Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
File: 9JUCyXSCsoUChSyX75vToKKl6fA.mft (raw, json)
Hash identifier: yXymquFfs33bhYSrvh84UkuL+IHwLB4LHml2jlJUdaU=
Subject key identifier: 12:2E:D1:DC:F9:00:E8:AC:3D:A2:94:36:7C:AA:0F:24:A7:7B:30:92
Authority key identifier: F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
Certificate issuer: /CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Certificate serial: 01993680ED0761A41EEEB5ABD4C6387D5704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
Manifest number: 144C
Signing time: Thu 11 Sep 2025 02:00:42 +0000
Manifest this update: Thu 11 Sep 2025 02:00:42 +0000
Manifest next update: Fri 12 Sep 2025 02:00:42 +0000
Files and hashes: 1: 9JUCyXSCsoUChSyX75vToKKl6fA.crl (hash: EsTLn9eB0Zp5sMlfgJTjR7dz60KUeQrLLpanhc5FqO4=)
2: EaZvYH2YGiO37NZ1bGFHkmEdMcw.roa (hash: HSZLZ0cKEKUvUtWkwWARshBwReQDxlGBdY+EDDOfXjA=)
3: NbJCCt6mZbGhQhsVck9Ye84ql_A.roa (hash: 1GHJ4CqSoQFt3IGPoRuzPcM9vgZHBXB7ib41DM1rbg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:80:ed:07:61:a4:1e:ee:b5:ab:d4:c6:38:7d:57:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Validity
Not Before: Sep 11 02:00:42 2025 GMT
Not After : Sep 12 02:00:42 2025 GMT
Subject: CN=122ed1dcf900e8ac3da294367caa0f24a77b3092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:d9:02:e1:54:c9:46:de:f0:59:0b:1c:a2:
dd:b9:a1:eb:6b:41:a7:8b:36:5e:e0:8a:9b:de:66:
03:6b:9c:8d:44:f1:11:c9:6f:19:cd:45:da:9b:cc:
1e:81:c7:71:ea:d6:b6:61:f2:a7:3a:20:d8:bd:1c:
70:e5:b4:fd:76:db:4c:d2:b3:1c:60:fa:a8:44:1c:
63:1d:21:9d:4f:0c:e3:93:7e:31:16:8c:41:6a:0e:
5a:7a:56:b8:66:a4:c3:2d:9e:26:6a:3f:c1:19:88:
d2:7b:20:f9:46:97:36:61:4a:74:2c:f4:33:c4:f8:
36:08:67:14:27:cb:5e:9e:16:44:08:f6:fc:0c:9b:
23:15:6d:1d:dd:3b:68:53:43:2a:4f:5f:b0:1b:c4:
42:d0:8a:6d:a2:e3:67:ef:ef:80:33:52:8e:1b:96:
7b:b9:2e:26:e7:a4:3d:d7:ee:d2:e9:99:df:7c:ad:
6e:03:74:89:40:82:96:05:c6:3a:f0:22:d3:a2:62:
8a:08:e0:f0:1b:87:0c:bf:76:cf:00:c1:ba:2c:50:
0a:ae:d9:f2:60:d0:bf:96:07:d8:78:1c:3b:ed:e1:
b5:7f:73:86:2f:71:d7:82:c9:88:d9:25:54:df:e6:
52:7e:31:39:0d:8b:77:e1:2e:52:b8:18:cb:70:1e:
a3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2E:D1:DC:F9:00:E8:AC:3D:A2:94:36:7C:AA:0F:24:A7:7B:30:92
X509v3 Authority Key Identifier:
keyid:F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:74:26:e7:5b:c9:ec:29:4b:c9:b9:65:61:68:f7:65:19:7f:
c3:28:4c:d2:13:5d:8f:6d:09:00:70:f4:24:7e:14:95:c7:62:
1b:d4:1b:7a:15:4d:97:fb:61:a5:e1:ca:61:a0:1d:e1:79:9c:
a9:79:ab:7b:5b:2f:80:82:de:f1:af:57:ac:c6:9b:52:00:ea:
51:31:d5:33:f2:6b:48:4f:0b:59:6f:e1:bc:56:aa:4d:39:79:
12:c0:7c:38:e4:57:b0:4d:7d:45:a5:25:68:40:0d:42:8d:da:
f1:49:24:45:c7:88:45:b3:9e:e6:48:fb:85:8c:46:24:01:5a:
7a:1a:37:a1:77:ec:29:b5:81:31:66:a9:35:55:70:e5:87:8d:
00:74:5a:9d:dd:7a:ad:15:ef:50:bf:71:92:6e:13:29:91:3c:
69:b9:ab:5e:ba:bf:e7:41:51:c4:88:bc:69:db:2b:f9:0b:74:
7b:35:72:a5:c8:43:b6:d3:86:79:f2:51:20:e9:1f:85:1d:b3:
5d:5c:fc:af:a4:e3:b9:e8:14:41:79:40:65:47:92:98:b4:72:
bf:9f:7b:f3:74:95:7c:b6:f1:bc:2c:68:c5:89:9f:cc:83:99:
0f:dc:9f:41:98:72:37:34:36:e2:da:42:8f:6c:a8:a2:70:43:
3e:68:ec:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 10:23:13 2025 by rpki-client