Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
File: 1-9W1c_sNJpmSp5qea0XN1iDezBE.mft (raw, json)
Hash identifier: P/9n9X2sgm1kZbgAsTh4RdoiNJzB0fvt59flIgkJ30c=
Subject key identifier: 04:14:0B:76:51:C9:0E:10:B8:F9:6C:C8:F3:CB:EE:98:3D:0E:D4:90
Authority key identifier: FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
Certificate issuer: /CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Certificate serial: 019848C068C016EF3DF378A072BC11EAA29A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
Manifest number: 068B
Signing time: Sat 26 Jul 2025 22:00:25 +0000
Manifest this update: Sat 26 Jul 2025 22:00:25 +0000
Manifest next update: Sun 27 Jul 2025 22:00:25 +0000
Files and hashes: 1: 1-9W1c_sNJpmSp5qea0XN1iDezBE.crl (hash: 3Q7sqv/TzyFfa5urwY8/1CxGz/zc4O/A2Q9Mm9NECUg=)
2: xxpwWq99h2UC8fGaA57WvXmJQIY.roa (hash: hB0aBJhUko4vLE69LgJZtcXWGS9cGGQQvN4ZagAecyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:68:c0:16:ef:3d:f3:78:a0:72:bc:11:ea:a2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Validity
Not Before: Jul 26 22:00:25 2025 GMT
Not After : Jul 27 22:00:25 2025 GMT
Subject: CN=04140b7651c90e10b8f96cc8f3cbee983d0ed490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:2c:74:9f:73:37:a3:6c:70:a4:87:b9:50:
f8:f9:82:4d:07:99:b7:b2:6d:3a:50:31:8f:13:66:
28:d1:eb:2c:a4:f4:c6:1a:76:06:43:35:6a:23:9c:
95:a2:6b:73:2b:5b:06:9d:ba:5f:eb:89:20:a7:66:
c4:ce:1f:51:c6:d3:50:8f:62:52:70:96:f2:3f:b2:
02:cb:fd:e8:70:7b:05:b4:25:83:bc:cc:03:61:1b:
09:b9:5d:9b:3d:06:f7:53:ed:ce:ca:80:a1:4b:19:
13:d4:f2:d4:11:7d:d5:1a:f8:cf:f9:29:a4:f1:4d:
8b:61:73:c0:14:ab:bd:40:02:0b:a0:36:c3:74:92:
25:e0:b6:dd:cb:bb:e0:81:1a:b6:1e:31:ea:87:c3:
f2:e0:23:51:0e:9a:a0:1c:dc:45:fa:0a:94:54:32:
13:f4:14:aa:f7:1b:91:f3:36:56:78:36:27:4c:ee:
8d:a2:58:05:c1:92:6c:84:b6:b5:bc:27:03:21:7a:
5a:ad:2c:8d:e6:1b:c6:1b:cc:1d:09:0d:5e:14:10:
e9:b0:d1:68:7b:0b:ae:57:ed:67:db:e1:21:73:44:
de:e8:9e:14:ca:0c:de:f5:d0:49:f6:6c:5f:1f:c2:
f5:60:17:a2:f3:3e:90:ba:73:ed:32:9c:c6:b2:f1:
62:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:14:0B:76:51:C9:0E:10:B8:F9:6C:C8:F3:CB:EE:98:3D:0E:D4:90
X509v3 Authority Key Identifier:
keyid:FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:da:44:dd:a4:df:7a:4a:b0:eb:54:22:12:31:15:d9:17:4b:
b7:93:e6:64:dc:7c:94:4a:28:5b:1d:0a:e8:db:9a:c9:86:c2:
60:e8:95:a1:b8:89:b4:1b:b3:86:31:6d:44:e0:48:41:34:11:
59:6b:f9:a0:94:0d:38:6b:ce:64:cc:f6:d9:1f:8e:95:4a:e2:
ed:e9:01:b4:8e:95:1e:0e:f9:e8:1b:88:41:f2:21:c3:92:46:
0e:1b:de:f4:02:d5:1b:24:8c:be:bf:35:dc:2b:f8:2b:7e:82:
23:34:e2:fb:50:03:78:3c:98:44:68:22:9b:6b:c8:73:78:c5:
ed:65:ba:5a:67:55:5a:bb:5f:93:21:0c:08:47:94:64:e9:1d:
90:34:1d:34:98:82:7d:f2:f1:0b:fa:7d:e0:e3:0d:fb:fa:a2:
85:2a:c9:5b:9b:03:84:47:85:ea:d3:99:22:6a:23:1d:5d:78:
83:27:b6:99:b9:37:27:43:3c:58:f3:a3:30:04:47:5a:fc:e8:
af:a2:5c:61:7e:0d:78:2e:73:dd:c7:12:71:5e:7a:b5:b0:f3:
05:cd:62:a4:cb:87:c8:e8:5f:ab:3f:8a:78:2d:f7:9f:eb:fd:
c1:65:38:1e:ef:4c:5d:87:63:fe:7f:3d:a9:ef:41:7a:72:87:
62:47:2e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:33:25 2025 by rpki-client