Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
File: 0R9tkk1vbMDpQIN9kwH85zIGV3E.mft (raw, json)
Hash identifier: Hcd6zr7xHYbdoNRYd88PUEdMui/PtUipxWSIQqIiJAE=
Subject key identifier: 41:0F:9B:27:CC:13:50:55:50:55:44:69:B7:20:47:D3:8A:02:6A:5C
Authority key identifier: D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
Certificate issuer: /CN=d11f6d924d6f6cc0e940837d9301fce732065771
Certificate serial: 0199172CEFD34F6E7CB8DBFFBFC0AB1597F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
Manifest number: 04C4
Signing time: Fri 05 Sep 2025 00:00:44 +0000
Manifest this update: Fri 05 Sep 2025 00:00:44 +0000
Manifest next update: Sat 06 Sep 2025 00:00:44 +0000
Files and hashes: 1: 0R9tkk1vbMDpQIN9kwH85zIGV3E.crl (hash: O5YzJjwCw2a1TBgBvtZEMFZ6DLbsC0kJjVVcCosjWbs=)
2: iJSQx0f1nTa0-CmNbadm7Gos7IA.roa (hash: LXabEDWzH1fx8QmFW8g5Pa/8Oh8pnxFijMUOQc1WwTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2c:ef:d3:4f:6e:7c:b8:db:ff:bf:c0:ab:15:97:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d11f6d924d6f6cc0e940837d9301fce732065771
Validity
Not Before: Sep 5 00:00:44 2025 GMT
Not After : Sep 6 00:00:44 2025 GMT
Subject: CN=410f9b27cc13505550554469b72047d38a026a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:44:92:ab:2a:2d:22:9c:7d:1f:d0:b7:01:ce:
82:16:ef:18:17:bb:66:5e:6c:06:6a:f3:7f:fe:25:
13:b6:2d:e4:72:30:c6:a6:63:aa:0d:f2:28:9a:3e:
50:10:da:93:a2:49:ef:b3:fb:0e:57:33:18:dc:4f:
c9:90:5e:db:21:a6:e9:22:28:a0:2d:8b:e4:6d:27:
40:ad:ad:30:be:8e:69:a3:96:dc:5c:ce:d9:80:e5:
e9:73:12:39:56:45:e4:0b:40:df:22:85:8d:f5:aa:
ea:fc:25:4d:0b:b2:1a:2b:9c:09:d5:56:19:c8:5a:
d7:b1:91:e0:73:06:de:00:bb:85:56:a8:bb:25:fb:
0c:78:db:1a:8b:02:05:fa:8d:8d:47:f7:7c:37:dc:
7b:8b:6f:b8:b6:da:5c:1f:90:a8:f1:42:f9:bf:c6:
c0:f7:92:0c:db:09:9f:dc:0c:6c:8e:18:5f:a3:46:
51:45:05:cb:7c:fc:32:d9:a1:4f:e8:68:ae:b0:37:
d9:87:fe:22:df:8d:53:82:0f:5e:e1:18:ca:3c:93:
aa:93:8d:55:e8:4f:14:47:97:70:10:8d:a3:f5:33:
54:9e:94:41:12:6e:37:a4:74:9c:e4:42:89:df:d5:
1d:07:a4:ae:1a:99:de:99:de:39:9f:db:fc:89:9e:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0F:9B:27:CC:13:50:55:50:55:44:69:B7:20:47:D3:8A:02:6A:5C
X509v3 Authority Key Identifier:
keyid:D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:99:92:6c:f4:4f:fe:f9:7c:22:dc:df:18:81:f0:46:02:00:
2e:de:6c:53:9d:cb:79:f8:fa:a6:09:54:8c:55:31:75:fd:5b:
f4:9a:2c:bd:c3:7a:0b:54:94:cd:ec:76:ad:2e:92:62:57:70:
9d:aa:2a:68:9f:f7:ee:af:f5:72:9d:68:2f:d4:d9:73:9b:c8:
1e:91:6d:71:dd:a4:05:e1:5d:06:7d:81:c1:19:4a:c0:f3:15:
bb:65:8d:d9:f2:ab:96:f8:15:ec:bd:9a:2c:3d:56:37:07:c3:
da:c6:08:04:b0:5e:e3:c2:78:aa:1a:3f:a0:80:64:4d:6c:e9:
1e:1a:d1:a3:30:96:cf:93:ff:c1:52:c5:a5:53:b6:2b:ce:db:
9e:fd:51:2c:e8:34:ff:b2:de:fe:00:0d:cd:5f:db:d0:8a:f3:
b1:fc:05:1d:32:40:3e:4d:c6:8d:3a:49:a0:c6:e8:2c:69:ff:
7d:8a:6a:2c:c4:af:fb:39:e1:26:0b:06:0a:1b:a9:dc:ca:7b:
1e:4d:dd:73:64:cf:b1:41:a6:17:b3:d6:02:1c:e6:45:ac:fa:
2d:de:af:4e:c5:c3:cb:75:fd:cd:84:bd:54:72:b8:af:7c:83:
01:72:19:5d:e2:69:7d:4b:3f:f0:d5:3e:e3:1e:95:ad:25:90:
e9:cf:5a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:33:09 2025 by rpki-client