
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
File: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft (raw, json)
Hash identifier: btrg6VH5KXsZZ3s3H1fls9mZWTHEw+xXA5iX2rzeJig=
Subject key identifier: D3:3D:9D:69:DE:71:5C:EF:2E:30:A2:A0:14:AF:A6:AC:3C:83:DF:08
Authority key identifier: 9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E
Certificate issuer: /CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e
Certificate serial: 019921B06EB29ABE7FE82E55BAF795D95EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
Manifest number: 0BB5
Signing time: Sun 07 Sep 2025 01:00:34 +0000
Manifest this update: Sun 07 Sep 2025 01:00:34 +0000
Manifest next update: Mon 08 Sep 2025 01:00:34 +0000
Files and hashes: 1: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl (hash: Zy4AL4F9hxn5pRRFWPtJiDhH257h2nbBjq92ocRfros=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:6e:b2:9a:be:7f:e8:2e:55:ba:f7:95:d9:5e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e
Validity
Not Before: Sep 7 01:00:34 2025 GMT
Not After : Sep 8 01:00:34 2025 GMT
Subject: CN=d33d9d69de715cef2e30a2a014afa6ac3c83df08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:39:35:48:1a:68:e7:17:a5:67:e9:6a:c4:d3:
7f:04:76:67:9a:ea:f7:c7:56:39:a9:8b:19:01:b5:
17:97:3c:13:a7:d5:ee:d8:76:ba:66:75:36:20:d8:
2a:23:f6:d3:ca:27:dd:a7:f9:56:59:43:33:38:53:
6c:c2:68:e2:0b:78:eb:fe:74:31:a5:67:a2:90:51:
3b:62:a0:11:c5:94:2a:ff:db:f8:e4:43:bb:e9:cf:
e5:2f:46:0c:9e:9d:b2:1a:03:3a:f8:64:9d:4c:ea:
99:ad:e8:55:07:fc:d7:86:22:c9:1a:d2:1e:77:4e:
cd:29:bb:b7:cd:09:b9:23:65:b8:ef:ec:5e:37:0d:
f4:7d:bc:a3:87:7c:0e:bf:79:bd:dd:68:b4:89:e9:
d7:9a:b8:51:c4:0d:b4:59:5a:26:be:4b:c6:a6:84:
1e:65:24:82:39:29:4e:fb:ba:8e:9c:f1:fb:42:f7:
74:fc:88:06:13:e7:40:67:f1:91:8e:bb:4d:7a:74:
05:5d:5a:69:9b:b9:44:7d:2b:1a:70:0f:a2:4f:51:
20:07:9f:45:d6:3f:9d:36:07:b7:be:4f:96:e5:ef:
88:d6:e1:d7:e5:17:d0:b5:f1:e4:2e:e7:1a:08:12:
6b:a4:9f:bc:5a:27:fe:56:5d:ba:c9:b3:db:b8:09:
cc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3D:9D:69:DE:71:5C:EF:2E:30:A2:A0:14:AF:A6:AC:3C:83:DF:08
X509v3 Authority Key Identifier:
keyid:9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:47:56:17:a2:f1:9d:9e:9f:9d:cf:ca:bc:e9:e8:c8:42:27:
3e:07:56:31:70:4b:91:2c:4b:71:7a:44:93:56:f5:b1:4f:c9:
da:b2:30:10:68:83:21:f8:a5:80:3d:3d:ca:47:4c:cc:f0:22:
43:8f:a1:7b:34:3d:0f:c0:fd:18:91:0a:3f:9d:b7:5e:ea:fc:
31:39:ef:ca:a6:d4:6e:cc:13:a2:6b:33:02:d3:36:55:67:28:
55:25:65:f4:57:07:23:31:fe:fb:a0:fb:ac:9c:cc:f9:82:1d:
62:12:44:04:aa:db:7d:1c:d5:b8:22:1e:bd:30:9c:4e:0a:2b:
8f:b0:29:62:fd:33:88:27:18:0f:58:6d:74:cc:d1:30:d1:b7:
40:b2:c4:7d:08:98:08:7c:55:bb:d1:4e:7a:ae:44:ff:02:7c:
2e:5c:69:a1:24:8e:e6:cb:93:17:f3:86:2e:5b:91:1f:08:f7:
60:dd:6b:92:6f:12:ee:b6:d5:b6:26:1e:18:c4:32:80:1b:43:
36:49:f9:d7:35:d9:ba:85:ce:e7:3f:91:88:ef:c7:bf:f2:4f:
89:c3:41:46:42:81:82:e6:7d:06:41:e0:18:7c:48:b7:54:9b:
fe:5b:b1:e8:af:f1:30:d4:eb:ce:43:68:00:4f:ad:a2:a0:7c:
27:1f:36:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:52 2025 by rpki-client