Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
File: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft (raw, json)
Hash identifier: MbvrvCRNepGhLnl2asEyXDDEx4lGHBStH2KfXtoy/oI=
Subject key identifier: 65:B8:EF:25:12:BD:EB:74:7E:92:0F:AB:37:09:DE:D3:E2:34:B6:FD
Authority key identifier: F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
Certificate issuer: /CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Certificate serial: 019922FAAFDD20C09A985E72CB484FAA67B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
Manifest number: 02A6
Signing time: Sun 07 Sep 2025 07:01:18 +0000
Manifest this update: Sun 07 Sep 2025 07:01:18 +0000
Manifest next update: Mon 08 Sep 2025 07:01:18 +0000
Files and hashes: 1: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl (hash: dyopUq16U9NKqX+hKcvhA0S5v+vk8ppvZguXaZEBkTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:af:dd:20:c0:9a:98:5e:72:cb:48:4f:aa:67:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Validity
Not Before: Sep 7 07:01:18 2025 GMT
Not After : Sep 8 07:01:18 2025 GMT
Subject: CN=65b8ef2512bdeb747e920fab3709ded3e234b6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e7:b3:1c:4b:6f:0e:4b:31:65:9a:64:16:56:
f2:00:24:3a:2b:0e:56:d9:b7:d6:a3:c5:70:5a:2f:
66:8d:b8:b5:f2:7a:d3:9d:1a:85:44:51:27:69:a8:
31:b3:74:6b:15:21:b8:4f:42:ea:0a:04:08:a3:f2:
12:1e:5b:ae:25:9f:7f:b2:82:9c:90:cb:e0:54:9c:
a4:d9:50:3e:7b:33:e9:07:d2:88:52:bd:41:1c:63:
fe:a0:52:3e:21:5d:72:27:c4:02:10:4d:ef:d4:dd:
71:e5:c6:18:1b:e4:9e:0b:a9:f1:c7:e2:d6:11:0b:
d6:58:f7:8b:4a:02:b7:d2:dc:ed:07:00:01:73:5d:
04:f4:98:43:fa:8b:10:04:84:2c:f8:d7:c0:41:56:
52:9e:5c:a0:19:2c:17:d0:09:71:b5:95:4f:ba:e5:
88:4d:4c:3f:f6:ae:c3:6e:0e:cd:e1:d2:7a:b6:fe:
65:42:42:46:7b:de:45:0e:4b:5e:16:aa:dd:70:19:
9d:00:2d:36:b7:b1:dc:78:18:eb:e7:57:e3:44:12:
de:5b:96:3a:58:40:c9:8e:b8:03:3a:7d:75:ae:eb:
f5:6c:0c:3e:41:52:c4:07:13:54:a9:78:e5:90:6a:
09:dc:29:da:4b:d2:11:0b:fb:19:f4:34:9a:95:38:
24:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B8:EF:25:12:BD:EB:74:7E:92:0F:AB:37:09:DE:D3:E2:34:B6:FD
X509v3 Authority Key Identifier:
keyid:F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:27:ec:66:97:5b:81:11:3e:fd:eb:20:67:43:31:b2:a4:45:
ad:8c:98:83:08:45:8a:c5:ba:8d:d2:1c:d9:4c:7f:59:e2:1d:
71:39:77:ff:9c:38:34:4c:38:e4:d4:69:12:96:87:ac:01:1c:
1c:64:9b:6f:30:f7:70:c7:e4:74:1b:d6:b1:d6:31:d5:22:4b:
61:3f:c9:1a:a7:96:58:17:30:b4:95:29:3f:17:3c:64:be:41:
37:33:38:b1:41:96:8c:19:95:5c:a1:8c:d0:77:4d:0e:6d:9c:
dc:b3:bc:15:41:74:fe:c0:4f:a6:72:ea:9d:ab:c0:5e:22:d6:
ab:93:57:5f:4f:4a:c9:45:8c:18:93:08:ee:7a:60:91:78:82:
e2:16:41:02:fe:c8:7c:1e:94:eb:ec:ae:c9:b9:99:5e:d3:aa:
00:21:e7:fe:08:78:90:9c:3f:d7:7c:65:b3:f4:be:e1:e6:9b:
b2:34:95:4e:e4:27:fa:50:78:8d:cc:84:da:1b:85:34:8b:59:
cd:ec:88:a1:d5:94:5d:a5:13:d9:1f:0f:12:ef:fa:c4:5c:ff:
30:0b:9e:50:a5:40:3b:7c:99:64:a7:48:23:fa:2e:61:a5:ad:
19:d9:c9:dc:b8:18:a6:3f:ae:a6:04:8e:fd:77:79:60:f5:29:
52:cd:f6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:49 2025 by rpki-client