Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
File: 9px-uGIkrbOECIR97kz8TEADrV0.mft (raw, json)
Hash identifier: VXrT5/M7uWWURyJQy+xBlc0qQi8eL5Ar4qhLS/PJpc0=
Subject key identifier: 3E:16:AD:57:F3:72:30:97:D6:FD:10:BC:25:E5:67:8D:C4:6C:03:6B
Authority key identifier: F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D
Certificate issuer: /CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d
Certificate serial: 0199307F06702067902EB5B20F7606E0F05A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
Manifest number: 0ED7
Signing time: Tue 09 Sep 2025 22:00:55 +0000
Manifest this update: Tue 09 Sep 2025 22:00:55 +0000
Manifest next update: Wed 10 Sep 2025 22:00:55 +0000
Files and hashes: 1: 9px-uGIkrbOECIR97kz8TEADrV0.crl (hash: p2p4afxJpeQGS8KlpCSr9OuiJStWhQHUpMsihYgx9OU=)
2: YdnfzNQU6p17HNy9eA1Hw53deFE.roa (hash: 2Yw8oKr6x9VyLBdNC/o5JNz+v9yyH0gMbVBwfTOD/GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:7f:06:70:20:67:90:2e:b5:b2:0f:76:06:e0:f0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d
Validity
Not Before: Sep 9 22:00:55 2025 GMT
Not After : Sep 10 22:00:55 2025 GMT
Subject: CN=3e16ad57f3723097d6fd10bc25e5678dc46c036b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:48:42:37:ce:66:82:74:e1:4a:da:ce:2e:f5:
dc:bd:b6:9b:a7:fa:52:79:a0:2f:5e:01:6e:83:e8:
7e:f1:57:15:66:02:cc:f6:00:fd:dd:74:2c:6a:5b:
c2:8e:ad:82:0b:77:eb:3f:d5:37:e7:02:c6:95:8a:
c9:ff:00:62:2e:f6:f6:6d:7f:2d:90:41:e7:5d:0a:
91:03:39:4e:83:08:ec:6c:1f:0d:ba:d8:98:f1:ec:
01:b7:d8:67:a1:1c:dc:87:32:88:12:a1:25:9d:a3:
1d:c9:83:85:db:4a:ea:b4:81:a5:57:eb:1c:44:23:
1c:c7:8f:f8:11:ce:d9:52:ee:44:67:ef:58:6f:c0:
dc:7b:31:f7:7e:f0:96:7b:c0:4f:78:96:a7:6e:aa:
55:b6:21:0b:24:a6:51:6f:91:c2:b3:2a:49:5f:c3:
8c:be:40:02:24:03:48:6b:c6:15:60:08:23:6d:5b:
55:17:f4:27:84:9d:50:08:c2:6b:c9:33:a5:af:b3:
41:05:07:eb:8f:50:26:ab:ac:f5:05:75:d8:19:65:
2e:5f:a1:42:48:55:0e:f6:77:f0:d2:c6:58:24:63:
d1:54:e2:ea:c0:d8:ad:e0:d9:dc:a9:c9:66:99:e7:
66:9e:94:ff:bd:05:72:f0:db:a5:8f:f9:1e:fd:86:
92:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:16:AD:57:F3:72:30:97:D6:FD:10:BC:25:E5:67:8D:C4:6C:03:6B
X509v3 Authority Key Identifier:
keyid:F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:fc:23:41:55:6a:9b:2c:6d:bf:37:cb:a0:d3:1e:24:8b:d1:
96:82:ad:42:e4:45:fc:e0:e1:a2:10:f3:5e:4c:e4:1c:a7:d8:
c3:41:b1:71:29:c3:dc:5e:e5:0c:f9:89:15:1c:52:e6:3c:38:
77:70:87:b6:8d:f5:fe:28:83:44:ce:08:87:1e:ac:85:11:97:
eb:3f:ab:42:5b:6d:3c:0b:4a:5c:4a:c8:69:76:97:4e:64:ae:
06:e2:24:48:4e:45:d4:83:be:fa:40:18:1d:be:56:13:25:77:
ae:7d:59:f5:44:e7:54:51:9b:44:91:5b:fc:fe:85:b6:17:cb:
aa:5c:27:2e:dd:34:94:b8:94:b4:18:29:79:d1:f4:ac:72:69:
88:32:05:10:15:f5:26:05:59:04:88:35:3c:5f:16:77:b1:92:
ba:4a:b2:84:4d:80:93:68:c3:1a:ed:6f:10:da:b7:bc:e1:25:
15:99:3c:4d:84:4f:8d:24:87:26:25:2d:2b:04:3d:30:cc:b6:
fe:9d:6c:51:2a:6e:2e:28:7a:27:f9:a2:09:e9:1e:6c:e3:18:
f5:66:ae:89:54:83:0c:0f:f3:07:6a:9f:7c:a1:c4:d6:33:48:
ba:17:44:20:0c:36:a6:ef:9c:93:c0:c2:7a:81:0d:96:69:6e:
f7:57:91:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:07:24 2025 by rpki-client