Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
File: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft (raw, json)
Hash identifier: Wh3UsaWCw0lBwd5/9gyDy1XdPWKJw3tHKZjeS2RUPxk=
Subject key identifier: F7:31:FD:1F:2B:78:A3:AF:38:2B:52:7C:1B:3D:29:2B:51:52:7B:DB
Authority key identifier: F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
Certificate issuer: /CN=f91084f454139347933876d52634b41a1dd099db
Certificate serial: 019846D21AF04838748A4E738A69D7476276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
Manifest number: 0FFB
Signing time: Sat 26 Jul 2025 13:00:31 +0000
Manifest this update: Sat 26 Jul 2025 13:00:31 +0000
Manifest next update: Sun 27 Jul 2025 13:00:31 +0000
Files and hashes: 1: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl (hash: cx2nC3HCbK91hpzg7KSE8yJKltv3W/c146btqMZog+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:1a:f0:48:38:74:8a:4e:73:8a:69:d7:47:62:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91084f454139347933876d52634b41a1dd099db
Validity
Not Before: Jul 26 13:00:31 2025 GMT
Not After : Jul 27 13:00:31 2025 GMT
Subject: CN=f731fd1f2b78a3af382b527c1b3d292b51527bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:5d:63:7b:fc:39:c0:37:57:b3:6a:22:3b:
69:6e:b8:04:03:8a:08:6a:55:69:a0:6f:bc:87:72:
b8:b3:c5:49:7e:da:4b:92:b6:bd:af:e9:65:48:d0:
ac:24:b0:4d:11:ff:c1:0d:87:f8:db:f8:aa:0e:42:
d6:c0:25:f1:20:32:18:58:84:55:59:2c:a7:ed:f1:
45:e9:07:65:d3:dc:a4:23:34:38:47:1a:21:36:30:
e9:f8:b6:1b:2d:35:5a:2d:df:f5:2d:6b:e7:77:ad:
5f:79:6a:73:bd:47:ea:26:38:83:71:a1:f9:6d:cf:
48:d2:59:fd:de:c6:2a:9e:52:64:86:28:b5:79:4c:
a4:ce:ef:13:51:97:58:65:fc:b3:c5:ce:21:1c:67:
67:a9:c3:22:d4:e1:01:4c:3c:72:e9:3d:75:fc:c0:
cc:a3:54:be:74:83:3d:26:50:9d:d7:fa:2c:e1:f5:
33:d3:7f:fc:eb:5f:44:3c:f1:11:b3:c7:48:64:45:
30:d4:87:fb:d6:e8:e7:8a:3f:85:98:9e:5e:33:5e:
73:6c:7f:e0:e8:67:77:f9:03:8a:ea:d4:81:37:b2:
04:d8:7d:94:06:b8:f9:fb:66:6a:02:a0:98:ce:da:
ea:6a:b9:89:2b:3e:3e:5d:a9:bf:a3:0e:46:e0:c9:
60:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:31:FD:1F:2B:78:A3:AF:38:2B:52:7C:1B:3D:29:2B:51:52:7B:DB
X509v3 Authority Key Identifier:
keyid:F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c4:34:37:c5:08:b8:72:cb:05:4c:74:cf:63:0c:10:cb:68:
b8:ff:38:f8:dd:01:fd:09:18:ca:ff:10:d2:37:07:24:51:72:
3b:06:7d:81:3b:58:b4:22:2f:ed:97:04:1b:d1:27:b6:54:87:
03:53:b4:f8:9d:ef:b2:e3:bc:9b:66:af:f2:b5:14:55:57:9b:
46:a2:53:0e:d9:bb:f2:54:ce:e7:62:16:f5:fa:56:ef:a5:74:
1b:4f:6d:28:ea:80:c6:01:c3:9c:8c:5c:0e:d9:cd:56:70:ee:
c7:15:cd:7e:64:55:e8:8e:43:0e:d9:62:aa:de:17:c6:0f:13:
30:47:f9:19:fc:3b:82:07:e3:f4:f4:4d:fd:73:81:53:e8:65:
55:dc:73:9d:43:fa:51:81:f5:be:0f:2e:17:17:49:ee:3c:02:
df:38:0c:69:6f:ec:f3:b5:e5:71:74:0e:ab:ea:e5:39:7d:df:
eb:4b:ef:05:b9:a5:52:a9:fa:65:28:b3:a2:f1:8a:cf:e5:ea:
ea:cf:7d:c6:c3:75:98:17:22:19:3c:26:f3:1a:77:31:8d:0f:
50:73:38:c9:83:46:c3:86:dc:ef:0a:ed:53:0a:31:dc:03:42:
e0:eb:99:c3:7a:e5:79:fb:8e:ae:9d:b6:51:64:e5:f3:0b:05:
5c:1e:f2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:53:40 2025 by rpki-client