Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
File: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft (raw, json)
Hash identifier: 7amzH3/edZfY3iQTrJ6yo34IM+SYUIYh23NrOUKPVl4=
Subject key identifier: 8E:BC:43:77:15:4F:61:E1:C5:15:5E:C3:9A:F7:5A:51:95:95:54:13
Authority key identifier: D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
Certificate issuer: /CN=d5a2196ef119221155e1683f8967d254625dae71
Certificate serial: 019923D648C4CD1F35EC3799832C86B404AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 11:01:09 +0000
Manifest this update: Sun 07 Sep 2025 11:01:09 +0000
Manifest next update: Mon 08 Sep 2025 11:01:09 +0000
Files and hashes: 1: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl (hash: MQEmAVNxeDf8+IcpbQp7BtwGep6lFunhC8AcCQsadI4=)
2: Rvoozr9-AEirIvl3H78yEjywI3M.roa (hash: C8PH+7JgTNI/2g3gAC+RhVDcD73858pmRmw+QrCbn9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:48:c4:cd:1f:35:ec:37:99:83:2c:86:b4:04:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a2196ef119221155e1683f8967d254625dae71
Validity
Not Before: Sep 7 11:01:09 2025 GMT
Not After : Sep 8 11:01:09 2025 GMT
Subject: CN=8ebc4377154f61e1c5155ec39af75a5195955413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:f8:a5:7b:b9:68:76:e8:6c:a2:b3:82:b8:
7c:b5:4f:c1:65:0b:2d:af:49:5e:bb:00:28:38:c0:
2f:62:00:62:23:96:b0:fb:86:3c:66:55:f8:3b:98:
bb:e3:4f:1b:6b:ab:b9:21:a3:21:23:d4:d1:ea:68:
72:0a:58:0b:b0:91:dd:75:e6:9b:c7:0c:fa:1e:3a:
ef:fe:c3:fc:0e:e9:d8:16:07:cd:32:2d:87:e1:7e:
ef:46:0a:d9:a6:b1:67:99:15:97:7f:51:6d:38:de:
dc:84:42:5d:be:76:2b:d6:71:e7:b0:9a:6c:b7:9a:
37:39:a2:43:36:8b:c3:7b:b3:02:e7:ab:e8:4f:70:
bc:60:a2:98:3f:54:13:db:38:e6:fe:24:37:e4:0a:
8f:34:8f:20:d7:5a:c9:33:fa:5c:e5:c8:c8:49:b2:
b4:a4:3e:28:32:67:35:e7:6c:3e:71:da:75:e9:5a:
be:d0:d5:b7:75:89:30:5c:84:c9:00:87:db:9d:5d:
20:86:67:ce:c0:9b:97:f0:aa:5e:b6:26:a3:92:ac:
ea:38:84:24:f0:ae:6c:72:5e:8a:63:5b:b7:54:26:
80:04:2c:38:04:06:2c:f0:5f:64:d3:23:46:e8:9e:
03:5c:25:be:4e:d3:31:30:aa:ff:24:b8:81:5b:c6:
d5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BC:43:77:15:4F:61:E1:C5:15:5E:C3:9A:F7:5A:51:95:95:54:13
X509v3 Authority Key Identifier:
keyid:D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:55:e2:e9:c0:41:31:54:0a:00:68:fa:7f:ff:90:b0:7a:80:
40:4a:c4:e8:8c:53:73:d0:16:e0:6c:8d:54:96:5a:17:f2:cb:
89:a0:1a:e9:90:00:e1:10:d5:16:fe:83:ab:0f:e9:ce:39:eb:
5e:fb:79:53:2f:53:fd:cc:38:2c:fc:4d:73:57:29:07:07:18:
e7:43:d9:44:8b:07:92:46:66:6b:c6:93:1d:81:9f:c8:23:f7:
c5:3e:bd:8a:45:85:b9:66:ae:40:4d:ef:bc:34:06:14:2e:13:
4f:ea:8b:4c:d4:65:f8:8a:d7:4a:78:10:af:db:c1:81:cc:56:
57:cf:37:73:33:fc:43:83:58:c7:15:a1:f9:b6:18:33:89:f8:
52:7e:f8:7e:22:9f:89:c2:e8:ab:e5:41:af:25:99:af:8e:22:
e5:0c:9b:bf:e1:2f:be:d6:29:77:dc:94:d4:e2:60:7d:5c:ab:
f1:c6:01:89:47:43:57:5f:21:84:8a:e5:27:d9:bd:14:32:dc:
6e:69:4f:49:0e:90:42:7f:77:9c:3e:cd:5a:38:8f:85:de:4f:
c2:d6:fa:39:97:98:ab:7a:90:5a:0d:c4:ac:43:32:3a:9f:33:
f6:de:41:32:84:68:c9:6a:95:67:ea:16:cb:d4:76:1d:fd:9f:
6d:28:2c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:34 2025 by rpki-client