Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
File: 9px-uGIkrbOECIR97kz8TEADrV0.mft (raw, json)
Hash identifier: fHp9RDNXAxRcYdYmRKJ2jlcQ/Gb3zfk+mM6QnMvkkXU=
Subject key identifier: 3D:73:1F:C3:21:89:20:C3:D1:7F:D2:08:03:DB:2C:D7:25:1B:DF:B0
Authority key identifier: F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D
Certificate issuer: /CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d
Certificate serial: 0198D5BC6401A44BA5F2E46D4C366400B35E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
Manifest number: 0EA8
Signing time: Sat 23 Aug 2025 07:02:29 +0000
Manifest this update: Sat 23 Aug 2025 07:02:29 +0000
Manifest next update: Sun 24 Aug 2025 07:02:29 +0000
Files and hashes: 1: 9px-uGIkrbOECIR97kz8TEADrV0.crl (hash: 76BQl7lmbZJgyvWgV0m2BaghPkO1gebebxSXgyc9LuQ=)
2: YdnfzNQU6p17HNy9eA1Hw53deFE.roa (hash: 2Yw8oKr6x9VyLBdNC/o5JNz+v9yyH0gMbVBwfTOD/GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:64:01:a4:4b:a5:f2:e4:6d:4c:36:64:00:b3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d
Validity
Not Before: Aug 23 07:02:29 2025 GMT
Not After : Aug 24 07:02:29 2025 GMT
Subject: CN=3d731fc3218920c3d17fd20803db2cd7251bdfb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:41:cb:09:44:eb:5c:85:da:df:1c:60:77:
e2:23:e2:13:0b:44:6c:2a:6c:a2:b9:d6:e8:6e:dc:
32:ad:c8:06:a2:8c:3b:3e:2b:97:77:32:ff:05:c2:
09:77:cd:99:08:55:c5:2e:cb:80:c1:01:0d:d5:56:
d1:b0:27:2f:18:36:86:08:f9:0a:43:50:e5:28:a3:
a6:47:4a:5b:0c:c4:d2:e4:22:9a:f7:5c:c6:d4:9d:
cf:90:aa:7f:dc:01:da:d3:6b:64:11:55:12:89:48:
64:ea:17:48:63:db:2c:62:d7:cb:38:c4:41:86:e3:
bf:e0:ce:a0:5c:0f:40:30:86:93:b5:8d:35:d2:55:
3e:c3:3a:45:d1:d1:bb:9e:57:ea:bf:05:7e:61:5c:
64:c6:34:a9:6a:2a:80:6e:8a:02:14:28:ff:05:10:
a8:26:44:61:a0:73:27:7e:56:79:65:52:f1:a2:32:
20:b9:5d:14:d1:6c:5a:68:9f:de:2a:01:de:fe:f3:
43:e6:49:21:16:60:24:7a:af:40:ac:42:26:d3:43:
ff:a8:78:a0:78:cf:bc:d5:42:0f:85:f8:38:8d:fa:
57:44:c8:b5:ec:87:70:8b:c6:e2:ed:1a:f4:9a:1a:
db:af:2d:1e:a3:86:6f:2c:88:be:d4:37:11:ba:19:
54:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:73:1F:C3:21:89:20:C3:D1:7F:D2:08:03:DB:2C:D7:25:1B:DF:B0
X509v3 Authority Key Identifier:
keyid:F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:56:65:81:a1:9c:5a:19:6b:78:07:b2:4e:27:a8:fa:58:3c:
e4:1f:18:e4:29:34:af:25:e3:98:fe:c7:9d:00:24:f7:89:f5:
a8:b4:a3:6d:83:19:6a:28:00:9c:45:08:1e:fa:af:37:85:75:
85:56:a6:3b:bf:65:2e:57:d2:63:e9:81:c6:08:bd:6c:2c:a9:
4e:8a:45:be:37:90:0a:73:3c:4d:f2:d9:15:49:2c:29:02:41:
a4:46:49:3e:49:3b:1c:08:d4:ce:b6:14:c7:7a:de:65:50:8d:
ac:b6:46:dd:8c:3e:bb:ad:f1:a3:9c:ed:7a:47:d9:83:bf:f9:
d5:60:98:38:35:83:04:26:c6:32:ae:cd:7a:94:30:74:d0:62:
03:66:33:bd:9b:be:a6:34:89:1c:aa:79:74:ac:91:9f:46:75:
38:87:7a:17:c2:a0:36:a8:b6:e2:a3:3b:4d:9d:50:9d:45:69:
ee:f4:b8:17:8e:38:a4:e3:77:b5:d3:84:c2:20:bf:de:5f:3b:
73:f7:b3:ae:16:36:dd:81:b0:2a:21:23:b0:12:f2:fc:a1:21:
e0:0a:b8:97:24:1d:f3:d0:c5:3a:71:83:94:61:ee:1f:3e:5c:
58:d5:12:25:ce:5e:8c:74:3b:22:52:03:63:8a:8b:86:0f:83:
fe:18:8b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:18:38 2025 by rpki-client