Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
File: FO-9HV4axzX28jUJzyoOtKH5tOk.mft (raw, json)
Hash identifier: 2FnPobcamPB4lH59l6Z3n8yXRjWncII0eJXRcxMGdfo=
Subject key identifier: 5C:88:AE:84:11:F6:C5:01:10:DC:84:CB:07:5D:B5:50:07:76:4D:8D
Authority key identifier: 14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
Certificate issuer: /CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
Certificate serial: 019932A3C176E84E3D2D410BD0B7D2C60379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
Manifest number: 1609
Signing time: Wed 10 Sep 2025 08:00:16 +0000
Manifest this update: Wed 10 Sep 2025 08:00:16 +0000
Manifest next update: Thu 11 Sep 2025 08:00:16 +0000
Files and hashes: 1: FO-9HV4axzX28jUJzyoOtKH5tOk.crl (hash: 6SYn1Ely7aYK2v7JIcpL72k92FyT44Y5BZ+R7vXd4tE=)
2: O3vVokpmMILfLuCvtK11xQ6QzgQ.roa (hash: QJ033XApjs5jTBUXlpnVdiwOxF+/6PemalcFTFglCaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:a3:c1:76:e8:4e:3d:2d:41:0b:d0:b7:d2:c6:03:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
Validity
Not Before: Sep 10 08:00:16 2025 GMT
Not After : Sep 11 08:00:16 2025 GMT
Subject: CN=5c88ae8411f6c50110dc84cb075db55007764d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:36:3e:b8:f6:ee:2f:77:ca:ad:39:4b:38:d5:
43:b7:5e:a7:52:ac:75:10:6c:2e:70:99:6f:ec:71:
6b:44:bf:b6:6c:83:91:e1:51:f0:1d:a4:06:40:6f:
4c:74:ea:1f:90:d0:4a:72:c4:90:ad:34:4a:fc:30:
e1:78:b4:be:ef:7b:3a:28:f7:84:f5:d1:0c:40:91:
66:e4:97:1c:11:1d:e1:a1:4b:db:88:b8:65:83:93:
bc:bd:fb:d3:95:7f:4a:c5:5e:c3:01:a1:4c:29:25:
89:6d:54:51:ce:5e:b0:42:8f:91:be:f4:6b:78:5c:
3b:93:40:fd:1c:54:a0:0b:7a:89:5d:e8:f2:98:d1:
c0:0b:e6:2b:8c:67:9f:c4:0d:49:1e:4a:24:e4:e6:
e8:b6:ba:85:52:c9:6f:ac:1c:f2:e3:8c:35:76:90:
14:cf:b7:c8:c2:25:1a:1e:1d:9c:c7:58:32:36:4d:
18:97:eb:b3:3d:9e:33:36:73:70:68:5f:db:90:76:
f7:7e:19:d8:bf:e7:b7:0a:88:12:32:48:3d:e9:2f:
74:90:8b:33:3e:ab:d7:1e:4d:68:0d:28:1c:87:c2:
ae:67:c4:68:71:e8:37:79:ac:0e:7b:a1:7c:c0:da:
d6:7e:70:1e:19:dc:de:d3:24:69:b8:f6:b1:e2:dd:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:88:AE:84:11:F6:C5:01:10:DC:84:CB:07:5D:B5:50:07:76:4D:8D
X509v3 Authority Key Identifier:
keyid:14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c0:9a:c4:96:d4:cf:77:6c:6f:9d:89:a0:51:2d:52:d4:fd:
ea:78:c8:a4:aa:04:95:9e:8a:00:42:25:1f:ee:99:b4:10:dd:
57:c3:48:9b:9a:4d:24:9d:b2:fb:f6:66:3b:a4:4d:be:8e:82:
9f:78:af:84:a1:3e:a7:f2:87:c3:5b:c3:8a:a3:bc:79:66:b0:
61:ce:74:be:1e:4b:ad:23:d6:86:00:88:3d:7d:17:18:57:2b:
09:8a:ce:77:81:b9:5f:ee:bf:33:af:31:43:11:0c:5a:c3:b7:
62:79:23:4d:64:7d:64:09:c1:46:3e:4e:99:42:c8:c5:48:ba:
7d:52:15:48:21:23:17:06:11:51:22:0a:03:df:c5:8c:0b:ef:
07:ca:23:ce:e1:38:78:36:e0:46:b6:43:6b:b2:7d:72:49:ef:
0d:80:3d:25:f1:f9:19:ba:84:36:4d:4f:80:ba:2a:c3:54:db:
a3:04:d3:06:13:ea:a1:e9:4b:41:c3:0f:12:61:e9:ba:a2:78:
d9:cc:bb:a1:b0:81:19:02:08:d3:28:0f:40:b9:b6:6c:a6:d6:
88:9c:96:cb:9f:e3:a7:38:04:3f:43:a3:d9:c9:33:33:6c:a9:
32:d6:92:36:09:ab:42:43:37:3d:5b:0e:73:79:ca:96:56:14:
18:16:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:32:56 2025 by rpki-client