Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier: 9+b+tncDqhR4c2w4ILO+/0TTp4jVKAjUJIS1ObgFKjQ=
Subject key identifier: 1D:4E:9E:08:F1:4E:CF:BC:C9:2E:1E:4D:8A:87:80:88:C5:0F:2B:C7
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 0198D65FBF828860E388CC9E17CA951B8D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number: 07C5
Signing time: Sat 23 Aug 2025 10:00:55 +0000
Manifest this update: Sat 23 Aug 2025 10:00:55 +0000
Manifest next update: Sun 24 Aug 2025 10:00:55 +0000
Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: 0/P7Xvoc4mLrRgLqjvW0oxLdisVIXlfc8ytfQw7Z/mg=)
2: UDIr7Vq2PCUxH-_0XwBbpbKATWw.roa (hash: UYUs+F/DqN2VeFPscjP3XMb/LrOdKx6NTNq37FV037I=)
3: u0FRx2j9PY9XanBbcgTrVe_Co_s.roa (hash: 1340NaWcsmaESfpzP0gVpyoyLiK505bktgSP6n8xPII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:bf:82:88:60:e3:88:cc:9e:17:ca:95:1b:8d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: Aug 23 10:00:55 2025 GMT
Not After : Aug 24 10:00:55 2025 GMT
Subject: CN=1d4e9e08f14ecfbcc92e1e4d8a878088c50f2bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:29:6b:47:d8:94:9d:1d:6f:cd:47:84:fb:
f1:20:08:bc:d3:39:e8:9a:b6:81:27:4a:f5:2a:3e:
de:cf:ca:de:d0:b3:5b:19:7e:47:62:ca:54:99:cf:
07:06:fa:4a:f0:93:a9:0b:14:2d:7d:e2:ab:fb:ed:
5c:25:22:78:ee:04:a5:a7:3d:30:8f:dc:f8:ed:57:
87:47:6f:89:b2:ce:0e:7e:47:69:8f:cc:e9:eb:d7:
c6:d7:d7:1f:a3:09:f6:e7:4d:78:3b:7e:29:48:b4:
da:c4:52:2f:bf:ea:08:cf:0c:2d:44:02:10:3d:92:
f3:23:33:b7:35:03:b7:e5:f5:5c:97:e5:65:07:73:
64:54:18:37:66:99:aa:da:e0:ea:7c:ff:88:c8:89:
ae:7e:6b:59:d2:c0:b9:44:7e:eb:57:87:64:5c:f1:
12:37:bf:2b:42:0d:79:e9:4f:6e:d2:f7:00:5b:3a:
2a:16:de:d4:cd:41:88:97:5b:b4:63:27:8c:15:76:
69:06:bd:da:e4:7e:2f:a2:f9:92:71:32:96:51:4f:
2a:c7:f3:54:6c:f4:8a:b4:ab:f9:74:51:b7:86:8b:
34:21:30:1b:d6:c6:93:eb:96:91:4b:0d:aa:46:69:
ab:5a:e3:b6:21:49:9e:7c:69:e3:08:91:61:68:07:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4E:9E:08:F1:4E:CF:BC:C9:2E:1E:4D:8A:87:80:88:C5:0F:2B:C7
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:15:d9:6e:ad:7c:9c:ce:d4:f7:04:b4:d9:f6:59:11:6c:6c:
a7:62:9b:c9:50:c2:4a:49:85:6b:23:d0:ff:83:f8:b5:41:12:
b6:dd:af:f1:9a:1e:30:50:e5:51:d5:7f:fe:46:5b:b9:af:49:
4e:11:54:4b:d5:a9:76:84:37:81:54:9c:62:41:77:10:e6:3b:
88:0d:6e:77:4f:13:9d:10:87:b4:76:6a:2e:b3:f2:1a:e4:43:
22:08:4a:de:1d:e0:c3:c0:ec:db:3c:f2:6e:07:2c:f9:77:35:
75:6f:14:aa:f6:c6:4f:05:3a:8a:44:63:15:82:0e:c3:04:05:
9a:9c:af:23:e2:49:c9:23:4f:6d:97:38:54:19:ee:6b:b3:9f:
86:74:31:c2:8b:84:48:29:0b:ca:91:7b:6e:d4:fb:62:84:0b:
d1:59:18:32:b1:40:fe:f0:3b:7f:92:21:08:f6:99:2e:8a:e0:
c5:89:51:52:75:18:5c:1f:44:c2:e7:56:97:02:05:89:47:e7:
1e:20:d1:bc:99:59:45:fd:3d:89:5b:bb:1a:1a:7a:3e:00:89:
77:f4:7e:be:4e:aa:29:aa:4e:c1:83:23:dc:e1:4d:24:20:b7:
c6:df:8e:0d:4c:8f:ec:17:db:88:17:b6:74:2c:20:bb:ce:5e:
ca:cc:1c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:38:26 2025 by rpki-client