Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: 8wfzALeXdrUrKJcm5XEzJXVZSv+8AjjVgsgSwRaaT7I=
Subject key identifier: 65:21:AF:BB:1C:C7:B2:3D:D2:AC:20:B0:00:5F:C3:F5:33:F5:C6:6B
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 0199C6459275E07D34419470D26A09819962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 07C4
Signing time: Thu 09 Oct 2025 00:01:12 +0000
Manifest this update: Thu 09 Oct 2025 00:01:12 +0000
Manifest next update: Fri 10 Oct 2025 00:01:12 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: YjYshbdim0aFNFNowjocMwMAo+SNsnLWQc9FyihfwGY=)
2: Wl7dfPBMjzt7d3ARPHZzvBDvCz4.roa (hash: YXn3MdI9fbwK137bu2N/c5GjDCAVC9bePDhOy7NGC2E=)
3: ricnvXRyxBIr6uz7wJxhUxO5eB8.roa (hash: OF8ZMoVg6J5N7Pqa2nI+KUupYU9mKGD+TotlcQVJhhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c6:45:92:75:e0:7d:34:41:94:70:d2:6a:09:81:99:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Oct 9 00:01:12 2025 GMT
Not After : Oct 10 00:01:12 2025 GMT
Subject: CN=6521afbb1cc7b23dd2ac20b0005fc3f533f5c66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:57:f7:39:40:8c:02:d3:48:a7:67:eb:ca:98:
5c:20:44:65:7b:31:fa:be:58:9d:2a:6b:af:ab:96:
b5:50:36:fc:1e:dd:ef:dc:1b:60:30:b5:f3:10:3a:
8e:04:0d:84:bf:82:50:5c:99:d7:47:7d:a4:22:dd:
22:eb:1e:cd:f4:35:2a:31:b9:8e:51:22:75:fe:14:
68:82:d4:5b:e0:2e:7a:14:f7:7a:19:49:f3:2d:b8:
c8:d3:15:0b:ad:71:dc:57:14:93:75:67:26:ee:d9:
ce:ed:dd:49:d5:d3:86:cc:62:85:43:61:06:f6:f7:
92:29:23:57:be:64:e5:9e:bb:ed:9b:18:8b:d7:31:
1d:f2:f6:c2:06:e9:fc:37:9f:ba:a7:31:7d:b6:56:
6f:05:05:e7:7f:90:15:d2:10:8e:77:e7:03:97:fa:
00:e7:23:cd:af:a5:92:74:44:a5:13:38:16:19:15:
35:d2:b1:18:1d:c1:ab:d2:3f:b8:e1:c6:b7:6e:d8:
7b:61:12:76:b7:d8:85:c4:55:4d:7c:1e:43:89:3a:
14:39:e4:f4:0c:5f:56:bc:00:c2:c7:1b:56:53:9f:
d9:83:0a:2b:0e:d0:ec:a6:c4:4d:f6:1b:e8:e1:0b:
e7:34:f4:2f:88:93:f2:bf:94:a8:b0:3f:92:d1:5c:
58:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:21:AF:BB:1C:C7:B2:3D:D2:AC:20:B0:00:5F:C3:F5:33:F5:C6:6B
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:bc:e6:c1:2c:89:2b:bc:ce:01:1e:cc:e0:ea:e0:ca:de:c3:
f0:fc:08:ac:e1:21:96:a4:96:61:02:0e:43:42:a2:5b:b5:31:
8d:72:b2:f8:80:27:57:10:cf:a2:98:f4:12:75:1f:40:d9:f5:
f4:65:60:ab:6b:0c:ee:21:61:b5:ba:16:a0:ec:88:99:4a:be:
03:c6:1f:c6:c1:c2:29:cf:f2:2c:00:62:80:9a:9b:a4:10:0f:
78:b6:a9:2a:f4:58:0e:b5:ff:c1:36:cc:86:bd:47:8b:ec:c6:
cb:08:82:e4:f2:31:8c:12:ee:cd:30:c6:01:6b:9a:d9:ec:39:
4a:e4:4a:c0:ea:ea:d9:23:46:52:2b:d2:14:b0:8b:94:2d:6c:
15:04:24:c5:e7:42:c0:2a:b7:e5:e7:13:56:df:7d:0e:65:03:
26:e1:bc:ce:47:22:9e:ae:e4:13:42:b3:30:44:4f:6d:93:2b:
31:fd:8e:48:2c:66:1d:fd:75:ec:ba:c4:c7:c9:8c:9d:19:e3:
4d:61:60:65:5d:47:ae:f2:4a:ec:78:9b:11:c1:1d:32:a9:d1:
e4:6b:97:46:a3:d6:24:f3:8a:76:46:6e:e7:59:32:18:ce:6a:
42:b3:d1:10:b8:12:7a:01:f5:b0:66:88:ce:0a:73:0a:3b:4f:
ea:4e:52:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:27:14 2025 by rpki-client