Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
File: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft (raw, json)
Hash identifier: NXj7x6Ow09F/P4Qx7qh4ScfOCAHJV6xsG8qo6DMSWCM=
Subject key identifier: C1:78:3D:D3:94:DA:D8:A2:3A:58:53:45:4D:FC:F9:D5:17:90:4B:55
Authority key identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
Certificate issuer: /CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Certificate serial: 019921E7D53212F898E8763AC765B7AFF67D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 02:01:05 +0000
Manifest this update: Sun 07 Sep 2025 02:01:05 +0000
Manifest next update: Mon 08 Sep 2025 02:01:05 +0000
Files and hashes: 1: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl (hash: WG31E+JESQGFiSP8ZbAzwIxEuyWE9YOQvUS2CTIJtl4=)
2: xCeuCdpHeZXyZn91vNpEgouKwNY.roa (hash: YgdYQ7c1msQKXeGAh4ZCZBOnjKpRZTljQq9qhsHOdSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:d5:32:12:f8:98:e8:76:3a:c7:65:b7:af:f6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Validity
Not Before: Sep 7 02:01:05 2025 GMT
Not After : Sep 8 02:01:05 2025 GMT
Subject: CN=c1783dd394dad8a23a5853454dfcf9d517904b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:5d:6c:fb:41:4f:51:19:9b:98:cf:cb:a5:
53:b9:a7:65:36:3b:19:39:30:88:1a:6a:30:ba:88:
b2:e1:f2:65:22:7c:82:af:5f:40:eb:aa:00:84:96:
97:bb:15:49:57:9c:52:61:b6:59:55:e0:ec:4e:5f:
3c:aa:73:e2:0d:1b:ab:64:11:cb:7a:2c:9d:74:cc:
29:b8:37:f7:1c:c6:4a:e3:28:c3:62:30:d1:12:0f:
7a:e5:5a:8f:a3:5f:4e:57:c3:78:d1:47:97:2a:f0:
f1:e2:25:ce:05:70:61:b5:84:c4:c9:ca:ed:77:6c:
0f:1c:16:41:0d:d8:52:d2:c0:a3:bf:84:2a:82:e9:
86:01:41:28:ba:b2:e7:20:26:f5:7e:18:cd:0a:e5:
11:e0:3a:46:01:89:33:68:18:01:b7:0b:a9:97:0c:
7f:a5:b6:61:e4:5a:9f:c7:25:47:5a:f1:77:3e:51:
e7:ca:0c:fb:55:53:a1:ea:39:5e:21:6c:bc:82:be:
0f:6e:89:95:ef:cc:b6:33:e3:fb:d5:df:7a:09:a5:
92:d9:de:df:e5:c2:c2:86:29:1b:88:81:fd:0a:db:
13:33:eb:69:11:51:0b:cf:72:74:3c:66:45:b6:a0:
14:c3:1d:b7:94:c1:f1:25:04:1c:64:80:75:2e:2e:
9c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:78:3D:D3:94:DA:D8:A2:3A:58:53:45:4D:FC:F9:D5:17:90:4B:55
X509v3 Authority Key Identifier:
keyid:F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:23:71:5a:f8:d7:cc:0c:8e:64:91:d5:d1:d1:21:5d:9d:34:
b7:ae:5a:82:d8:5b:2a:0f:29:cc:b3:fc:e0:34:05:d9:33:54:
c3:8d:71:07:a9:85:b9:9e:44:fb:c1:4a:5c:d9:d5:41:e3:32:
d6:e3:18:8f:dc:a6:be:0f:74:aa:7d:4d:40:c1:10:6b:9d:2c:
5f:fc:5d:ec:da:71:29:df:04:02:da:40:a5:a5:7a:91:1d:68:
c0:d8:fc:3c:3f:a7:02:19:dc:8f:43:cf:50:43:57:d9:27:93:
d3:c5:63:1f:d2:24:3b:3b:0b:95:ba:35:90:85:a8:8a:7d:03:
00:35:18:77:ed:1e:48:ba:43:33:88:33:b6:ba:3c:ce:04:1d:
79:16:e2:93:6e:fe:74:2d:3c:a1:3e:95:d1:45:70:53:02:83:
52:96:f3:64:3e:01:2f:34:8c:05:dd:95:ee:7d:f2:8d:3d:21:
5d:41:b0:73:91:29:04:fb:5a:41:99:3e:6a:73:56:26:8d:47:
9a:b6:5a:5d:f8:96:33:42:b2:20:99:9d:08:14:3d:26:0f:a0:
ee:e0:93:c0:5a:a3:17:d4:78:83:9a:b2:59:4b:98:60:0c:82:
89:ef:ee:9e:21:3e:cd:19:31:30:1f:50:52:1b:f9:18:ae:40:
e7:e3:6d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:36:56 2025 by rpki-client