Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
File: 1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft (raw, json)
Hash identifier: fHLAgCPgehtrnvMTxRL490Cx9pjGZ1/8PSTMNN7kc3M=
Subject key identifier: CB:28:22:FE:B9:4A:45:9A:B5:D1:87:B2:BD:52:63:24:25:53:38:9C
Authority key identifier: FB:0F:7E:BD:25:F6:AF:46:37:82:2E:FF:48:B2:78:B1:8C:70:6F:82
Certificate issuer: /CN=fb0f7ebd25f6af4637822eff48b278b18c706f82
Certificate serial: 0199228C29C3CDD551B66174DEE1608F5553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
Manifest number: 1600
Signing time: Sun 07 Sep 2025 05:00:35 +0000
Manifest this update: Sun 07 Sep 2025 05:00:35 +0000
Manifest next update: Mon 08 Sep 2025 05:00:35 +0000
Files and hashes: 1: 1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl (hash: cAiLr8RnRWX82AhI2R1kX31Wd/+KLXbrvsuSfdCUm0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:29:c3:cd:d5:51:b6:61:74:de:e1:60:8f:55:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb0f7ebd25f6af4637822eff48b278b18c706f82
Validity
Not Before: Sep 7 05:00:35 2025 GMT
Not After : Sep 8 05:00:35 2025 GMT
Subject: CN=cb2822feb94a459ab5d187b2bd5263242553389c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:17:57:91:03:c3:7f:35:be:ec:9f:c9:b4:7d:
bf:a6:20:b1:77:da:b6:06:7d:c3:04:e6:79:38:8c:
2c:e6:75:11:5c:c0:f0:ee:e9:ec:a0:67:1d:25:28:
30:98:fb:3c:23:97:c3:f9:eb:07:85:58:5b:a2:03:
16:0a:a8:d2:c4:84:72:69:36:73:d7:32:3e:50:1b:
d7:29:5c:19:44:68:0c:28:7b:35:07:66:cd:c5:d1:
b1:76:70:23:a2:a7:4d:3e:46:d6:a7:33:66:73:8e:
f5:7a:8d:c7:4b:4e:91:57:a1:00:21:18:9e:bf:ec:
f6:02:e6:f8:5d:87:58:bd:08:7c:3a:7a:5f:df:b3:
2f:99:69:08:31:3d:e2:1a:95:07:8d:f6:47:44:a2:
f4:a3:c7:87:0c:8b:59:b5:89:dc:d5:57:a8:ae:cc:
d3:26:4c:52:02:ab:93:84:db:e4:6b:2b:28:19:1a:
fd:68:8c:e9:aa:e1:26:f5:1d:75:c6:64:ef:cc:12:
9d:5a:96:fb:2a:75:22:f4:b1:7c:49:c5:f3:66:4a:
d5:67:4d:65:cf:df:0a:bb:27:44:ac:9b:a0:f8:bb:
ee:08:27:77:73:c2:df:10:1b:52:3b:32:3a:5b:d8:
ef:70:18:2a:78:ed:52:c1:6e:13:0b:90:dc:a0:53:
e5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:28:22:FE:B9:4A:45:9A:B5:D1:87:B2:BD:52:63:24:25:53:38:9C
X509v3 Authority Key Identifier:
keyid:FB:0F:7E:BD:25:F6:AF:46:37:82:2E:FF:48:B2:78:B1:8C:70:6F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8b:96:b4:c2:fd:84:b6:83:64:14:d8:67:ed:01:ed:c2:c2:
c9:a7:15:6e:b1:6b:78:d8:c5:3a:20:fe:df:09:8d:35:68:51:
ff:ab:95:32:90:22:d6:40:e7:75:39:fc:f5:51:38:94:64:23:
b9:6f:d8:9e:3c:b8:10:d2:cd:0e:d3:02:1b:33:e9:44:e8:52:
98:a2:d8:f5:d4:d4:25:b2:78:d4:af:d6:ba:e0:f0:49:0b:df:
2c:e1:65:4f:7a:18:e9:fc:a0:e9:a0:b9:27:bf:3e:e4:c6:ab:
a7:13:3d:8c:dd:e8:09:b1:13:1a:55:ab:bf:b2:c1:bc:b4:d0:
c0:89:cb:c0:04:08:24:ee:4d:6c:9d:d0:a9:a5:1b:bc:8b:11:
74:fd:9c:1b:4f:f7:a1:29:4e:23:03:7d:ba:43:3d:94:05:cc:
0e:54:52:e6:1f:e5:a8:b8:ae:18:93:70:e5:b4:5f:c5:f0:e2:
f1:07:6b:ee:84:3d:31:02:04:c5:69:2c:8c:6e:ff:28:9f:2d:
43:26:8e:e7:85:e9:1d:9f:84:36:88:47:e6:ff:c0:4c:a8:81:
4c:c4:02:6b:b2:f6:22:65:28:46:ca:18:f2:c1:54:c2:03:fa:
ba:3e:8a:70:ae:ce:d0:9b:9c:e0:c5:f8:0b:f7:c1:2b:e4:24:
60:d6:94:5b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZkijCnDzdVRtmF03uFgj1VTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMGY3ZWJkMjVmNmFmNDYzNzgyMmVmZjQ4YjI3OGIxOGM3
MDZmODIwHhcNMjUwOTA3MDUwMDM1WhcNMjUwOTA4MDUwMDM1WjAzMTEwLwYDVQQD
EyhjYjI4MjJmZWI5NGE0NTlhYjVkMTg3YjJiZDUyNjMyNDI1NTMzODljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhdXkQPDfzW+7J/JtH2/piCxd9q2
Bn3DBOZ5OIws5nURXMDw7unsoGcdJSgwmPs8I5fD+esHhVhbogMWCqjSxIRyaTZz
1zI+UBvXKVwZRGgMKHs1B2bNxdGxdnAjoqdNPkbWpzNmc471eo3HS06RV6EAIRie
v+z2Aub4XYdYvQh8Onpf37MvmWkIMT3iGpUHjfZHRKL0o8eHDItZtYnc1VeorszT
JkxSAquThNvkaysoGRr9aIzpquEm9R11xmTvzBKdWpb7KnUi9LF8ScXzZkrVZ01l
z98KuydErJug+LvuCCd3c8LfEBtSOzI6W9jvcBgqeO1SwW4TC5DcoFPlgQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMsoIv65SkWatdGHsr1SYyQlUzicMB8GA1UdIwQY
MBaAFPsPfr0l9q9GN4Iu/0iyeLGMcG+CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS13OS12U1gycjBZM2dpN19TTEo0c1l4d2I0SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvZTIwOTk3LWExZWUtNDFkZS04Nzhj
LTIxODA1NDA3YjkwYy8xLzEtdzktdlNYMnIwWTNnaTdfU0xKNHNZeHdiNEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA1L2UyMDk5Ny1hMWVlLTQxZGUtODc4Yy0yMTgwNTQwN2I5
MGMvMS8xLXc5LXZTWDJyMFkzZ2k3X1NMSjRzWXh3YjRJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYuW
tML9hLaDZBTYZ+0B7cLCyacVbrFreNjFOiD+3wmNNWhR/6uVMpAi1kDndTn89VE4
lGQjuW/Ynjy4ENLNDtMCGzPpROhSmKLY9dTUJbJ41K/WuuDwSQvfLOFlT3oY6fyg
6aC5J78+5MarpxM9jN3oCbETGlWrv7LBvLTQwInLwAQIJO5NbJ3QqaUbvIsRdP2c
G0/3oSlOIwN9ukM9lAXMDlRS5h/lqLiuGJNw5bRfxfDi8Qdr7oQ9MQIExWksjG7/
KJ8tQyaO54XpHZ+ENohH5v/ATKiBTMQCa7L2ImUoRsoY8sFUwgP6uj6KcK7O0Juc
4MX4C/fBK+QkYNaUWw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:28 2025 by rpki-client