
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
File: 9Fe8GTpZWUint6CWtxC7UmKDD0E.mft (raw, json)
Hash identifier: THuoSTch6ptw8OEW+enqyHybRV0LAVuaoigz2b7TBSc=
Subject key identifier: CF:F3:6D:A7:86:6C:4A:07:D7:4D:97:F7:92:61:6B:AA:6E:A9:1B:6A
Authority key identifier: F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
Certificate issuer: /CN=f457bc193a595948a7b7a096b710bb5262830f41
Certificate serial: 0198D7735E3F53EDC16EC9A5431CFD2910B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
Manifest number: 0519
Signing time: Sat 23 Aug 2025 15:01:58 +0000
Manifest this update: Sat 23 Aug 2025 15:01:58 +0000
Manifest next update: Sun 24 Aug 2025 15:01:58 +0000
Files and hashes: 1: 9Fe8GTpZWUint6CWtxC7UmKDD0E.crl (hash: 0V2ubwpd8Mm2jxrH1Z8wc8redhrn6cuyEg/bRavJxv4=)
2: xnHt0Sid4zmp1F0aRhNqu7-Fkzo.roa (hash: YOstIt3g/6bqPmSn4Km52QkT6mGNeFzORgGZTgeX8Ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:5e:3f:53:ed:c1:6e:c9:a5:43:1c:fd:29:10:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457bc193a595948a7b7a096b710bb5262830f41
Validity
Not Before: Aug 23 15:01:58 2025 GMT
Not After : Aug 24 15:01:58 2025 GMT
Subject: CN=cff36da7866c4a07d74d97f792616baa6ea91b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:d0:78:17:32:fb:ca:2b:f0:53:06:de:be:
b9:dc:16:d1:e5:66:09:74:c1:ad:c5:77:fd:c1:5e:
a7:c3:93:50:88:20:32:52:95:7f:0f:4e:70:08:91:
53:80:b8:7a:32:7d:33:0d:25:1b:20:f6:07:40:52:
a2:4b:06:bc:07:2a:25:7f:28:5c:fb:a8:cf:f3:d9:
fd:b2:7c:9f:1b:6c:01:29:8c:cf:e1:1f:f1:37:af:
74:f2:5d:6e:57:88:a3:ac:f5:22:92:60:0c:8e:a0:
c5:e1:08:b0:c0:20:37:fd:b8:6b:a7:1b:e2:ca:c4:
ea:2a:b3:0e:25:91:d2:1e:8a:ea:45:04:41:4f:a7:
60:bb:93:9d:21:13:70:ec:01:7a:e3:26:37:28:61:
b1:83:e4:da:7d:7a:01:0a:2f:b0:64:76:e5:21:31:
af:8c:1b:ff:2b:90:5e:70:db:b6:cb:15:cd:3f:65:
46:27:51:49:78:96:e2:1f:d8:84:26:2c:db:dc:49:
2b:b0:d5:82:01:66:a6:c2:62:38:c5:88:64:09:3f:
cf:6c:95:a2:e3:7d:37:07:1a:c9:9d:6d:55:70:78:
cf:06:1d:2f:47:64:a2:c0:5a:3a:7f:f4:1d:8a:11:
a2:8c:65:0f:43:54:72:86:a4:98:5a:e1:ab:c0:55:
f8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F3:6D:A7:86:6C:4A:07:D7:4D:97:F7:92:61:6B:AA:6E:A9:1B:6A
X509v3 Authority Key Identifier:
keyid:F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:05:27:23:db:be:72:76:fc:11:d6:2d:e6:96:18:dd:d7:67:
34:34:cc:f6:d3:50:97:58:87:74:08:46:f0:7d:f3:2f:de:0f:
5e:86:6f:85:06:66:5a:94:b9:86:fd:23:e6:66:43:eb:c6:12:
51:24:c2:61:2d:da:8a:c3:16:31:8b:84:b5:99:42:f8:6c:b3:
cc:9e:cb:33:92:fe:13:08:17:07:cd:69:4a:6e:1b:3e:10:53:
cb:52:24:29:d9:54:0f:c8:ff:6e:50:a7:a2:ed:56:a4:69:da:
e4:bb:b4:ed:d3:3c:f9:6a:b2:2b:a8:70:84:35:eb:66:8e:67:
42:6a:22:fa:7e:c8:46:88:cc:9e:3b:e6:32:79:11:6a:8a:54:
82:39:74:c7:1e:60:f8:80:98:f4:8d:d2:fc:52:5f:10:78:5f:
39:73:f4:fe:6c:df:8f:e9:de:42:ed:9c:0a:88:ac:3e:3c:eb:
1a:08:e6:4f:24:a6:e7:75:75:30:6c:73:ad:1e:c7:05:61:3e:
98:e2:93:ab:08:c6:ad:9c:31:93:d4:ac:af:f9:4a:a5:cf:a5:
54:8b:26:92:fb:fa:4f:ad:6b:a3:75:fe:c8:ea:08:c5:b8:35:
4f:14:7e:30:83:6e:b9:c9:8f:1c:d2:63:23:26:d8:2b:0a:7c:
16:ca:8f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:56 2025 by rpki-client