Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
File: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft (raw, json)
Hash identifier: BlMKBKHBLEh7E8NCgIlW/o85jGHA/iASfkMQMCeOEp4=
Subject key identifier: 3A:BA:27:61:92:08:66:B8:C9:E7:6E:79:16:92:5A:85:D7:51:3A:F8
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Certificate issuer: /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial: 0198D65F84BBA0FE2FA42933512DF98D017D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
Manifest number: 1633
Signing time: Sat 23 Aug 2025 10:00:40 +0000
Manifest this update: Sat 23 Aug 2025 10:00:40 +0000
Manifest next update: Sun 24 Aug 2025 10:00:40 +0000
Files and hashes: 1: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl (hash: S+IQLdWn44L0aHA5G0dSKVgICwvs87MWpKw946dCUIg=)
2: SJe0yiKrFFgre-LwlA373na16-M.roa (hash: W+lZ86QtGfH27JSeGBvOgaus0tZU6nh0IODmn6TYevo=)
3: rXYQihXZcHzDYDPfOCw2uf0QxOs.roa (hash: mgxpGPq3j8kcIVwK/lsmtpT+En8AA3E9GG8LueVY7g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:84:bb:a0:fe:2f:a4:29:33:51:2d:f9:8d:01:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Validity
Not Before: Aug 23 10:00:40 2025 GMT
Not After : Aug 24 10:00:40 2025 GMT
Subject: CN=3aba2761920866b8c9e76e7916925a85d7513af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:08:a5:11:84:4c:55:1a:c9:36:ec:49:86:
45:65:2d:08:a8:28:f8:66:0f:0a:51:9b:b3:76:50:
fd:47:a0:b5:dc:99:27:ca:68:5d:b6:5f:61:a2:d7:
b1:57:8f:77:1f:26:2a:bd:33:35:64:1e:45:08:24:
88:cc:ef:f3:44:e0:3d:46:da:7e:e7:58:23:ba:35:
26:c5:40:37:8a:cc:c7:6a:26:af:a7:a0:79:ac:ee:
9b:ac:1a:87:82:91:fb:b6:5c:7e:1e:d7:93:36:cf:
e4:18:7b:20:6e:4b:f2:77:d2:45:6d:70:bd:40:96:
0c:ff:10:ff:0a:dd:de:8d:d8:c7:ea:1c:cf:9f:58:
ff:8b:2f:00:0d:12:df:eb:0c:34:19:52:bd:fe:78:
55:9b:b5:4e:d0:fb:24:27:81:cf:6a:58:d0:d1:0a:
87:e1:c2:f6:ac:83:15:4a:84:92:c3:98:5b:44:42:
9d:62:54:22:fc:fa:08:93:e7:b4:e2:6d:11:3f:7f:
ad:4f:be:89:b6:3f:7d:55:ac:e3:b3:5e:01:dd:f1:
6d:36:81:c9:ef:0d:54:23:b6:21:f1:0e:46:78:d1:
8d:b0:e7:a7:55:2c:73:db:9b:24:8f:75:80:b7:85:
7d:1c:77:36:1f:55:6f:ab:88:dc:ec:14:2d:a7:3a:
3d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BA:27:61:92:08:66:B8:C9:E7:6E:79:16:92:5A:85:D7:51:3A:F8
X509v3 Authority Key Identifier:
keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ea:0b:64:60:07:a4:14:93:ac:ae:22:2c:a6:76:60:0b:41:
a2:91:1a:e7:ab:6f:ff:a3:b1:76:1d:ff:06:60:93:fe:c7:4d:
04:b1:ec:ba:49:b1:63:4e:bc:17:4e:ea:26:52:f0:46:fc:d6:
29:06:bc:a8:93:e4:b9:39:4f:68:14:63:5e:34:65:5f:46:7a:
ce:05:81:80:7f:63:2a:8d:f7:4b:d6:b9:6b:76:ff:ca:0d:23:
33:c9:1d:b7:d6:cd:c5:2c:28:12:e4:10:b1:6d:50:e3:2c:a8:
a8:2e:ce:30:15:f6:8c:9d:aa:a7:53:7b:de:86:bf:40:34:f2:
b0:b7:d4:72:b6:71:1f:17:7b:a2:6c:5a:4a:cf:3c:25:b9:f9:
fe:c7:33:08:59:d8:30:46:7f:d8:5d:9c:97:cf:eb:a8:cd:3f:
7d:71:d0:5a:e6:81:e3:b1:ca:0c:53:b9:6d:ef:c6:ae:43:63:
21:85:f7:3a:c8:eb:b3:86:a3:72:ef:19:50:ed:a2:92:17:a1:
75:9b:ab:12:a3:fb:9d:35:e8:b2:6f:b7:a8:ea:ad:e0:b2:03:
0c:c5:fb:8f:2e:bb:30:b4:98:e1:6e:58:c3:a2:75:38:d8:59:
68:35:0f:92:32:c0:68:29:c9:bb:2c:0a:17:9d:d5:5d:29:a6:
af:d7:58:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:44 2025 by rpki-client