Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
File: 1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json)
Hash identifier: 9TAV9n43iG2298V/94Mb5smtaum2Nvq9GFbZIA/zgMQ=
Subject key identifier: F5:0E:EA:FD:BF:BC:1D:9E:F1:1C:97:B4:F8:F0:9D:48:84:65:41:88
Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
Certificate issuer: /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Certificate serial: 019967370A35CDEE689F1C228548BF955963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
Manifest number: 157C
Signing time: Sat 20 Sep 2025 13:01:24 +0000
Manifest this update: Sat 20 Sep 2025 13:01:24 +0000
Manifest next update: Sun 21 Sep 2025 13:01:24 +0000
Files and hashes: 1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: aViaV1qsiyoOJg5fC1qhZshKaSdhYJKOGEgZY7Z7+1U=)
2: nuwLQIg-lK2envR_t0a0TNPRBGQ.roa (hash: 6zkhxyKXAGxELCe57hpSnoaGWnhmysqwWNpKa980lyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:67:37:0a:35:cd:ee:68:9f:1c:22:85:48:bf:95:59:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Validity
Not Before: Sep 20 13:01:24 2025 GMT
Not After : Sep 21 13:01:24 2025 GMT
Subject: CN=f50eeafdbfbc1d9ef11c97b4f8f09d4884654188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:28:01:75:55:00:9a:65:1b:48:bf:e1:66:af:
5e:d6:96:ff:af:4e:90:c7:7b:41:f9:c2:b1:84:f5:
28:a0:fb:b7:08:7c:84:a5:2d:23:31:5e:45:44:63:
24:23:0e:dd:dc:ef:41:dc:01:ea:90:7d:c8:d6:84:
e8:73:50:09:a8:c1:1a:42:48:5c:3b:3f:d1:13:50:
1f:60:5c:ae:24:8b:d3:f3:48:54:46:85:86:75:8b:
0c:e3:51:2b:56:fe:f8:65:e6:7d:fd:9e:ae:a3:fe:
6a:a5:7f:36:ab:7a:0b:43:31:86:38:e6:f8:aa:f5:
62:05:37:54:be:2e:9a:c1:88:c5:65:f7:5c:85:e4:
d7:d5:d3:ee:e4:7f:dd:3f:f7:09:cb:70:31:ea:2f:
2b:d6:53:02:d8:91:85:fe:c4:d3:88:93:7e:9d:b8:
17:b2:ff:6f:9e:8c:bd:1e:27:64:d8:e7:1d:0f:9f:
08:ea:e8:64:6c:ad:b2:3d:8f:32:57:2f:2f:a1:1c:
8b:93:7d:03:79:97:52:65:21:cf:72:51:cd:ed:6e:
73:1f:90:9e:71:9d:0d:11:f3:9d:60:6a:6a:2e:2d:
36:1e:6d:71:7f:b4:12:44:54:d0:39:77:4e:d9:18:
1a:ec:87:44:6f:48:17:d2:e1:92:2d:30:1a:05:97:
7d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0E:EA:FD:BF:BC:1D:9E:F1:1C:97:B4:F8:F0:9D:48:84:65:41:88
X509v3 Authority Key Identifier:
keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:96:66:35:6e:6b:c6:0d:de:84:f7:a8:bb:b0:59:ca:42:13:
b5:5b:e6:9c:80:c2:d5:13:f4:49:14:2b:5e:3a:34:9f:a7:d9:
8d:66:58:60:e4:09:1e:53:e4:d4:a9:14:d4:67:07:16:ee:42:
a0:79:68:ea:66:30:d7:df:8d:a9:5c:c3:8b:55:87:47:dc:67:
a9:09:00:c7:af:7d:9e:cb:ee:98:6d:a7:60:4a:3b:7a:04:ac:
8d:aa:7b:a7:3b:8e:dd:35:d4:a3:f0:e0:6c:ad:42:6b:cf:42:
c6:97:65:73:71:10:19:82:9f:36:91:08:a3:75:ea:c9:02:52:
16:2c:74:e6:4f:e3:cf:43:f5:9b:f2:5e:aa:e0:3b:7c:ee:40:
bf:d7:9d:a1:dc:b7:3a:57:ef:6a:65:c3:6e:03:82:7b:ac:f0:
cf:fb:7f:ff:0d:02:58:c7:e2:86:2c:e1:02:c2:2c:f0:74:42:
ac:76:34:9f:35:c9:69:8d:ec:90:1e:69:d7:1c:b2:cc:10:7a:
c2:ce:65:a7:d4:9e:93:42:45:01:c5:e3:1c:30:23:ec:fb:e3:
e8:eb:95:41:7e:2e:3a:11:fd:77:ad:ee:c9:9b:63:68:38:35:
1c:28:e7:32:22:dc:f1:52:2c:e6:2f:1a:88:ba:a0:12:77:30:
6a:01:2a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 17:05:14 2025 by rpki-client