Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
File: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft (raw, json)
Hash identifier: w2QYx2XqL5ttFevw6mLYVm5D8CVhj+f/BjFSN6epDS4=
Subject key identifier: EA:44:95:84:87:52:69:1E:34:C7:A6:EA:93:17:C4:24:C8:1A:F5:A9
Authority key identifier: F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
Certificate issuer: /CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Certificate serial: 0198D4E0E06085411CD30E6D4B65867F7B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 03:02:43 +0000
Manifest this update: Sat 23 Aug 2025 03:02:43 +0000
Manifest next update: Sun 24 Aug 2025 03:02:43 +0000
Files and hashes: 1: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl (hash: 3aS507oXIu5x0ICbYechDzOpru76SXdrG7QtPzfPsSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:e0:60:85:41:1c:d3:0e:6d:4b:65:86:7f:7b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Validity
Not Before: Aug 23 03:02:43 2025 GMT
Not After : Aug 24 03:02:43 2025 GMT
Subject: CN=ea4495848752691e34c7a6ea9317c424c81af5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:23:3b:2b:93:1d:e2:c0:9f:ac:0a:28:6f:97:
b6:51:6e:fe:08:cb:24:6c:82:99:00:a3:bd:d9:f2:
00:4b:e7:00:b7:1e:f5:6a:de:6f:fc:69:d2:13:4e:
8d:f2:95:88:46:d6:5a:35:d6:b5:8d:e2:b9:0b:1a:
97:c2:5c:2b:b7:ee:27:3c:ed:bc:30:fa:3e:44:9b:
93:a4:d3:fa:36:ea:e7:23:57:8c:97:24:e1:5d:7d:
e1:b2:e4:cc:d8:00:9f:d5:f3:9a:d8:b7:b9:83:e7:
1d:d6:f5:67:49:83:df:14:53:19:3a:4a:c1:9c:d0:
96:7d:1b:50:6c:aa:56:e4:ae:8e:9b:65:54:c6:50:
67:c0:31:8a:b8:ee:89:d9:73:91:29:8f:46:b8:19:
10:df:15:95:92:b2:c7:ce:be:3b:59:29:4d:b6:33:
09:57:b3:46:1a:f6:cf:37:a0:1d:fe:9d:bf:38:47:
a4:3f:60:0b:27:54:71:dc:28:d8:65:5b:60:62:9d:
d2:85:ab:d2:1d:9f:9f:40:7b:30:b4:e4:49:64:73:
67:b7:5e:a5:11:79:6d:67:38:a5:e9:9c:69:08:81:
48:73:f6:93:e9:ee:9a:b8:a7:53:97:49:42:45:38:
40:a6:65:3a:0d:e1:49:ca:49:1c:a7:5d:b0:9a:91:
78:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:44:95:84:87:52:69:1E:34:C7:A6:EA:93:17:C4:24:C8:1A:F5:A9
X509v3 Authority Key Identifier:
keyid:F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:9a:b8:f6:e2:c1:96:88:cb:4e:5f:80:e7:88:9c:0d:5e:3d:
b4:0d:72:30:bb:8f:9f:75:22:66:f8:f0:a8:09:b5:ab:7d:07:
97:08:cf:0d:bf:d5:54:48:95:78:01:0b:45:3c:92:5f:38:10:
10:3e:89:03:0e:e7:6f:83:e2:fa:8e:b3:e3:ac:b4:60:36:59:
dd:91:11:bb:55:57:db:db:14:01:11:d2:b5:d6:fb:de:84:56:
09:d5:c5:cf:6c:60:2e:73:01:d9:d7:b2:4c:06:e3:4e:cc:76:
5c:7f:48:4f:e6:d0:f1:70:c4:24:4f:27:e2:55:72:4e:13:7f:
ec:46:37:ff:32:1a:6a:ff:93:82:13:f8:79:b6:da:6a:f1:5c:
b3:03:aa:ce:5c:bc:6e:a6:22:92:42:b8:5e:38:b9:e7:11:83:
e4:88:79:46:2a:e8:01:39:47:57:0f:d2:27:b1:cc:88:68:8d:
35:47:52:10:30:f4:92:62:17:1b:34:68:21:63:33:4b:90:a9:
eb:36:18:63:98:52:26:de:99:b6:6d:73:81:03:46:9b:f1:e4:
7a:4c:7c:6b:ce:63:76:0e:54:8c:3e:d6:ac:f9:bc:74:aa:21:
ad:a6:02:a6:9b:09:cc:fd:19:fc:c4:07:25:24:d7:fe:33:51:
15:4b:a9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:30 2025 by rpki-client