Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
File: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft (raw, json)
Hash identifier: +3bSjucY7afdJv86cW+YL6N3jy9hANb6+tujHBl9eFs=
Subject key identifier: 0B:49:48:3A:24:26:60:95:AE:66:0D:D8:5E:BB:2B:6A:87:BE:4F:C1
Authority key identifier: 9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E
Certificate issuer: /CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e
Certificate serial: 0198D65F2461D2C8D59EC1CA23074D6DE639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
Manifest number: 0B8E
Signing time: Sat 23 Aug 2025 10:00:16 +0000
Manifest this update: Sat 23 Aug 2025 10:00:16 +0000
Manifest next update: Sun 24 Aug 2025 10:00:16 +0000
Files and hashes: 1: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl (hash: LKA8IDMck93X31w3deJwfkD0D3hJKHORFQ/K4kwwi4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:24:61:d2:c8:d5:9e:c1:ca:23:07:4d:6d:e6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e
Validity
Not Before: Aug 23 10:00:16 2025 GMT
Not After : Aug 24 10:00:16 2025 GMT
Subject: CN=0b49483a24266095ae660dd85ebb2b6a87be4fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:7a:ab:09:a0:7a:c7:59:6f:51:82:f3:d3:
8f:4c:8f:27:1b:42:e5:fb:b4:49:df:3d:94:1d:5e:
ff:0f:c6:f6:15:71:b5:9d:41:4b:07:9a:88:48:3b:
92:96:4e:51:a1:6e:bd:a5:f8:b6:c4:f4:a3:03:05:
bb:2c:13:60:be:ea:ff:7d:d3:30:df:b1:16:4f:fd:
dc:e6:3a:6a:67:5a:70:8b:9f:d6:56:0f:4c:f1:e7:
1d:fb:1e:9c:5e:06:96:bb:69:1f:fa:84:a3:20:fc:
41:21:32:9f:66:e9:70:93:e7:9f:78:c3:2d:94:8e:
c0:71:74:4b:fe:53:24:5c:d4:df:cf:02:1e:40:d2:
be:17:54:63:50:92:69:6f:1a:72:d8:60:ad:06:b9:
0e:85:91:85:59:14:4e:96:12:c8:18:93:75:ef:01:
3f:b1:11:d8:8d:32:a0:38:05:13:b4:78:f3:ba:c8:
cf:7b:81:29:f6:e6:2b:b7:b9:4a:f1:31:f0:11:17:
9a:ff:0b:dc:65:76:18:5f:1c:54:1a:53:cc:0c:45:
65:d0:b5:e8:70:c8:34:f0:18:3f:0e:86:a0:ff:03:
98:56:c8:e1:68:13:25:5f:e7:16:04:0e:48:c9:9c:
17:84:89:f8:aa:6e:84:48:e5:2a:20:6f:40:76:88:
46:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:49:48:3A:24:26:60:95:AE:66:0D:D8:5E:BB:2B:6A:87:BE:4F:C1
X509v3 Authority Key Identifier:
keyid:9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:23:bd:0c:cb:fd:25:11:d1:e1:2a:d9:65:5b:3d:aa:b2:3b:
43:c2:41:cf:28:bb:1e:fe:c1:f4:a7:96:6f:61:a4:fe:78:59:
36:54:c7:99:39:ac:fd:ca:22:39:41:df:c2:7d:ff:76:57:d7:
10:d3:c1:9c:89:69:2c:87:78:42:99:8b:69:95:85:ca:18:69:
9c:68:1c:f0:ee:77:ef:01:f0:51:66:72:28:39:ab:87:1a:b3:
bf:c1:b7:06:f9:b8:77:00:3b:f7:61:69:bb:4b:38:2a:7f:8f:
65:f7:67:15:da:26:43:10:60:cd:c6:f6:fe:93:ac:ea:47:15:
37:77:57:54:db:a5:05:c0:89:a7:a2:fe:8e:a2:f5:02:a3:b0:
7d:ed:ad:aa:84:67:85:ad:27:a6:87:ef:61:15:2b:2c:15:f7:
e4:f4:8a:e9:7e:c6:c3:92:86:fb:02:17:e5:d7:a2:1b:58:65:
b5:85:85:04:04:f2:05:6a:a3:f4:86:94:da:5c:9e:dd:97:54:
07:54:14:8a:05:5e:35:fb:c7:af:b3:da:17:a3:02:3d:45:5c:
17:0c:95:7b:33:51:ff:ab:85:56:01:fc:79:f4:c1:b3:ce:51:
b7:98:07:70:53:83:b0:ef:be:89:83:1f:b4:2b:0b:26:08:76:
7a:82:7f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:04:46 2025 by rpki-client