Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
File: 9n1n2ohguDIsTyBNYRsAYTjxs5E.mft (raw, json)
Hash identifier: 2LaEA3bteIyIetabZU+lDQaCf0sh8SweOuZtQlrtdkM=
Subject key identifier: 9C:8A:C8:6C:D9:14:E7:27:22:CD:58:44:0B:0E:46:9B:A1:8C:5F:42
Authority key identifier: F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
Certificate issuer: /CN=f67d67da8860b8322c4f204d611b006138f1b391
Certificate serial: 0199FC8FB5352C6AF52738A984E955950A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
Manifest number: 03E1
Signing time: Sun 19 Oct 2025 13:01:40 +0000
Manifest this update: Sun 19 Oct 2025 13:01:40 +0000
Manifest next update: Mon 20 Oct 2025 13:01:40 +0000
Files and hashes: 1: 9n1n2ohguDIsTyBNYRsAYTjxs5E.crl (hash: d640AkCGKqfM806bvjV3Fyz6Qs6TgiX1B+2OQjmZgDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b5:35:2c:6a:f5:27:38:a9:84:e9:55:95:0a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f67d67da8860b8322c4f204d611b006138f1b391
Validity
Not Before: Oct 19 13:01:40 2025 GMT
Not After : Oct 20 13:01:40 2025 GMT
Subject: CN=9c8ac86cd914e72722cd58440b0e469ba18c5f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:bc:00:4f:d5:d9:c7:09:63:10:9c:76:b8:61:
db:64:da:1f:09:a6:dd:cc:a1:16:06:2f:8e:a6:2d:
cb:46:4d:94:b0:2e:fa:6e:9e:65:ce:29:d3:6f:ce:
02:79:d1:3c:c7:b8:e5:bc:86:52:52:09:cc:53:68:
dc:6f:93:3e:20:3c:4d:21:90:54:3f:2b:d3:39:36:
b9:bc:16:ad:e8:f2:f8:d5:a4:51:7a:d6:43:59:63:
5f:b5:f6:a7:76:fa:6f:d4:93:f5:d4:82:c8:2d:28:
6e:52:37:90:5c:a4:a6:e8:9e:c2:cd:de:24:76:4d:
8b:7a:aa:92:64:c4:45:ab:6b:ed:b8:3b:fb:96:65:
c7:32:e4:d7:b3:de:5c:51:5d:b1:cb:0d:b5:de:07:
01:da:04:81:4a:97:77:b5:3b:07:e0:4a:5b:f8:1f:
60:46:ed:fc:eb:c6:ff:9b:6b:9b:fe:d1:28:a4:b4:
ce:9e:c5:92:4e:dd:29:c7:8d:81:f0:47:75:ca:89:
b2:9c:cb:f3:9c:ee:ec:fd:90:e8:03:d3:47:25:75:
1e:0f:a2:74:30:b2:d8:de:f7:21:17:16:1c:21:e7:
28:70:fa:6e:c1:31:d1:2e:15:52:59:59:ed:b2:da:
7a:b9:61:45:35:0f:49:3f:fc:d7:d8:35:ea:de:b4:
a5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8A:C8:6C:D9:14:E7:27:22:CD:58:44:0B:0E:46:9B:A1:8C:5F:42
X509v3 Authority Key Identifier:
keyid:F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:9b:64:a5:17:ea:f9:58:4d:b3:e5:4c:35:22:34:46:3b:d7:
8a:83:eb:52:60:27:15:dd:b2:9c:df:66:c3:25:4c:49:1e:63:
7d:fa:7c:b0:88:2f:df:dd:73:bc:68:ac:9d:9e:8d:5c:b8:3f:
12:b3:1b:53:04:8a:64:41:91:d1:73:f8:38:d6:1a:66:39:4e:
67:dc:74:8f:a1:8e:a6:43:26:44:be:20:06:bd:56:eb:a4:2d:
50:49:75:5b:64:23:ce:7d:ba:5a:f1:4c:64:a4:bf:c8:0b:5d:
2a:93:7d:bd:cf:73:22:01:05:0d:49:35:1e:4b:95:d4:49:2e:
62:ac:7f:9f:41:03:17:03:18:a7:d8:8c:23:8b:95:6a:77:50:
24:f8:e3:85:e0:30:e2:1c:4e:06:1a:c5:ce:3c:d1:4c:f5:46:
8e:06:7e:41:52:3e:3b:f7:c0:71:57:9a:a9:02:ce:cf:32:d2:
de:2c:58:c6:8d:18:d7:1c:91:52:68:dc:b4:f9:31:35:47:5f:
23:ea:a2:6f:aa:49:1e:9d:01:39:e2:42:44:90:53:23:c9:75:
91:52:33:98:6a:83:ef:4c:9a:cc:d8:1b:99:d9:bf:94:54:a5:
38:7e:0e:19:c3:09:27:ed:ae:29:78:04:c1:c8:51:28:d3:25:
c0:35:75:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:37:46 2025 by rpki-client