Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
File: 9fqTbNBbJl9g8zNAqMY952gvw18.mft (raw, json)
Hash identifier: uFgCuAjLIYBICBc5QJ2xg/6l1C91SiS/rip2cY29Yvw=
Subject key identifier: 4D:13:BB:50:ED:78:5D:27:C9:62:C5:B4:8D:26:1E:F7:2C:F7:A2:41
Authority key identifier: F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
Certificate issuer: /CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Certificate serial: 019922FA5492B07CBB29ECE65B26C697FF14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
Manifest number: 065F
Signing time: Sun 07 Sep 2025 07:00:54 +0000
Manifest this update: Sun 07 Sep 2025 07:00:54 +0000
Manifest next update: Mon 08 Sep 2025 07:00:54 +0000
Files and hashes: 1: 9fqTbNBbJl9g8zNAqMY952gvw18.crl (hash: VXsuVcuOutLxMBVn7YKYfF8Sjz9RjW+4Ii4+CAkBmxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:54:92:b0:7c:bb:29:ec:e6:5b:26:c6:97:ff:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Validity
Not Before: Sep 7 07:00:54 2025 GMT
Not After : Sep 8 07:00:54 2025 GMT
Subject: CN=4d13bb50ed785d27c962c5b48d261ef72cf7a241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:4b:84:9f:f4:62:c3:22:f5:ba:c4:c6:a5:
e0:9c:05:d0:44:5c:0b:68:23:a0:a8:d0:74:da:a6:
8f:01:7b:76:87:6e:ff:0d:62:1e:d3:6a:41:ad:6b:
00:70:8a:ce:23:5e:80:6f:6e:e8:fc:03:3b:38:32:
52:19:6d:dd:e1:51:4d:42:0a:7b:2b:fc:a3:ac:51:
65:19:fd:5e:2f:bb:2d:0b:cc:b2:65:8c:06:dd:8b:
57:8a:a1:2d:79:6e:e8:83:8e:82:b9:9a:f8:60:4d:
0d:21:58:1b:ee:b6:79:f9:52:ee:17:9c:f5:83:9d:
b9:bc:c6:f2:fd:69:a8:53:ae:cc:97:bd:fb:fa:4a:
4e:2c:d9:25:a3:64:11:3c:bc:ef:08:9e:63:87:c7:
1d:d6:45:f8:b5:e8:5a:74:b7:e6:c7:2f:ca:74:11:
d5:e1:0a:58:14:fe:83:b2:8d:8b:ca:ec:26:4d:0b:
5c:1f:87:bf:5e:81:a9:44:73:33:f1:b9:4e:6c:b8:
0a:43:9f:af:aa:e5:f5:42:fa:b9:32:84:b4:6f:45:
18:73:9e:4e:bc:a2:82:02:3a:a0:d5:ab:64:70:7b:
8c:ea:12:1b:d8:da:2e:fa:43:54:db:ab:fb:51:0e:
02:ac:8f:6e:c1:63:27:f8:87:96:d4:e2:f7:32:7c:
d0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:13:BB:50:ED:78:5D:27:C9:62:C5:B4:8D:26:1E:F7:2C:F7:A2:41
X509v3 Authority Key Identifier:
keyid:F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c2:a7:6f:3e:fc:6c:94:88:ed:3f:6a:9f:62:03:55:3f:7e:
a2:e2:f7:82:6e:64:aa:0f:1f:48:2b:8e:1c:16:bd:d6:08:2d:
80:d7:23:ca:b9:30:f9:74:68:19:de:a0:e8:de:d1:7b:64:51:
cc:56:c4:2e:fa:0f:25:4a:2f:10:cf:8c:e0:71:10:a5:eb:47:
39:e3:fd:97:43:bd:bd:14:4a:f1:b4:7d:df:3c:f4:c7:75:21:
1e:a7:2e:e4:d3:f2:15:82:4a:10:9b:fb:e3:f1:37:24:a0:f8:
e6:12:e4:59:84:6e:ef:6b:46:5e:13:f1:7f:f1:74:cb:87:e6:
cc:70:20:00:9f:48:17:37:74:9a:9f:f2:2d:54:bb:23:c2:24:
92:b7:93:3a:6d:f1:8d:75:d7:48:97:bb:fe:2d:d6:78:75:6f:
7b:19:53:2e:bc:db:0c:73:f4:71:13:06:0c:a0:23:41:67:a0:
27:04:72:58:c2:c9:76:41:00:4a:28:7d:13:9d:01:85:2a:18:
b1:ff:70:9d:bc:15:9e:d3:fb:eb:82:63:6f:9a:e7:b1:27:83:
f9:a3:49:21:18:54:23:af:57:4c:3d:ba:be:ba:58:99:64:f7:
d8:02:18:48:f1:00:ae:8b:ef:e9:77:a1:82:77:f2:20:c5:ea:
af:dd:81:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:30 2025 by rpki-client