:1b:ed:5c:f6:14:1d:a0:
39:da:a6:49:4c:29:6b:3c:39:63:4c:2e:f2:17:5c:
79:39:e4:67:5b:27:f0:92:05:0f:1b:30:68:bb:94:
d1:42:6c:6d:cf:14:93:12:e3:20:6d:e2:49:92:aa:
8d:18:ec:5d:17:7c:5e:b8:73:03:f1:fd:64:42:dd:
ec:26:35:9c:04:87:2d:68:b9:15:51:b7:a1:f4:ef:
1f:ea:b5:9a:fb:99:7d:e9:3f:34:52:90:1b:c3:19:
4f:ed:5f:5c:3c:b2:6d:06:3a:ec:9a:fc:ec:89:cf:
0e:18:90:75:f5:a2:d5:91:1d:ed:1c:3b:04:d5:11:
a7:27:55:7c:3a:ae:b1:f0:1c:07:aa:1e:0a:ab:5d:
07:70:59:8c:6d:09:a4:11:fb:d8:8e:92:71:d6:dd:
be:ed:a7:22:8c:ed:37:09:90:51:26:bd:51:20:49:
4f:07:85:f8:3f:33:d3:87:72:29:00:19:7c:f1:da:
d2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F2:1D:85:21:62:DE:1E:4E:6D:80:8E:E1:F8:95:EE:49:89:12:FA
X509v3 Authority Key Identifier:
keyid:A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:14:dd:4d:27:77:f1:3f:5c:96:9b:85:51:4f:3a:81:f9:99:
3c:dc:e2:8d:39:5a:b0:76:fb:79:de:aa:a1:1d:dd:a5:70:3a:
d0:9f:d6:8f:4a:69:e1:a7:dc:03:48:83:15:e7:6f:21:0a:d2:
95:e7:ec:05:27:72:4b:14:5d:7f:48:6e:a7:b3:0e:b2:20:e4:
55:fa:37:ee:69:47:e3:c7:21:4c:dc:97:48:58:11:82:f0:64:
6c:a4:c1:52:2d:ce:10:92:26:6f:69:54:b5:7a:20:77:b0:a7:
d6:4c:84:8a:65:75:89:52:e1:1e:82:17:18:e3:83:1a:63:18:
38:30:81:58:82:35:51:9c:bf:79:22:62:af:1f:4e:5e:bb:ac:
e6:7b:8d:04:a9:24:24:74:6e:ed:62:34:f2:b2:20:9f:f8:5f:
a2:93:5c:03:be:24:93:75:e9:36:aa:62:74:96:d4:cb:a9:e8:
58:14:b6:5f:72:f9:57:af:8e:ae:ff:84:88:86:d7:1f:99:e6:
22:84:37:df:a8:25:1e:0f:90:95:ce:5c:6b:50:07:3a:4c:7b:
a9:11:e8:f6:f4:5b:0a:b8:b8:73:cb:47:35:35:77:9a:9e:86:
fc:11:6b:84:04:18:3d:6e:65:de:85:de:c8:13:fd:43:cd:d1:
0f:00:07:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:38 2025 by rpki-client