Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
File: 9px-uGIkrbOECIR97kz8TEADrV0.mft (raw, json)
Hash identifier: tnmapIs/B4Nlh3BBRRRrqWI/c5Jy70tbBVZJTelA810=
Subject key identifier: 12:F5:1D:B3:D9:FE:BF:C9:A4:C5:FA:1F:CE:DA:61:BD:E2:1E:01:26
Authority key identifier: F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D
Certificate issuer: /CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d
Certificate serial: 0197B9D89DA44105A16588545FE63E72F36E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
Manifest number: 0E15
Signing time: Sun 29 Jun 2025 04:01:10 +0000
Manifest this update: Sun 29 Jun 2025 04:01:10 +0000
Manifest next update: Mon 30 Jun 2025 04:01:10 +0000
Files and hashes: 1: 9px-uGIkrbOECIR97kz8TEADrV0.crl (hash: KHok7CCNIu/SRPrK/k7SDID9PnhfKTmM4b4s6FB+UCU=)
2: YdnfzNQU6p17HNy9eA1Hw53deFE.roa (hash: 2Yw8oKr6x9VyLBdNC/o5JNz+v9yyH0gMbVBwfTOD/GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:9d:a4:41:05:a1:65:88:54:5f:e6:3e:72:f3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d
Validity
Not Before: Jun 29 04:01:10 2025 GMT
Not After : Jun 30 04:01:10 2025 GMT
Subject: CN=12f51db3d9febfc9a4c5fa1fceda61bde21e0126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:d0:9a:6f:e2:d6:f4:6a:c2:97:fe:9c:fa:
cf:9b:04:70:7f:dd:c8:f2:c0:f2:64:53:c4:af:3b:
38:c1:91:c4:51:97:df:0c:d0:5b:99:c9:8d:9a:5c:
a5:00:42:57:26:83:02:5b:1e:af:4e:76:08:9b:4f:
38:e2:1e:5d:0c:6b:66:cb:d0:0b:36:16:b6:61:60:
8e:d4:4b:67:4e:3c:39:d7:4e:27:a9:e6:2c:2b:45:
e5:f2:ce:d5:f7:1c:d1:4b:3f:9d:50:77:93:f5:27:
15:a4:e2:8d:3d:01:9e:9a:6e:75:cd:02:96:fe:47:
a9:65:3f:9d:32:37:3a:e4:0a:9b:0a:35:07:a1:f1:
02:1a:f1:b3:bc:ca:8c:70:8e:bb:e8:e0:ce:78:7b:
83:d9:2a:8f:b1:fc:74:b9:fc:82:e2:cb:b3:7f:40:
de:54:65:05:22:ee:df:b4:49:69:d1:4d:07:8a:7a:
7c:ed:fc:68:e6:12:c8:3e:16:0d:50:c7:cf:f9:77:
ba:4f:20:ca:5b:dc:ea:c9:fc:db:f8:07:81:db:ca:
19:ba:25:05:cf:d9:62:26:4f:24:7e:ac:46:c9:57:
5c:71:29:3c:7e:d0:e7:19:87:ab:19:79:86:a5:eb:
cb:01:49:e4:d3:8e:f3:61:bf:76:41:ee:20:37:c3:
e5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F5:1D:B3:D9:FE:BF:C9:A4:C5:FA:1F:CE:DA:61:BD:E2:1E:01:26
X509v3 Authority Key Identifier:
keyid:F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:eb:2a:67:69:cf:30:4b:5d:db:99:31:2a:60:ee:ed:fc:fe:
91:fe:18:fd:14:3d:4f:bc:30:49:8b:c1:e9:27:67:8f:0a:96:
46:85:d9:14:80:28:74:8d:e6:31:a1:c6:a8:32:74:e0:31:86:
95:1d:89:43:ac:88:da:d8:8b:4f:ca:4b:32:1a:28:95:7c:17:
d7:ca:93:74:00:45:c9:0b:22:19:00:6b:a7:46:db:68:5a:18:
f6:ef:91:8b:ef:fd:e0:08:39:26:15:c0:4c:dd:57:d7:9b:19:
f3:c6:a6:21:30:d5:3d:74:aa:52:61:50:43:d5:36:da:19:02:
ce:6e:04:98:b8:57:e8:f9:fc:df:e9:58:ff:06:98:63:37:37:
fb:a3:8c:a4:ac:fd:1c:f0:7d:0c:f1:42:83:1a:c7:d8:0e:75:
81:b9:f7:40:7b:b4:1e:ca:a4:cd:58:29:3e:ea:c5:76:b5:79:
4f:f9:40:75:32:05:5c:80:2a:10:0d:40:b9:fa:2f:ac:91:01:
6e:f9:20:03:c9:7e:af:80:90:13:6a:5b:cb:3a:5f:84:6f:7e:
d2:53:37:54:75:8c:7f:7f:60:6b:b0:37:02:bf:5b:e5:c9:d5:
e1:e5:4e:0c:b0:64:1a:c2:6f:2d:ae:cf:74:b8:9a:ef:cf:06:
b1:ea:66:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:44:30 2025 by rpki-client