Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
File: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft (raw, json)
Hash identifier: cFiIBxbRE24O+xeRk6vPQNyD9nYRXRNn/Uj71kIhEFU=
Subject key identifier: 7F:9F:0B:E6:8F:41:F2:3A:26:BC:86:B1:F9:C2:47:15:89:AB:0C:FC
Authority key identifier: B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36
Certificate issuer: /CN=b7d296d69059457be39c3c82466aceed02766836
Certificate serial: 0198D6CD1C40D0998AE6E5A9EAB50CFE0BDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
Manifest number: 073C
Signing time: Sat 23 Aug 2025 12:00:22 +0000
Manifest this update: Sat 23 Aug 2025 12:00:22 +0000
Manifest next update: Sun 24 Aug 2025 12:00:22 +0000
Files and hashes: 1: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl (hash: ZLcfbYsssFFDAbhdRNFiGx9Rb5WJZiCnspFcFJNjVHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:1c:40:d0:99:8a:e6:e5:a9:ea:b5:0c:fe:0b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7d296d69059457be39c3c82466aceed02766836
Validity
Not Before: Aug 23 12:00:22 2025 GMT
Not After : Aug 24 12:00:22 2025 GMT
Subject: CN=7f9f0be68f41f23a26bc86b1f9c2471589ab0cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:a9:1f:82:36:31:3f:15:1e:40:af:53:56:
84:2a:b3:4e:af:94:7c:32:7f:93:61:30:6e:ab:8a:
72:90:90:8f:26:b9:a5:6d:55:5f:40:15:f8:29:f0:
df:07:00:3e:0c:9d:05:84:50:1c:63:08:24:1d:58:
dd:11:99:cc:51:2c:55:ed:0a:26:73:e0:6c:8c:7b:
db:e9:28:0d:c8:65:bd:36:5f:73:1a:0c:43:d7:11:
2a:c4:f4:d9:fd:8a:ad:f9:22:aa:c4:af:5a:c2:d8:
8c:84:5a:27:79:e0:94:9d:e7:06:57:dc:fd:c1:0f:
fc:09:ea:91:17:37:f0:28:64:82:33:53:3a:ba:c6:
25:26:03:c1:af:7e:4a:23:d4:98:94:da:9e:60:22:
02:f3:17:fe:77:43:8b:6c:46:04:50:24:4c:1d:42:
0e:b4:f8:14:0c:5a:bd:ef:32:4d:16:52:8f:6a:cf:
08:ea:13:a9:97:ad:0d:61:54:67:60:f3:b9:a0:47:
6a:e0:07:92:9b:cd:e3:41:ac:cd:6a:ec:eb:82:23:
d2:71:08:e2:07:56:74:a4:a1:cc:6a:16:ea:0b:7c:
92:64:a4:3d:22:24:ae:2a:80:ed:2b:2e:fc:13:53:
8d:fc:f3:89:fa:02:e6:8d:84:4b:e7:fe:d4:1a:1f:
96:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9F:0B:E6:8F:41:F2:3A:26:BC:86:B1:F9:C2:47:15:89:AB:0C:FC
X509v3 Authority Key Identifier:
keyid:B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fa:0f:5b:74:6c:95:50:c9:f7:8a:43:27:a6:2d:31:f5:25:
46:92:c1:08:63:ad:04:72:4f:79:f7:ba:02:6b:20:72:2d:1f:
23:09:d0:b3:fc:7d:16:93:e2:75:fa:6c:75:35:5d:a1:bc:21:
02:4a:db:bb:3a:04:6d:4d:15:72:2c:fa:73:88:74:46:90:cc:
93:9d:28:7a:7e:d7:93:19:9a:34:70:1e:31:dc:0d:9f:1e:f5:
5c:5f:44:cc:94:70:fe:83:80:8c:a7:7f:d6:6e:11:dd:a6:74:
99:a1:64:0b:0a:e8:a1:16:02:22:ad:74:22:00:72:25:89:39:
6d:c3:8e:ec:31:5d:42:60:77:61:23:d6:a1:a9:7a:b6:35:0e:
0b:f1:a9:f8:97:a0:b0:ab:5a:10:88:4a:db:b7:4d:eb:6f:e7:
4a:65:b4:97:30:87:29:cf:e3:86:d9:0e:9d:c1:04:5f:1d:c4:
c9:e2:a1:27:29:72:4c:d5:ae:f4:e1:59:09:71:77:77:49:49:
15:9a:8b:66:45:c4:1e:97:c0:13:06:c2:6a:c9:1a:8f:a8:9b:
43:d0:10:bf:64:d4:f5:c3:b1:9d:84:53:39:07:98:bf:fd:35:
0d:b8:d5:8e:2f:19:1c:aa:9f:79:3f:26:21:cf:e4:09:d8:62:
e3:76:2a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:17:49 2025 by rpki-client