
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
File: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft (raw, json)
Hash identifier: HynhBeSw5rIGVNpMLswVjSXzGxaj4pbRv+Z3S9q430Y=
Subject key identifier: 3A:FE:4B:01:DD:26:A2:12:29:76:0D:E6:98:2C:F8:F1:57:47:CA:5D
Authority key identifier: F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
Certificate issuer: /CN=f57766f0726cff8618af968258f5bb229e937c6e
Certificate serial: 0199FB45969AE8F5EF79069B6ADE870FB2A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
Manifest number: 0E0E
Signing time: Sun 19 Oct 2025 07:01:05 +0000
Manifest this update: Sun 19 Oct 2025 07:01:05 +0000
Manifest next update: Mon 20 Oct 2025 07:01:05 +0000
Files and hashes: 1: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl (hash: zN6trsW6EXXoZqDmwJCgvXkw49J9XME67lawoGbNj3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:96:9a:e8:f5:ef:79:06:9b:6a:de:87:0f:b2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57766f0726cff8618af968258f5bb229e937c6e
Validity
Not Before: Oct 19 07:01:05 2025 GMT
Not After : Oct 20 07:01:05 2025 GMT
Subject: CN=3afe4b01dd26a21229760de6982cf8f15747ca5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ed:bb:2d:36:d5:4d:cd:50:6d:10:d3:28:a1:
9a:5a:60:82:a0:9a:b0:c6:03:ae:b3:c7:e5:d8:44:
89:46:75:a9:97:9c:6a:90:ea:56:62:d6:aa:62:32:
7f:14:2f:32:73:d3:14:bd:8e:c5:38:11:75:c7:6c:
80:fb:6f:d9:41:54:c8:b8:0e:0e:fc:0f:25:1b:e0:
f9:01:97:3e:4c:2c:8f:d1:f8:6f:19:6c:61:1e:d1:
b3:8c:38:aa:d1:c8:cf:00:4f:a0:65:16:50:06:d0:
51:3f:ed:81:d0:28:3a:4b:fb:11:60:59:31:1c:8c:
28:be:fa:1c:1b:43:58:d4:4c:8a:ea:16:07:eb:4c:
8d:95:12:2a:07:25:3b:7e:02:71:89:0f:25:e8:91:
d9:68:51:df:cc:5f:fd:05:66:a4:f0:a9:6c:8a:aa:
7f:86:a1:24:2b:4e:bd:d3:51:6d:82:2b:cf:29:a8:
ee:80:87:70:2c:05:fd:39:16:2f:f1:57:bc:7e:e0:
f1:3c:0e:11:9f:f7:4b:e5:ef:88:35:90:01:f9:ae:
16:60:93:2a:51:f4:db:4f:95:78:be:4b:0c:a7:9c:
39:56:a2:e4:9c:2d:8b:52:27:bd:d7:2d:87:66:7e:
0e:58:f5:c1:62:02:ac:61:3c:ae:87:94:77:68:49:
80:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FE:4B:01:DD:26:A2:12:29:76:0D:E6:98:2C:F8:F1:57:47:CA:5D
X509v3 Authority Key Identifier:
keyid:F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9d:30:ad:c6:d2:e4:95:09:7c:89:27:7e:d8:d0:08:dd:ac:
12:57:36:7e:0f:3b:c1:79:79:f2:80:af:b7:a7:0e:ba:35:b6:
2e:90:93:f0:7c:42:e8:18:b3:b6:6c:46:f1:be:1d:38:fd:d1:
65:6e:c9:5f:4a:74:26:3f:18:29:94:ae:e8:c8:80:99:62:fe:
b5:e1:63:d8:d7:00:28:b7:05:1e:92:ae:0a:2c:69:34:16:02:
87:bc:75:42:fa:ca:27:a2:f5:47:67:51:b7:21:a4:b8:52:7e:
1f:d5:bf:8a:54:59:e1:e5:ba:d6:2d:41:36:20:18:8b:b2:d7:
40:e6:84:66:0f:a2:f9:11:7d:2e:cc:5e:c5:c6:b1:cf:2e:be:
b2:e4:da:d2:c5:a9:73:1e:d7:79:e1:11:78:45:70:52:7c:b8:
c2:cd:a0:78:f2:c0:73:0f:8c:b8:a1:69:09:c7:ec:ec:52:e9:
f6:5d:83:bd:21:6f:8f:91:d8:4b:e7:3d:77:40:a4:61:4d:20:
04:02:4a:55:b7:d0:8f:be:38:e9:ac:f9:df:8c:3d:39:e6:ca:
5f:3a:90:af:26:80:92:a4:e1:07:bf:2a:1c:59:8e:25:06:64:
72:61:77:4d:f3:a4:f3:4e:93:a6:70:3f:63:13:6f:cb:a6:44:
7f:e3:cb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:12 2025 by rpki-client