Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
File: 1-cSsxnpLABNVenTs5mQfT5R1_y0.mft (raw, json)
Hash identifier: wgoYtWUOODVOcf+2KmnBqehyKup6/EHR6BHGTtn1tqg=
Subject key identifier: D3:24:32:A7:EF:69:27:C9:61:95:DF:69:FF:10:E3:30:12:9B:EE:C9
Authority key identifier: F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
Certificate issuer: /CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
Certificate serial: 01984BC203C53392F827CFF855B126A9FE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 12:01:02 +0000
Manifest this update: Sun 27 Jul 2025 12:01:02 +0000
Manifest next update: Mon 28 Jul 2025 12:01:02 +0000
Files and hashes: 1: 1-cSsxnpLABNVenTs5mQfT5R1_y0.crl (hash: V6z3BQ7nHpy0dZsgG8/hucDxKSlq1UEJ7P4/FaXj9zI=)
2: 9KxQR6j2axabNDMZ1-8dgcNiaM8.roa (hash: 2rUs2SoRDiW7TeHLXoH00fOWIiSClvCYzvEbW1LWNms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c2:03:c5:33:92:f8:27:cf:f8:55:b1:26:a9:fe:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
Validity
Not Before: Jul 27 12:01:02 2025 GMT
Not After : Jul 28 12:01:02 2025 GMT
Subject: CN=d32432a7ef6927c96195df69ff10e330129beec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:15:a8:f3:ea:54:f2:16:dd:74:c0:88:05:
30:75:55:c7:21:ba:91:fd:d6:2b:20:9e:74:e3:f2:
de:3a:40:51:f7:46:d0:51:72:3c:39:53:eb:de:e1:
0f:cb:29:d8:2e:93:f5:05:eb:ba:d4:2e:f4:86:16:
95:ac:23:72:13:f4:70:e0:87:89:c7:5b:64:81:a4:
8c:25:94:60:03:f2:38:00:ec:ee:f2:7f:70:f2:8a:
b8:f3:db:c0:36:11:cf:0f:6d:a7:89:a5:3f:6b:46:
67:3f:8b:55:52:6d:5f:0c:0e:d8:74:2e:6f:8a:72:
ec:c2:09:37:e1:94:a8:4c:6e:d7:a0:ef:d2:1f:c6:
b7:62:ca:63:b5:76:12:17:d8:40:a5:13:0b:be:de:
5c:2a:04:0f:2e:61:ef:8f:37:48:2d:7b:d3:d4:d8:
23:12:b4:a9:e2:9d:c6:08:bf:62:01:ab:24:44:ba:
55:be:0f:ad:fe:b4:bc:70:73:1b:a4:fd:0e:c2:51:
79:9c:d1:51:70:39:29:8e:b9:86:9a:7e:4b:41:19:
d8:b2:f8:56:bb:e5:c5:f4:26:30:42:95:1f:71:cd:
9c:63:20:57:aa:10:05:4f:59:ee:51:bb:af:72:dc:
9e:f0:8b:73:15:cc:73:83:2b:8f:a4:76:7e:a2:51:
9d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:24:32:A7:EF:69:27:C9:61:95:DF:69:FF:10:E3:30:12:9B:EE:C9
X509v3 Authority Key Identifier:
keyid:F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1f:81:a4:1c:c6:c6:44:b1:2e:d3:3d:14:d3:9c:0a:fb:59:
a2:42:18:da:22:7f:04:ae:d2:c2:22:17:cd:61:d6:84:78:eb:
be:7d:fd:c7:01:20:65:9d:f1:ef:a5:40:94:00:44:73:c6:4d:
b8:d7:04:28:58:a5:84:4a:5c:85:8b:08:e5:e4:d6:2f:8e:f1:
9b:f9:43:c7:b9:f7:b5:bb:df:69:14:83:1b:b7:fd:40:1b:af:
7a:ad:8d:ee:cf:97:33:c9:2b:d4:f7:30:b2:93:95:de:87:ce:
94:f0:44:2a:ef:f4:aa:76:2d:f1:e5:d1:ed:e6:6e:fd:cb:f7:
c0:bd:65:ac:96:d9:e3:0d:5d:5c:5f:e5:3b:6b:61:6f:c2:80:
56:65:e2:0e:3c:38:cb:2b:a1:41:e4:9a:cb:21:91:fc:a3:c2:
1c:c4:ed:1b:20:80:d1:40:24:b0:34:6b:1e:f7:fa:c7:d8:78:
92:22:24:b9:75:29:b5:e7:a6:e8:c5:fb:14:aa:f9:b3:3b:09:
1f:86:56:33:1d:b0:4c:da:8b:8e:e1:ab:e7:55:ec:dd:31:da:
10:11:d9:d4:bf:67:03:8c:58:5a:1f:12:bb:58:6c:c9:53:45:
a9:5b:97:d3:15:88:24:6c:18:07:76:1b:94:cb:a7:87:f7:32:
59:3e:b7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:22:28 2025 by rpki-client