Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json)
Hash identifier: 7dVxgIzjWoojzDDz1HoF2gKCwVk9aFAyLeitNinYYhw=
Subject key identifier: 1A:1B:56:66:1F:D8:EF:17:37:C7:96:F4:63:89:F6:68:7A:1A:93:DF
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial: 019845BF5C4743F3D6711CBF38EE5A6FD14F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
Manifest number: 06E8
Signing time: Sat 26 Jul 2025 08:00:25 +0000
Manifest this update: Sat 26 Jul 2025 08:00:25 +0000
Manifest next update: Sun 27 Jul 2025 08:00:25 +0000
Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: G7/yaWhN4EeNcRBmsgfOh47wgLD23+onBsriLotNkWY=)
2: goyOFyNzCSnjNoSGUslWBJblZKU.roa (hash: gOANPYh3QzN79F/MQE5xUnJrm2gWdrunUVxAKHrrHlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:5c:47:43:f3:d6:71:1c:bf:38:ee:5a:6f:d1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Validity
Not Before: Jul 26 08:00:25 2025 GMT
Not After : Jul 27 08:00:25 2025 GMT
Subject: CN=1a1b56661fd8ef1737c796f46389f6687a1a93df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:3f:94:3e:58:20:4b:16:66:ba:7b:f0:f6:
0b:39:51:da:a4:c0:92:f1:3b:0a:8c:ae:0e:a3:50:
50:42:8f:fd:5f:59:82:e7:35:4b:3e:72:c4:45:62:
31:30:92:f3:21:6f:59:80:fd:d1:31:d8:47:bd:c0:
b0:c0:35:e2:69:22:88:ab:b5:72:7c:e4:97:00:58:
28:2e:b1:82:1f:e2:90:11:7e:10:a0:18:7a:15:58:
77:0b:a6:64:18:e7:d3:f5:a2:07:98:32:d8:f0:64:
03:26:55:1b:7b:72:58:e6:3d:6f:50:8c:b2:e7:65:
dc:6f:1a:3b:2e:c2:39:3f:6b:93:ec:f5:e6:26:42:
bb:ad:81:1f:9b:db:d8:e2:1b:be:75:5b:78:db:4b:
c5:fd:02:4d:76:18:8a:4f:fc:0e:2b:d9:9a:5e:2f:
b1:04:fb:e9:9e:42:7a:87:9c:dd:ae:6b:37:c0:b3:
48:81:f6:1a:e1:95:66:4c:3e:39:b9:72:24:f1:ca:
43:7c:48:84:c1:14:ed:d2:3a:db:88:65:d6:d7:55:
ea:22:c7:35:77:9d:5d:89:5a:4d:3b:fd:9a:4d:16:
01:bb:b4:1a:a4:bf:ee:0e:59:d1:08:0c:04:cb:24:
c9:da:4b:96:a5:2e:66:3f:bf:d8:63:f2:51:cf:b3:
23:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1B:56:66:1F:D8:EF:17:37:C7:96:F4:63:89:F6:68:7A:1A:93:DF
X509v3 Authority Key Identifier:
keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:17:f9:c0:8a:73:ba:90:7a:5e:a0:cb:fb:ec:0d:fd:5d:82:
6f:bc:8d:91:5c:6b:f4:47:ee:58:ef:60:d0:77:b0:d0:11:a2:
92:75:4a:8a:27:a3:0b:b1:06:3f:05:38:f7:cf:ee:95:b6:de:
e6:d9:06:1a:fa:e3:80:c6:07:4d:14:49:6e:64:96:e6:f3:dc:
18:fd:2c:2c:d5:5b:8d:84:a3:f0:fc:88:a6:77:55:75:8c:57:
11:c4:3c:00:a7:48:7a:76:2f:74:af:c7:2a:a3:cb:b2:c8:3d:
0f:c0:04:34:16:88:17:ab:84:62:2b:a7:a7:50:cc:15:f5:77:
5f:b7:c4:79:15:25:46:47:3a:c2:92:46:8f:ed:43:ce:70:79:
a7:9e:53:ee:7a:e0:5d:3c:28:c4:3b:0a:0d:81:07:fb:a8:e9:
d0:d8:41:e5:5c:4c:cd:ee:ff:36:3c:87:47:c1:47:4f:6c:26:
01:82:f6:ad:85:fa:fc:95:da:fc:b6:fc:cd:8c:69:29:34:4a:
ad:a7:69:f2:59:b0:e4:85:fb:08:2a:8a:d9:29:24:93:54:8b:
96:30:80:1b:d6:91:2f:3e:76:d2:8a:e0:04:b8:34:ff:74:68:
5b:2d:20:fa:d5:a3:4e:aa:d8:27:ac:da:6c:60:bd:00:d8:d1:
29:ee:11:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:53:17 2025 by rpki-client