
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
File: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft (raw, json)
Hash identifier: BRu3ETm22EbLZlf/45C4xfMSXJgZZ4jPJ0sUyMbk8Hs=
Subject key identifier: ED:A0:00:8B:DD:17:17:44:A4:52:8A:E6:94:AA:F3:BD:18:7A:B2:CA
Authority key identifier: F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
Certificate issuer: /CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Certificate serial: 0198D473DF0B290B578C9AAF5EEA41BA0490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
Manifest number: 04B5
Signing time: Sat 23 Aug 2025 01:03:40 +0000
Manifest this update: Sat 23 Aug 2025 01:03:40 +0000
Manifest next update: Sun 24 Aug 2025 01:03:40 +0000
Files and hashes: 1: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl (hash: I/l9WR2/Ti+l4jqpyZwTP2+JrJAcQ4sbw4GEgufByLc=)
2: pcJxxqpyhZF6JL4G4VK7HBS4yYA.roa (hash: PZShrCQ10JtHGLNXwnmCPSpnucUc5Ex85jH4ClAc2jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:df:0b:29:0b:57:8c:9a:af:5e:ea:41:ba:04:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Validity
Not Before: Aug 23 01:03:40 2025 GMT
Not After : Aug 24 01:03:40 2025 GMT
Subject: CN=eda0008bdd171744a4528ae694aaf3bd187ab2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:0f:e8:01:65:fb:89:1f:8a:d3:a8:3c:61:
f5:11:6a:86:6c:95:21:3d:0c:93:9d:90:9e:c6:ea:
12:7b:18:b3:57:26:65:c1:62:09:60:20:cd:ce:2a:
8e:b1:c1:b1:bf:a2:d7:d7:a5:12:55:5a:24:54:3d:
4b:ad:46:10:e5:f9:e9:9b:b0:7c:e4:75:36:ac:4b:
f6:ff:21:19:f9:99:4e:fd:29:54:31:db:83:04:6c:
87:e2:3e:92:7a:d7:e5:fb:5e:f3:02:ea:27:4f:8a:
cb:96:1f:df:e9:dc:4e:b5:d8:ad:1b:03:c4:fb:b4:
76:d8:fe:82:e7:24:4f:74:9e:30:fd:0e:34:31:55:
2b:55:7c:2b:20:f0:64:38:46:d0:38:fd:b3:ae:12:
40:ea:a4:19:5f:5f:cd:35:5e:19:25:86:71:e5:48:
9c:12:f3:8a:96:e9:7c:53:4f:1c:59:af:22:37:c3:
ac:ae:15:cc:66:cc:2f:d9:d5:65:52:f0:3b:1b:c1:
0d:df:de:6b:56:7a:d5:14:70:af:45:16:54:aa:fb:
01:d9:e5:99:87:72:79:0a:4c:23:d3:5d:8f:76:47:
d3:a9:3c:94:87:e7:da:3c:92:7b:57:7e:e4:72:cf:
2b:3d:96:25:ca:d7:07:53:55:7b:94:35:94:77:ec:
7c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A0:00:8B:DD:17:17:44:A4:52:8A:E6:94:AA:F3:BD:18:7A:B2:CA
X509v3 Authority Key Identifier:
keyid:F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:97:52:81:5c:ea:1e:9a:26:1d:f5:39:6a:53:a9:bb:66:b7:
d3:f4:80:9e:7a:7d:e6:51:bc:16:c4:ec:67:39:91:bd:48:f4:
1e:03:fa:03:15:bc:e4:d6:14:38:8f:1c:70:19:e4:c4:af:27:
1f:00:e1:e7:96:6b:13:ca:e1:46:2d:b2:1c:ca:17:c9:da:39:
99:d4:b1:9d:57:b4:5b:d1:70:0e:88:76:5f:7b:86:2a:28:17:
df:dc:83:e0:25:45:83:2f:22:87:e2:9f:89:ce:75:8f:f9:be:
57:a5:eb:3d:24:08:7d:69:cf:47:b6:9f:61:a4:69:02:75:3f:
c3:16:01:02:0c:7b:22:d2:f7:61:8e:4e:13:cb:c3:73:77:0a:
72:b1:4e:d8:7c:09:15:f0:fa:e8:14:a9:fe:fa:cf:cb:25:e4:
8e:1c:fa:b0:74:cb:e9:7b:af:d7:fd:e5:d7:e8:7e:a8:8a:8f:
da:66:3c:01:f8:fc:a7:8b:dc:06:0e:5e:9e:7d:ed:5a:e7:6a:
a6:94:42:dc:5f:0d:95:b3:ae:5c:30:37:26:3f:5c:c0:0e:4c:
06:3f:cf:2e:3f:3a:5a:a5:9d:a4:94:b9:21:3f:11:98:be:de:
02:2b:85:82:53:1e:89:20:87:a7:75:a2:de:31:c4:a4:33:4d:
48:01:6a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:43 2025 by rpki-client