Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
File: 1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json)
Hash identifier: j1o6PM9ur3NohLQHXlk39r0T5xMlzah+GMbDduBPj3I=
Subject key identifier: C0:DA:00:B6:EF:36:1B:CE:68:57:7D:9F:B3:E2:FC:E6:DE:40:36:35
Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
Certificate issuer: /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Certificate serial: 0199239EB6E53CDCAE4DAAD3CD113F42CB92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
Manifest number: 1311
Signing time: Sun 07 Sep 2025 10:00:27 +0000
Manifest this update: Sun 07 Sep 2025 10:00:27 +0000
Manifest next update: Mon 08 Sep 2025 10:00:27 +0000
Files and hashes: 1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: x6TP9Ze1WXj7x/3rGidybcEG5caZi8A6MByjgt5RuO8=)
2: FJfX864pvFwf4qPxQ1uqI0bIaXg.roa (hash: oKD/fS/LmM/Bugiaw6RKm+DzVLCUCTYs+LRezp4BQso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:b6:e5:3c:dc:ae:4d:aa:d3:cd:11:3f:42:cb:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Validity
Not Before: Sep 7 10:00:27 2025 GMT
Not After : Sep 8 10:00:27 2025 GMT
Subject: CN=c0da00b6ef361bce68577d9fb3e2fce6de403635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:31:88:cf:c8:c6:69:96:77:b8:13:b1:85:54:
cd:70:25:df:a7:2d:21:03:fb:8a:5a:25:79:8d:4d:
b8:53:b5:84:19:34:1f:e6:cf:33:d2:1f:13:61:5e:
53:f9:47:f9:af:d7:7b:06:5f:a1:b9:54:4d:7f:05:
3b:ee:ef:53:cf:ff:c5:77:ef:62:8a:50:50:bc:01:
23:13:34:0e:07:27:f2:52:72:7f:f6:75:c5:b0:80:
2b:fc:74:08:93:ad:94:1e:60:48:d5:8c:ee:44:02:
a8:3d:f2:d2:9a:5e:7c:97:4a:04:ee:0c:25:8f:21:
5c:2d:70:eb:06:64:af:23:8e:fc:eb:a6:9e:5a:b7:
c8:db:d3:12:b9:e2:e0:1d:07:25:ba:83:73:66:40:
f7:11:09:21:62:43:04:8d:08:33:ed:26:aa:55:6e:
9e:da:96:9b:a1:8b:d7:23:9a:b5:2f:de:83:d7:c8:
5d:c2:2d:89:72:fc:dd:1c:fe:7a:35:3d:d0:5c:98:
c1:73:d2:a0:c0:72:0a:26:5b:48:07:d7:23:33:f3:
93:7a:2d:dc:63:84:23:3f:d7:11:92:e8:67:dd:ea:
69:09:b4:dc:bc:38:bd:ca:d4:cd:81:c1:51:b6:12:
01:62:66:d8:eb:ae:e6:68:32:fd:9f:6d:f1:dd:d7:
92:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DA:00:B6:EF:36:1B:CE:68:57:7D:9F:B3:E2:FC:E6:DE:40:36:35
X509v3 Authority Key Identifier:
keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:be:30:1e:e5:8e:25:32:ed:c2:c2:36:fe:15:02:c2:f8:83:
0e:23:37:c2:29:3e:a0:a3:28:70:28:62:fc:b7:fd:4b:dc:02:
d7:31:33:5c:56:d6:0c:c1:22:1f:c5:07:bf:f9:57:43:d1:76:
91:16:22:d5:84:f4:88:8c:88:84:65:87:66:1b:92:a1:90:31:
b8:a4:d6:11:84:be:f4:44:91:7e:a0:2b:46:93:d8:3e:e9:da:
02:c4:ba:ea:5a:0f:b6:a6:75:60:93:d1:1b:07:7b:0d:11:ee:
3d:a6:13:b6:0d:94:14:ce:a2:8d:f3:45:ff:8a:c3:35:00:d4:
a2:a8:de:81:01:10:c5:a1:c3:9e:f0:4b:71:a9:e5:8d:54:d7:
7e:0d:dc:48:33:cc:a6:77:91:c4:c4:5a:bd:38:43:76:90:f4:
06:54:98:2f:5a:89:7b:95:8f:fe:da:0a:74:78:2a:cd:07:d3:
17:44:03:4c:2e:5a:07:16:8c:41:30:38:95:7b:2e:90:ba:38:
c1:91:48:5d:f0:2d:53:5a:9f:08:88:ff:60:0f:9f:65:20:47:
ab:e1:36:28:f0:74:62:dd:44:b8:58:41:e8:86:9a:26:73:58:
16:60:df:02:89:4f:9c:71:dd:98:47:e1:58:bf:ae:9e:38:f6:
60:c7:e3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:49 2025 by rpki-client