Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
File: a1a9UK-T9GN-LAfi7EAya8ZABSc.mft (raw, json)
Hash identifier: Pb64M2WBQ6oAeFEhCuVPbZzmIkNbF9g/JfDaUVzT3xY=
Subject key identifier: 90:35:48:A8:2D:31:13:74:1C:2D:1D:DE:18:69:0A:24:6F:73:00:7D
Authority key identifier: 6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27
Certificate issuer: /CN=6b56bd50af93f4637e2c07e2ec40326bc6400527
Certificate serial: 019917649CF73E9BE4EBA92331194F9B97A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
Manifest number: 02C8
Signing time: Fri 05 Sep 2025 01:01:33 +0000
Manifest this update: Fri 05 Sep 2025 01:01:33 +0000
Manifest next update: Sat 06 Sep 2025 01:01:33 +0000
Files and hashes: 1: a1a9UK-T9GN-LAfi7EAya8ZABSc.crl (hash: GDREig/GlhYymrqzha/bP3LuMiB91mMRPT7Y+dX5790=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:9c:f7:3e:9b:e4:eb:a9:23:31:19:4f:9b:97:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b56bd50af93f4637e2c07e2ec40326bc6400527
Validity
Not Before: Sep 5 01:01:33 2025 GMT
Not After : Sep 6 01:01:33 2025 GMT
Subject: CN=903548a82d3113741c2d1dde18690a246f73007d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:bb:f0:13:c8:f0:96:4b:52:23:7c:07:97:0a:
fb:50:ea:14:2f:14:3c:ca:53:2c:73:b8:0e:93:2a:
13:a9:e9:2c:5d:11:dc:c9:c2:ac:9e:15:25:4a:b4:
11:17:97:37:fa:b7:9e:b3:3a:ab:17:87:e9:4c:21:
71:65:0e:7d:be:19:26:f6:99:1e:8b:79:43:52:11:
96:2a:84:2d:a9:70:09:e3:94:43:1c:12:f5:23:c6:
42:d2:5a:fd:9b:b7:69:f0:7e:39:1d:98:4a:2b:4d:
b3:ef:ea:a6:90:1a:e2:d3:f2:5d:a0:b8:cc:e0:0f:
a7:24:c5:7e:82:98:ad:c1:c4:b4:f9:22:d5:0e:69:
12:09:cb:9d:bc:e3:11:28:5e:49:2d:03:c9:4e:8c:
87:6f:fa:0f:9d:e2:25:51:a0:58:74:32:37:31:af:
db:6f:44:0b:5f:e8:4a:a6:18:0e:6e:b6:64:fb:06:
43:79:b8:15:34:7a:7b:cb:06:c2:60:7f:d4:2d:f9:
cc:6e:4f:54:70:6b:42:46:e9:12:38:35:1c:57:e7:
f9:bc:af:74:3f:8b:bd:56:a3:eb:cb:5c:85:8f:d0:
53:5d:b3:6d:df:3e:c7:7d:56:fb:a8:9f:c2:b2:55:
98:0d:6d:a5:05:e1:93:b6:9d:dc:ed:75:03:1c:62:
69:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:35:48:A8:2D:31:13:74:1C:2D:1D:DE:18:69:0A:24:6F:73:00:7D
X509v3 Authority Key Identifier:
keyid:6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ec:18:6a:14:63:75:8e:b0:15:f3:ae:9d:e0:d4:57:f3:5d:
e7:5c:98:cb:05:4f:bd:ef:33:57:35:0c:b1:67:87:01:49:24:
ad:59:c6:d9:02:35:52:b9:84:b6:1a:26:90:0f:b0:0d:d0:13:
73:93:cb:eb:f6:6f:b6:13:aa:e2:a4:bf:b6:e1:20:cb:48:47:
06:d2:7b:47:5e:55:05:02:91:a0:7b:36:84:5b:bf:48:8a:40:
7e:72:a1:0e:79:8b:04:68:b6:d5:56:1a:e8:84:ba:69:c5:87:
89:c3:0b:8a:d8:76:e0:8a:06:aa:83:35:56:6c:c1:39:23:2b:
5d:07:b3:d5:b4:20:37:aa:aa:a7:55:2c:14:c9:e5:19:a1:1a:
aa:65:05:ce:58:bb:55:cb:5d:00:12:c0:4a:58:43:7c:a5:c4:
b6:21:a3:78:cd:1b:94:71:ef:d9:23:b8:a4:e3:ed:42:2f:04:
e3:71:c8:5d:42:7d:4a:a1:c7:75:a4:a7:37:3f:08:21:cd:12:
c5:6a:7f:58:45:13:47:f2:c7:60:b3:b5:37:d9:f3:53:3f:5f:
85:a2:23:90:09:86:53:94:3b:83:5d:8a:04:2d:f0:75:8b:45:
3d:d1:2f:88:0f:10:3d:44:ef:7f:f4:bf:61:2b:63:d7:c4:db:
30:40:df:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:13 2025 by rpki-client