Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
File: 9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft (raw, json)
Hash identifier: 8thPNfolSfrwcS1pq3RilE+385GAIi1SZ8n4dbt8KvA=
Subject key identifier: BE:43:F3:D5:D3:38:FA:ED:9C:DE:41:4E:37:9E:3A:5B:D8:EE:7B:61
Authority key identifier: F4:ED:5E:5D:BB:A1:EA:B6:D3:95:8E:59:41:82:9C:9D:A1:B2:C6:7F
Certificate issuer: /CN=f4ed5e5dbba1eab6d3958e5941829c9da1b2c67f
Certificate serial: 019923A0217A72EF5B77D2DE94AC06B6918A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
Manifest number: 0A7E
Signing time: Sun 07 Sep 2025 10:02:00 +0000
Manifest this update: Sun 07 Sep 2025 10:02:00 +0000
Manifest next update: Mon 08 Sep 2025 10:02:00 +0000
Files and hashes: 1: 9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl (hash: membpmfPxoVOcF6MS7xDWcanqoU7wSUaeCEyJN5j4Ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:21:7a:72:ef:5b:77:d2:de:94:ac:06:b6:91:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ed5e5dbba1eab6d3958e5941829c9da1b2c67f
Validity
Not Before: Sep 7 10:02:00 2025 GMT
Not After : Sep 8 10:02:00 2025 GMT
Subject: CN=be43f3d5d338faed9cde414e379e3a5bd8ee7b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:67:c5:99:d9:82:8d:81:fd:a9:fc:a5:60:
0f:cb:31:ac:c0:a2:63:1c:c2:d0:fb:7b:89:27:1b:
e0:3f:eb:87:65:61:d6:a3:d9:76:f8:6d:99:ea:cf:
d4:ae:a3:35:ae:40:bc:15:b1:f5:34:01:71:ca:2e:
6f:30:86:62:74:c9:a6:9c:4e:5b:9a:74:52:ac:c3:
58:d7:4b:66:97:13:6c:23:1f:40:b2:30:46:8e:8c:
5f:10:ee:fd:41:cc:21:8b:b7:7e:36:53:5a:ff:b0:
46:26:80:80:72:2c:2b:52:d4:dd:70:d8:4e:cd:86:
da:c5:71:68:6d:76:9e:61:b9:7d:6d:f8:38:fc:7a:
98:90:72:51:7a:68:c6:db:54:52:08:19:e7:72:1a:
39:04:a4:42:9f:4a:1b:2d:b3:8a:eb:eb:85:e6:ee:
6e:84:22:9a:c9:0c:44:4d:e6:69:88:d9:65:d1:39:
a7:db:2c:1c:3c:32:a7:97:ee:e1:ac:f2:6c:f0:ce:
28:35:1e:5a:62:1a:fc:c1:dd:86:79:b8:84:5d:41:
46:b0:07:90:93:20:5c:74:80:62:35:6c:85:7f:43:
0e:98:2e:56:5d:88:87:0b:e8:17:6e:06:91:ec:5a:
dd:41:0c:e4:f3:ea:15:d6:52:53:5b:29:92:63:b9:
90:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:43:F3:D5:D3:38:FA:ED:9C:DE:41:4E:37:9E:3A:5B:D8:EE:7B:61
X509v3 Authority Key Identifier:
keyid:F4:ED:5E:5D:BB:A1:EA:B6:D3:95:8E:59:41:82:9C:9D:A1:B2:C6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:09:49:ee:ca:5a:bc:0b:24:fe:97:89:c9:b4:98:11:09:76:
5b:60:c4:e4:0b:4d:7e:99:ca:9d:2c:c3:7e:e0:e0:6b:5e:97:
b2:e7:95:53:b4:39:c7:1a:4c:74:78:87:75:33:0e:8e:69:db:
d7:92:13:70:91:e0:68:9a:40:11:83:16:66:e7:73:7c:96:f5:
5c:43:fc:97:1b:ba:e6:f9:b4:79:80:79:6d:cc:a3:15:41:81:
6b:46:13:dc:0f:38:25:50:81:45:a7:70:dd:5e:c2:e1:d0:ac:
5a:3a:74:cd:0f:3c:6f:7d:bf:88:14:50:fe:af:0d:af:00:65:
bc:0a:66:b2:76:64:56:8a:5d:4c:4a:20:42:e3:79:12:6c:db:
b0:9f:6f:78:88:0c:58:05:fb:c9:0c:91:de:9d:3a:0c:67:90:
01:95:38:2a:b0:12:e7:be:48:bf:8a:a2:ba:b7:1f:a8:84:49:
97:60:c3:16:f1:d2:de:12:5f:79:06:78:aa:ad:66:db:2b:d3:
15:76:24:31:1b:04:15:89:19:7a:05:93:ba:3b:6a:5d:09:59:
df:9a:af:ba:85:64:8c:7a:dc:d6:dc:e8:db:17:2e:98:9b:fe:
a0:36:57:75:5d:d4:8b:63:81:98:d7:44:02:34:93:7b:c6:ae:
cf:7b:58:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:30 2025 by rpki-client