Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
File: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft (raw, json)
Hash identifier: Gh+2x88arRc/YoQNZbFuc0yX8nCs+pQ1uIrFun5LaCA=
Subject key identifier: BD:2F:10:91:FF:E0:42:8D:F0:81:ED:82:95:82:8E:91:9E:54:D2:98
Authority key identifier: F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7
Certificate issuer: /CN=f6e7d811954993a953b7948dd06765cbc090dcf7
Certificate serial: 0199228C43895571497FFF2B304B9BC831C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
Manifest number: 0289
Signing time: Sun 07 Sep 2025 05:00:41 +0000
Manifest this update: Sun 07 Sep 2025 05:00:41 +0000
Manifest next update: Mon 08 Sep 2025 05:00:41 +0000
Files and hashes: 1: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl (hash: +5UjhVRs8kRjtoYc5yMw57lhjBXM5JsiGvnYawvpkdg=)
2: AnWhlH6XKqUu4_GnJM2nKdO071s.roa (hash: /ulEE3dLzdrGEic+8DMTJn8iVbu0rFN7I+VggC4+dZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:43:89:55:71:49:7f:ff:2b:30:4b:9b:c8:31:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6e7d811954993a953b7948dd06765cbc090dcf7
Validity
Not Before: Sep 7 05:00:41 2025 GMT
Not After : Sep 8 05:00:41 2025 GMT
Subject: CN=bd2f1091ffe0428df081ed8295828e919e54d298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:f4:0e:f2:09:10:cc:69:4c:9b:40:af:a4:
03:e6:e4:fe:1e:95:46:73:34:c4:f6:7f:eb:28:10:
ef:ce:0d:39:b6:5d:d1:0f:f1:76:39:03:65:2b:4b:
15:ed:af:64:84:d3:dc:57:bd:ff:86:c4:c7:49:2d:
e6:75:86:48:6c:8c:66:cd:fe:b9:80:8f:16:93:ce:
af:9b:83:a3:ec:9a:89:f9:b2:4b:e2:3d:5d:0e:f4:
6d:65:07:b1:61:7a:10:3d:42:d6:f0:f9:bd:96:24:
fe:2c:03:0f:7e:87:65:86:c1:c8:96:f3:6d:0f:24:
fa:b0:3c:ec:ce:16:f2:22:e1:a2:13:1f:c8:e9:ed:
d3:f2:32:ab:c7:e8:b2:4d:53:80:c5:b8:ea:cb:05:
f0:5b:75:65:c5:3c:76:a4:e1:51:4b:1d:7d:ab:9d:
e1:55:98:05:30:3b:7d:c2:1f:88:2b:84:23:b1:fe:
ea:be:6a:5b:32:aa:44:ad:e8:2d:ca:a7:05:50:3c:
56:10:7a:02:39:87:15:9d:c3:41:f5:0b:ac:6a:b9:
21:02:ae:87:84:9d:c8:20:71:43:3e:f9:a4:0a:fc:
4c:1d:cc:9a:14:47:a0:49:d3:c1:44:4e:25:33:0d:
33:0e:49:aa:d7:eb:8d:15:74:2f:3d:59:62:4f:05:
de:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2F:10:91:FF:E0:42:8D:F0:81:ED:82:95:82:8E:91:9E:54:D2:98
X509v3 Authority Key Identifier:
keyid:F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:81:63:a0:fe:fd:56:7e:0c:b8:6b:b7:ed:0c:95:92:bf:05:
6b:b5:34:f4:20:10:64:ae:bc:e6:4f:30:c9:6a:80:71:31:8f:
03:4a:68:a1:ab:2d:7e:a4:b9:ac:65:97:f5:bb:08:75:fb:21:
41:d4:02:e6:66:03:66:43:f0:0a:cc:90:ab:82:11:4d:5b:b0:
52:65:63:60:cc:92:69:cd:78:11:e1:ab:36:7a:10:40:dd:c4:
53:59:5b:c5:fb:19:43:60:b3:a9:7f:09:bb:dd:06:4c:99:8f:
c9:47:14:ae:ed:8d:f8:87:37:f4:b9:74:08:8d:5a:e8:56:02:
79:16:6f:f0:03:ac:d6:c3:40:5a:87:c3:7d:22:34:f9:8a:44:
36:87:2e:49:d2:e5:12:27:72:af:6c:04:48:9e:ab:79:b0:d8:
a4:71:c2:81:c2:be:93:91:a1:d8:f0:20:b7:e5:0c:88:d9:f2:
4d:08:7b:e0:8a:d9:8b:c3:2a:a7:59:9d:69:6a:f5:72:58:99:
03:a1:fc:12:f9:65:13:8a:26:16:ea:4f:19:b0:52:18:d1:66:
6e:36:f8:bc:ff:77:16:75:4f:cf:64:d5:df:f6:52:fd:c5:b0:
58:16:1b:d6:ea:6c:84:72:d0:3e:39:e8:f0:dc:a0:b6:87:10:
b6:ec:87:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:35 2025 by rpki-client