Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft
File: 9xPX34BXC8z7JzeT8ApdRshT5Jo.mft (raw, json)
Hash identifier: PIPn1S9x0QZsXXmGMovxM0SfHXbOTB5d0PaIA9DmqEk=
Subject key identifier: 3E:66:7A:03:11:31:21:33:1C:C9:CC:6A:E7:2E:F1:09:9E:9F:96:E9
Authority key identifier: F7:13:D7:DF:80:57:0B:CC:FB:27:37:93:F0:0A:5D:46:C8:53:E4:9A
Certificate issuer: /CN=f713d7df80570bccfb273793f00a5d46c853e49a
Certificate serial: 0198D54EB3193CB96ECE81337D9FC8C285C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xPX34BXC8z7JzeT8ApdRshT5Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft
Manifest number: 056C
Signing time: Sat 23 Aug 2025 05:02:41 +0000
Manifest this update: Sat 23 Aug 2025 05:02:41 +0000
Manifest next update: Sun 24 Aug 2025 05:02:41 +0000
Files and hashes: 1: 9xPX34BXC8z7JzeT8ApdRshT5Jo.crl (hash: Adxk1aYOF+fBaCDo6tfB39QwBuE6bP6gVdKfnsOEPio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xPX34BXC8z7JzeT8ApdRshT5Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b3:19:3c:b9:6e:ce:81:33:7d:9f:c8:c2:85:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f713d7df80570bccfb273793f00a5d46c853e49a
Validity
Not Before: Aug 23 05:02:41 2025 GMT
Not After : Aug 24 05:02:41 2025 GMT
Subject: CN=3e667a03113121331cc9cc6ae72ef1099e9f96e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:78:39:0c:80:5c:94:68:10:41:c9:1b:4a:0e:
ad:68:7f:81:6f:7c:56:7c:83:63:f1:5a:8a:f0:07:
62:0f:3d:b9:9f:9a:42:7c:5b:6f:24:6e:b0:bd:39:
84:0f:00:6a:39:d7:17:ff:c2:7f:c9:f6:8d:60:2e:
5f:93:e3:83:27:a6:04:d8:15:88:7e:97:49:f7:7d:
ad:15:08:24:c5:0d:37:49:a4:98:b7:95:18:bf:27:
01:84:af:8f:a6:fa:44:b4:cf:6d:77:2f:17:cf:c1:
d6:fa:ba:6e:4e:07:7f:e9:90:66:23:ab:81:06:a6:
e2:99:ec:50:98:1e:cb:74:32:84:cb:20:ea:03:a1:
99:41:ef:79:be:f5:b4:53:f5:cb:1e:c4:8a:08:17:
6a:92:db:c7:a7:f3:34:42:36:5c:b3:d3:b1:50:3b:
d3:65:f7:15:51:1a:78:07:a9:1a:7a:0f:e9:bf:43:
53:2f:ea:c6:fc:10:46:f6:b9:7c:9b:9e:aa:5f:ba:
0e:ed:b6:39:5d:a4:3c:4a:ea:d6:16:a8:a1:8c:c1:
97:07:25:47:b1:e0:c4:1d:ec:c9:06:95:1e:12:58:
73:0b:49:71:05:7d:e6:52:86:17:0e:b1:0e:0f:a7:
f5:de:15:0f:99:70:d1:02:49:95:8b:b9:30:d7:f0:
88:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:66:7A:03:11:31:21:33:1C:C9:CC:6A:E7:2E:F1:09:9E:9F:96:E9
X509v3 Authority Key Identifier:
keyid:F7:13:D7:DF:80:57:0B:CC:FB:27:37:93:F0:0A:5D:46:C8:53:E4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xPX34BXC8z7JzeT8ApdRshT5Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9e:a3:ca:2c:ac:c7:4a:94:88:c7:69:2c:fb:64:4f:93:d6:
b6:2c:4b:98:a8:7e:e2:b4:55:f9:80:45:2e:ad:33:53:05:24:
cb:cd:12:1c:a8:d0:16:67:4e:e1:70:e1:28:5e:20:2c:70:97:
6e:b8:c7:c5:b8:6e:9c:49:8a:67:5f:1b:3c:4a:24:62:d0:cc:
94:a0:81:60:59:e3:2b:b2:6b:3b:2c:3c:55:1a:f1:9d:03:74:
0a:c2:6d:a9:e2:78:fa:32:a3:80:1e:50:d8:00:d0:68:e5:e0:
e8:a6:fc:c3:7d:ed:9d:17:71:ab:6b:81:32:82:e2:d6:a2:97:
74:95:65:21:16:c9:73:bf:0f:ea:99:3d:ed:e6:63:21:cb:91:
b5:30:2a:eb:f5:ee:51:f7:40:fe:a3:7d:c1:53:89:fd:b1:b7:
9f:03:8c:9a:4c:69:d1:2c:b7:8a:e1:89:a5:06:93:89:52:d5:
22:46:27:af:e0:d3:e3:c0:6b:50:f3:e5:75:4b:12:c6:ec:d3:
c9:de:88:32:2b:51:ce:ec:9e:2f:10:9f:a4:ec:98:96:e6:ea:
a3:5f:a5:80:e1:29:99:5e:fb:47:1b:4e:83:19:e8:f7:ec:62:
1f:d7:0b:6f:62:63:97:d7:84:b4:ce:be:65:1a:13:89:f5:c5:
44:c7:e2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:25 2025 by rpki-client