Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
File: t09j_Q3Bl-Uq0nInbEDT7kux15k.mft (raw, json)
Hash identifier: kFPIeEyb4zV80muIejt/rq7ZNFHMXuOKouaZB7okrVw=
Subject key identifier: BC:09:EC:19:5B:E6:36:AA:01:63:E6:28:C0:58:0A:AC:2B:8E:6F:6D
Authority key identifier: B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
Certificate issuer: /CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
Certificate serial: 019921B1F1FD760631A9DCFF4E0E9CE1AA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
Manifest number: 1414
Signing time: Sun 07 Sep 2025 01:02:13 +0000
Manifest this update: Sun 07 Sep 2025 01:02:13 +0000
Manifest next update: Mon 08 Sep 2025 01:02:13 +0000
Files and hashes: 1: CTtxM-1YJnI7s2CeXEI8bJGchw8.roa (hash: m3vS1eOhVy8HVysz20rw/64QS2NyFhJNMyCoI4Eqes4=)
2: t09j_Q3Bl-Uq0nInbEDT7kux15k.crl (hash: dS509jouT1nsCqzDCPw1TM5gnx6KpnDvpLdf8rG6KzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:f1:fd:76:06:31:a9:dc:ff:4e:0e:9c:e1:aa:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
Validity
Not Before: Sep 7 01:02:13 2025 GMT
Not After : Sep 8 01:02:13 2025 GMT
Subject: CN=bc09ec195be636aa0163e628c0580aac2b8e6f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:56:cd:4f:70:c8:ef:34:3a:5d:d0:d3:1b:
ca:aa:3e:0a:12:37:23:03:2e:97:5f:88:6c:be:26:
e4:10:16:f2:45:ef:1a:f2:7b:d9:82:80:0d:82:e4:
86:49:57:e8:f8:0b:39:13:fa:10:48:4f:d3:79:bc:
5f:48:82:d9:39:ee:86:45:59:10:f9:f3:71:73:c0:
51:75:87:9a:f3:bc:f5:24:a7:e8:83:f7:ab:d6:1c:
bb:5e:db:5b:35:4a:05:a3:18:03:75:16:f6:06:1e:
9d:4c:8f:98:ac:4c:d5:98:67:26:fb:91:d2:07:f0:
b3:b4:4c:c8:52:58:b7:5c:4b:2e:b6:bb:18:31:04:
b5:e8:a5:81:5a:c0:99:99:6b:bc:32:9b:05:ca:92:
45:22:dc:8f:44:e9:0f:2f:2b:be:6f:fd:f9:63:0e:
0b:8e:4a:0a:56:57:2e:18:76:2a:7f:7a:84:e1:8b:
b5:c4:a1:24:fb:28:3b:e5:e6:41:ac:05:9e:e2:4f:
8e:6c:d4:5c:5d:39:53:89:46:52:ff:1a:11:43:ad:
d4:5e:e0:f4:82:70:97:45:4b:5f:75:60:bd:b7:18:
78:29:62:c9:90:e7:bd:8c:87:d2:5f:be:fc:e5:ac:
c9:c0:48:5d:e1:b7:5f:80:4f:7b:61:7e:c4:a0:12:
42:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:09:EC:19:5B:E6:36:AA:01:63:E6:28:C0:58:0A:AC:2B:8E:6F:6D
X509v3 Authority Key Identifier:
keyid:B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:69:8e:60:fe:d9:a4:de:9e:42:9d:b0:1a:e9:a4:5c:fc:cb:
d0:81:16:47:8b:9a:69:c0:2b:89:cc:92:ca:4c:81:32:cb:9f:
14:81:55:05:58:79:10:92:38:d8:7b:d6:79:39:f5:7e:84:36:
ae:e5:92:ca:ea:7a:df:8b:3b:4c:95:c7:be:e2:12:71:ae:73:
12:b2:44:e4:26:83:f6:21:f9:58:47:c8:7c:2f:e6:34:f7:df:
db:84:de:64:d6:fc:60:a5:19:bc:d9:35:c4:ee:9f:c9:af:dc:
39:ef:eb:ce:9b:65:c8:ff:cc:12:52:5d:4d:59:eb:9d:13:10:
07:8d:cf:22:fa:6b:ac:82:e0:5a:18:a7:c8:61:59:7d:b7:09:
81:63:e4:e8:c6:a6:37:fa:59:04:67:07:d4:2d:65:e4:95:d6:
0d:43:82:aa:40:be:98:03:6d:7b:b7:2a:fd:dc:63:e7:1c:9e:
77:c1:d5:e6:4b:fe:7a:e8:0e:84:7e:95:c8:c5:35:24:0f:de:
65:2c:75:f7:02:19:45:bd:9e:1d:17:92:18:86:9b:9a:a8:93:
26:ba:d1:92:fc:56:a3:29:3d:ae:44:ed:ba:1e:e2:57:41:f4:
00:57:67:ea:4c:e2:91:a7:d5:3d:70:f3:31:90:a1:7f:25:a6:
2b:42:48:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:35 2025 by rpki-client