Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
File: 1-545C9y9la-rSl_4xO2e_ENoe9E.mft (raw, json)
Hash identifier: kxoLdDWTZaOULRLnwbID7Ch0D1D21d7eSv0j4Lz0SZE=
Subject key identifier: 58:E7:DF:EC:1A:81:6D:0D:1F:58:33:19:E2:CF:2C:AE:E2:F6:49:38
Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
Certificate issuer: /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Certificate serial: 0199C456FFCF544AF24C4FED6BC9E1AC8183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
Manifest number: 1015
Signing time: Wed 08 Oct 2025 15:00:59 +0000
Manifest this update: Wed 08 Oct 2025 15:00:59 +0000
Manifest next update: Thu 09 Oct 2025 15:00:59 +0000
Files and hashes: 1: 1-545C9y9la-rSl_4xO2e_ENoe9E.crl (hash: yQBdDDfe3BP5nc725EblSmzn6eaYiGHr25EqBwx6jX4=)
2: AQyWHoTpIoD9YkmssqSGTmtU3kY.roa (hash: gQkpbE3OwjFrYUS2/tIcrYz4PZ/Z8nNnk27GBtk07kI=)
3: n9QbbxtHUjuRXoqW5WKf1TIqSDE.roa (hash: VlEMVs5cMOSULcZyXmypke2XQns+4ddKAif1EvT7d+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:56:ff:cf:54:4a:f2:4c:4f:ed:6b:c9:e1:ac:81:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Validity
Not Before: Oct 8 15:00:59 2025 GMT
Not After : Oct 9 15:00:59 2025 GMT
Subject: CN=58e7dfec1a816d0d1f583319e2cf2caee2f64938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c4:ec:43:eb:f7:64:76:5b:3f:ca:17:06:c2:
7e:a3:b1:43:c4:c7:67:d4:6e:6b:23:b6:58:0e:57:
b6:65:90:e0:b1:c4:6a:df:53:07:22:30:a4:3c:94:
0b:b8:17:d0:e6:ac:45:b8:bc:57:f1:bf:6f:f0:c2:
af:64:af:22:a1:66:89:55:c3:a6:76:c4:d5:02:45:
e0:a4:83:76:78:c2:29:41:7e:24:3f:f9:7c:a8:97:
51:4b:b4:67:a0:9a:e6:48:0d:5e:85:66:cc:1c:43:
f6:b0:2a:44:90:25:25:a4:9f:e9:c9:85:58:80:cd:
cf:24:c7:cf:cc:0d:3c:0f:07:8e:c1:2b:1a:7f:3a:
d1:68:26:84:b1:7f:41:a0:7c:a8:25:7d:e0:4b:62:
2e:6d:1b:83:47:00:c3:42:cd:51:d1:b0:b8:be:78:
50:0e:1b:41:f4:7c:de:a3:f4:e4:c0:28:77:86:98:
b0:12:47:e7:25:c5:a2:bc:b3:f7:18:1b:86:c2:66:
8e:00:73:8d:21:77:d6:3b:5b:9b:ad:d0:e5:68:0a:
91:93:7b:38:82:11:99:09:06:f6:3c:66:1d:d5:ec:
17:b8:1d:3d:0d:9c:02:36:f6:3c:59:c6:29:35:7f:
93:46:46:b2:64:63:7a:61:fe:5e:4d:b6:75:5a:a5:
49:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E7:DF:EC:1A:81:6D:0D:1F:58:33:19:E2:CF:2C:AE:E2:F6:49:38
X509v3 Authority Key Identifier:
keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:18:ec:63:57:64:97:13:d6:6e:01:26:c1:45:dd:f8:ba:44:
07:c8:6d:ce:92:6f:b9:8d:73:4c:73:a1:cd:24:fd:a9:11:be:
48:17:f5:30:31:3b:cd:39:a6:1e:f7:cc:a7:67:d4:66:9b:66:
c9:e4:75:78:5f:c0:1d:fc:1d:4f:13:3c:6d:b9:34:85:17:01:
8e:bf:fd:01:a8:b6:aa:16:45:36:f6:14:85:77:c0:91:cc:f9:
70:5f:02:a7:93:d3:7e:18:85:0b:58:25:3b:d7:dd:09:15:17:
fe:b9:18:2b:08:8b:21:9a:79:b3:5f:d1:74:a0:75:36:2a:f2:
3a:15:36:23:28:65:21:c5:d7:4e:69:7d:bc:cb:c3:86:95:b4:
93:4f:98:35:c4:62:dc:c8:16:64:06:e2:b0:e5:fd:03:f4:f3:
83:60:c9:d6:c0:4c:63:99:83:01:d7:8f:80:a1:15:a6:c2:c6:
57:19:d5:09:0e:f1:af:0f:5d:db:29:58:4e:f5:61:ad:80:da:
35:1d:95:cd:b4:4c:1e:42:81:8a:27:83:f7:b3:e1:32:3c:be:
bb:04:ab:da:16:5c:94:88:ce:07:35:03:36:7e:d9:07:5e:a3:
5f:d7:fc:97:50:c8:a8:aa:73:f0:90:2f:5d:e4:12:4f:a1:b3:
8c:76:01:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:22:20 2025 by rpki-client