Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft
File: d6ssFiF5lXMJnEAq6R_8V5ada5s.mft (raw, json)
Hash identifier: 0qXpV0YlcdCQ9papI3pwbJobHVsnG4WHbTJTYU/vo5c=
Subject key identifier: 4B:AC:E5:57:95:6C:E6:BE:0B:8A:A0:61:DF:91:F2:B0:5D:C5:B9:43
Authority key identifier: 77:AB:2C:16:21:79:95:73:09:9C:40:2A:E9:1F:FC:57:96:9D:6B:9B
Certificate issuer: /CN=77ab2c1621799573099c402ae91ffc57969d6b9b
Certificate serial: 0199FC21858046071378A299BB09BDC907C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6ssFiF5lXMJnEAq6R_8V5ada5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft
Manifest number: 9E
Signing time: Sun 19 Oct 2025 11:01:19 +0000
Manifest this update: Sun 19 Oct 2025 11:01:19 +0000
Manifest next update: Mon 20 Oct 2025 11:01:19 +0000
Files and hashes: 1: d6ssFiF5lXMJnEAq6R_8V5ada5s.crl (hash: OMoR7NB4zYm0jr1HraiwGDbn71pN9ah8Ns7quuiKEa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6ssFiF5lXMJnEAq6R_8V5ada5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:85:80:46:07:13:78:a2:99:bb:09:bd:c9:07:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77ab2c1621799573099c402ae91ffc57969d6b9b
Validity
Not Before: Oct 19 11:01:19 2025 GMT
Not After : Oct 20 11:01:19 2025 GMT
Subject: CN=4bace557956ce6be0b8aa061df91f2b05dc5b943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2c:5b:28:c7:d2:41:d7:9f:5f:39:21:ec:7f:
d0:8a:a5:b4:3e:b4:fb:e7:7f:1b:3b:56:95:aa:b8:
ad:d4:dd:75:29:8a:1a:be:0b:7a:d1:85:fc:26:25:
0c:06:3d:20:3c:cd:f1:4b:df:3d:78:75:fb:28:54:
d8:58:f5:20:5f:aa:f0:34:8d:75:46:31:25:ac:89:
d7:1d:27:b0:ad:e7:8e:be:44:49:7f:7c:9a:26:7e:
41:fe:36:ab:2e:29:1b:87:20:02:32:22:43:2e:a2:
98:a9:ac:b6:01:b9:a7:ef:29:8d:bc:67:15:d1:78:
d0:86:32:8d:4b:79:be:a8:64:30:b1:aa:f4:a2:64:
1e:2c:dc:40:58:8b:bb:74:83:de:40:33:6c:a9:ad:
1c:3b:90:e9:0d:33:72:8e:d3:3e:47:a0:eb:d8:ba:
4c:e3:aa:02:dd:aa:5a:42:64:42:ab:28:7b:33:33:
db:fd:78:8c:1d:d6:e2:cc:77:9c:99:12:80:2a:82:
46:7b:fd:7d:50:5d:42:21:e0:8e:e6:07:b8:80:55:
68:b1:e0:43:4f:33:e8:74:aa:2d:1a:1e:ab:54:1d:
9c:a9:9a:61:04:8e:cc:00:bc:51:e9:06:48:dd:e1:
34:4c:18:eb:ed:56:c7:0f:29:7e:8e:09:90:11:56:
69:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AC:E5:57:95:6C:E6:BE:0B:8A:A0:61:DF:91:F2:B0:5D:C5:B9:43
X509v3 Authority Key Identifier:
keyid:77:AB:2C:16:21:79:95:73:09:9C:40:2A:E9:1F:FC:57:96:9D:6B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6ssFiF5lXMJnEAq6R_8V5ada5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:6f:1d:6a:15:06:df:46:03:68:14:be:f7:c4:93:f5:b6:6d:
45:e9:b7:81:ab:d3:d2:ff:91:cb:61:e3:92:e3:a0:89:e3:61:
04:7e:b8:63:37:12:5e:cd:5c:38:b6:de:ef:9b:3e:e8:77:af:
c1:3f:47:49:2e:d9:d0:32:34:70:38:cc:7b:bd:8c:7a:87:36:
e1:e5:ee:85:7d:f6:c7:b9:ff:77:14:d5:22:64:d0:94:60:61:
e6:01:44:8d:71:ea:b2:c9:80:e0:e3:aa:ed:00:b8:d7:aa:59:
78:6a:05:6a:10:9d:0a:e4:b0:6d:d5:7d:68:11:99:64:a8:59:
78:30:6c:7c:b5:c8:7c:5f:88:15:40:70:97:8c:f2:a0:6b:03:
50:1f:5c:b8:b4:ac:38:cc:9e:e2:c5:e5:7d:dc:03:12:b4:5b:
19:80:14:f3:ea:96:a4:43:1f:c0:f4:be:ac:f0:70:f0:03:32:
0b:b7:01:1d:1c:d7:3f:49:6b:27:2c:fb:f6:3d:7c:ab:ec:ea:
9f:70:01:39:91:6c:44:d6:8b:38:10:79:da:34:12:6f:36:4a:
77:45:c1:51:b5:dd:e7:b6:ae:54:de:73:de:bf:da:9a:90:54:
b4:73:2f:86:0d:d4:f1:2e:83:d3:83:83:f2:12:6a:95:cb:50:
85:f8:69:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:55 2025 by rpki-client