Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
File: 9M3Ux8i_hxhwMKZEcCColvQeSZM.mft (raw, json)
Hash identifier: kIx1fCUJvxtYc5syEKbzivEyKRnfJ1J4fuH6sBgoop4=
Subject key identifier: 67:9B:2C:BD:9C:11:F8:C2:A9:02:7F:AE:45:16:84:1D:D5:EC:B0:07
Authority key identifier: F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
Certificate issuer: /CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Certificate serial: 019A01B5389AC8239C5D84641831C95327CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
Manifest number: 1373
Signing time: Mon 20 Oct 2025 13:00:44 +0000
Manifest this update: Mon 20 Oct 2025 13:00:44 +0000
Manifest next update: Tue 21 Oct 2025 13:00:44 +0000
Files and hashes: 1: 9M3Ux8i_hxhwMKZEcCColvQeSZM.crl (hash: 6xczdt9IczZrJhdR6TYajYrztFqQ10ST0YobeOWHL6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:38:9a:c8:23:9c:5d:84:64:18:31:c9:53:27:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Validity
Not Before: Oct 20 13:00:44 2025 GMT
Not After : Oct 21 13:00:44 2025 GMT
Subject: CN=679b2cbd9c11f8c2a9027fae4516841dd5ecb007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:1d:89:f4:21:59:48:bd:8c:cd:eb:54:a6:
3e:e7:5c:80:18:75:09:92:cd:04:0c:f0:d1:d9:8d:
0e:bc:d6:5e:71:e6:1c:2d:d5:66:21:53:d6:dd:65:
51:95:35:3a:30:8a:b4:91:2c:33:28:01:49:40:4a:
00:b2:d7:0c:b8:9c:f9:4f:33:c8:66:1f:41:07:bf:
ae:95:28:8b:de:68:83:14:6f:a3:47:a0:89:4a:53:
40:a0:af:c1:78:36:fe:89:cd:63:b4:14:14:73:43:
34:43:03:30:15:9f:8d:d0:75:c3:ce:42:ca:c1:14:
0a:b4:12:8a:ee:5c:a9:6c:8e:b2:dd:96:f5:7f:30:
ad:24:d6:33:fd:20:54:a0:d2:31:80:cc:0a:6d:e9:
b4:e0:93:a9:d9:2c:bc:58:55:cb:23:a8:47:61:3b:
85:7b:9d:6f:d4:2c:ad:84:2d:ca:f4:25:b7:2e:be:
27:ca:09:63:86:7d:46:2e:5e:ea:29:47:97:3e:8c:
43:a1:fa:8e:92:46:2c:d0:5f:2f:60:ac:c9:12:83:
98:fd:2e:1a:d9:e8:6a:ae:6b:d7:8d:05:13:3d:d5:
b2:a3:67:f3:ac:eb:de:48:a5:52:47:f1:62:60:d8:
86:2a:69:ed:55:77:09:e5:7a:a2:2b:3b:47:4a:64:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9B:2C:BD:9C:11:F8:C2:A9:02:7F:AE:45:16:84:1D:D5:EC:B0:07
X509v3 Authority Key Identifier:
keyid:F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b7:70:85:fc:f3:1d:5b:e0:69:16:83:72:3d:66:37:ca:8a:
43:4a:37:12:8c:75:f6:c5:4b:40:6a:28:47:3a:aa:02:29:2a:
6e:82:83:c8:4e:01:17:f3:86:eb:9b:ab:32:06:42:4b:d4:49:
dc:70:e9:e8:d0:65:a3:92:b0:cf:e7:94:99:7a:36:38:8c:1a:
ce:29:7c:36:34:a8:5f:24:4c:aa:3a:79:55:ad:d8:5d:d6:58:
ea:bb:e4:6f:74:fe:a9:2c:43:81:07:75:0c:9a:98:1a:20:9c:
a7:55:76:85:69:d6:70:e3:ba:12:e8:27:78:91:e3:4a:9d:f4:
f8:c1:e0:4c:26:fc:2c:66:71:aa:24:38:83:e6:e4:03:69:33:
95:99:a4:ed:53:07:d6:a7:db:6c:de:54:aa:81:26:ba:a5:05:
e8:23:59:b5:58:7c:7c:d4:2d:d8:46:74:2f:e6:7c:b7:fd:97:
11:a2:25:82:3d:d0:cc:87:eb:03:38:a4:c7:67:39:67:c0:5f:
05:8b:49:85:e4:63:c3:5e:e4:9a:d6:0e:29:36:86:c8:f9:c3:
e1:17:32:93:70:30:3e:50:7a:d7:cd:06:83:70:b3:f2:ac:58:
39:0d:97:48:2d:80:ef:ae:1b:dc:e5:42:27:54:b7:19:2c:84:
82:cb:bd:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBtTiayCOcXYRkGDHJUyfKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0Y2RkNGM3YzhiZjg3MTg3MDMwYTY0NDcwMjBhODk2ZjQx
ZTQ5OTMwHhcNMjUxMDIwMTMwMDQ0WhcNMjUxMDIxMTMwMDQ0WjAzMTEwLwYDVQQD
Eyg2NzliMmNiZDljMTFmOGMyYTkwMjdmYWU0NTE2ODQxZGQ1ZWNiMDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx10difQhWUi9jM3rVKY+51yAGHUJ
ks0EDPDR2Y0OvNZeceYcLdVmIVPW3WVRlTU6MIq0kSwzKAFJQEoAstcMuJz5TzPI
Zh9BB7+ulSiL3miDFG+jR6CJSlNAoK/BeDb+ic1jtBQUc0M0QwMwFZ+N0HXDzkLK
wRQKtBKK7lypbI6y3Zb1fzCtJNYz/SBUoNIxgMwKbem04JOp2Sy8WFXLI6hHYTuF
e51v1CythC3K9CW3Lr4nygljhn1GLl7qKUeXPoxDofqOkkYs0F8vYKzJEoOY/S4a
2ehqrmvXjQUTPdWyo2fzrOveSKVSR/FiYNiGKmntVXcJ5XqiKztHSmT1lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGebLL2cEfjCqQJ/rkUWhB3V7LAHMB8GA1UdIwQY
MBaAFPTN1MfIv4cYcDCmRHAgqJb0HkmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU0zVXg4aV9oeGh3TUtaRWNDQ29sdlFlU1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lY2Q4YzgtMTNlMS00MGVhLTk4YzAt
ZjFlMTk4YTI0ZGJmLzEvOU0zVXg4aV9oeGh3TUtaRWNDQ29sdlFlU1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9lY2Q4YzgtMTNlMS00MGVhLTk4YzAtZjFlMTk4YTI0ZGJm
LzEvOU0zVXg4aV9oeGh3TUtaRWNDQ29sdlFlU1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrdwhfzz
HVvgaRaDcj1mN8qKQ0o3Eox19sVLQGooRzqqAikqboKDyE4BF/OG65urMgZCS9RJ
3HDp6NBlo5Kwz+eUmXo2OIwazil8NjSoXyRMqjp5Va3YXdZY6rvkb3T+qSxDgQd1
DJqYGiCcp1V2hWnWcOO6EugneJHjSp30+MHgTCb8LGZxqiQ4g+bkA2kzlZmk7VMH
1qfbbN5UqoEmuqUF6CNZtVh8fNQt2EZ0L+Z8t/2XEaIlgj3QzIfrAzikx2c5Z8Bf
BYtJheRjw17kmtYOKTaGyPnD4Rcyk3AwPlB6180Gg3Cz8qxYOQ2XSC2A764b3OVC
J1S3GSyEgsu9vw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:43:22 2025 by rpki-client