Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
File: 18R1QD_dkDgYkeWgwyZrR43YyjU.mft (raw, json)
Hash identifier: /0zDHE60ONlvmRPu8NHivCbwoN6z+NvlpEgcr89lPyk=
Subject key identifier: 03:F2:FF:D0:17:77:2B:08:36:5E:13:33:C1:43:DD:39:85:23:54:E7
Authority key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
Certificate issuer: /CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Certificate serial: 01993981DE8F157043C42F6C760CC273AF1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
Manifest number: 0CA9
Signing time: Thu 11 Sep 2025 16:00:36 +0000
Manifest this update: Thu 11 Sep 2025 16:00:36 +0000
Manifest next update: Fri 12 Sep 2025 16:00:36 +0000
Files and hashes: 1: 18R1QD_dkDgYkeWgwyZrR43YyjU.crl (hash: 8wsGts1V0aRxtiCQrm0BafPgwxexxd7LnbOPs+QxZBQ=)
2: TKaIIghuBjovehstBf-4yPQzWzs.roa (hash: Y5l+50EAAN4J3BZwHmdWVnVvSIYr6cNnr7nr74LFy0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:81:de:8f:15:70:43:c4:2f:6c:76:0c:c2:73:af:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Validity
Not Before: Sep 11 16:00:36 2025 GMT
Not After : Sep 12 16:00:36 2025 GMT
Subject: CN=03f2ffd017772b08365e1333c143dd39852354e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:cf:6f:8c:cb:df:a1:90:e2:20:cc:33:ab:
19:b4:78:8e:e7:2f:be:15:2d:07:6e:4b:b3:fd:24:
d2:5b:e6:25:44:24:6d:d0:ef:99:30:97:b3:51:10:
52:e5:62:61:f2:f6:a2:05:8f:48:45:a9:08:8e:23:
3f:eb:10:40:92:65:58:18:c1:c4:31:04:a8:79:a9:
54:67:8a:93:0d:28:69:cd:7f:88:7f:32:8e:e2:10:
12:7a:96:ff:27:69:29:b4:a0:d8:bb:f4:bf:2f:d5:
ef:2c:db:f9:21:dd:a4:98:16:df:7e:f0:b2:de:ba:
1d:0c:85:59:50:01:38:52:83:77:43:81:de:f9:57:
ce:12:c2:45:89:6f:ce:97:d5:9e:24:b3:15:9f:85:
79:fb:5e:d5:93:f4:a8:03:67:5f:ab:8b:2a:33:59:
d0:7a:97:e9:b4:e6:29:43:66:33:6c:2e:fb:6f:5b:
53:0f:27:f5:5e:60:e3:ff:49:e6:89:83:22:3e:a8:
d1:c5:76:a0:8a:33:0e:62:80:27:c7:42:50:16:5c:
f1:bf:31:53:72:29:6b:f4:4b:11:9c:f5:7d:c3:60:
93:11:a0:2e:14:81:d5:d0:db:fa:d8:66:89:c5:64:
34:55:86:cb:60:37:92:37:ba:dd:70:b1:65:af:99:
0b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F2:FF:D0:17:77:2B:08:36:5E:13:33:C1:43:DD:39:85:23:54:E7
X509v3 Authority Key Identifier:
keyid:D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:71:46:6f:eb:2b:f4:02:6f:f3:d2:3f:d6:5b:78:36:a9:9f:
e0:a8:8b:bf:f3:dc:f4:f9:fb:a7:f3:05:11:b1:3a:5b:df:42:
bf:71:ea:89:56:e3:18:8d:65:46:b5:29:63:5f:8a:67:f8:4c:
f8:6d:19:55:c2:62:41:1f:4b:9a:ba:ca:b0:44:b9:6f:ac:27:
60:27:87:90:b0:ca:7b:41:a9:ac:ac:83:6b:48:71:62:21:07:
1d:d9:7e:4d:7b:68:60:2d:32:4b:0f:c6:23:83:e4:aa:0d:f0:
48:9f:bb:50:62:ed:8e:9d:fd:4a:d6:b5:ba:db:3e:50:63:83:
e3:6c:88:43:f0:fa:c8:06:2c:d5:d4:69:59:a7:f7:6c:a9:91:
e5:fe:bc:75:76:be:17:56:57:13:3a:3c:ac:09:4e:1e:38:52:
6e:5a:fc:73:58:fa:f8:9c:f8:ae:0e:72:a1:ad:4f:16:3d:a7:
38:ea:9f:69:ce:73:3c:d6:90:95:67:cd:3e:d1:bd:4d:a1:a9:
dc:2a:80:77:0f:92:9f:0a:d9:ea:f0:d4:56:7e:f8:29:d1:cc:
34:7d:e7:0a:44:5c:b3:eb:b1:d5:ff:30:c5:3c:60:57:2f:cf:
fe:05:a2:cb:6e:02:42:5e:15:c7:97:7e:19:07:df:98:c0:40:
75:14:66:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 23:35:33 2025 by rpki-client