Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
File: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft (raw, json)
Hash identifier: SEdIl3B2fEg7Rhg9YkPOmrEDDwFMh0Vo/7Vl9p8xapg=
Subject key identifier: AF:76:98:BE:C2:CE:B7:CD:92:E8:05:DE:05:6B:77:DC:F1:C5:F1:57
Authority key identifier: FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
Certificate issuer: /CN=fb959fb90a158f17de5d8296df954482a8d6211c
Certificate serial: 0199239EEABC7CDF1610D6F08F3FD3CE39DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
Manifest number: 04CB
Signing time: Sun 07 Sep 2025 10:00:41 +0000
Manifest this update: Sun 07 Sep 2025 10:00:41 +0000
Manifest next update: Mon 08 Sep 2025 10:00:41 +0000
Files and hashes: 1: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl (hash: JrhzkKLSvfO+N3CZc0tsSLEHRalJvfSS8Y6tn6dbNeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:ea:bc:7c:df:16:10:d6:f0:8f:3f:d3:ce:39:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb959fb90a158f17de5d8296df954482a8d6211c
Validity
Not Before: Sep 7 10:00:41 2025 GMT
Not After : Sep 8 10:00:41 2025 GMT
Subject: CN=af7698bec2ceb7cd92e805de056b77dcf1c5f157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:bb:de:62:b2:13:5f:dc:a0:78:62:52:e9:
da:fe:0f:a3:9e:ab:b6:20:44:e3:51:e7:96:73:9b:
42:68:75:29:d1:30:c4:80:02:15:6a:c6:f4:66:d5:
83:1f:15:09:d1:dc:d2:35:9c:4e:ed:8b:2a:ba:40:
54:47:2d:61:30:40:fc:6a:68:1d:a0:78:a2:04:e6:
d6:42:00:b1:9e:d4:15:a4:23:04:ce:f8:64:29:73:
f1:27:0c:4b:0e:ad:63:03:2b:0d:fa:5c:f2:ec:64:
5d:12:71:7e:28:a1:d7:5e:c7:fd:70:28:9c:6e:a3:
c1:5a:cb:78:41:7b:fb:de:b7:da:9f:f7:e2:42:49:
7e:e1:d0:e9:90:f1:46:97:71:f0:2f:f6:0d:d7:13:
38:97:82:65:e0:23:81:7f:35:7a:fc:53:0e:aa:37:
2d:87:fb:fa:ee:dc:be:34:75:6f:d7:a1:c9:40:c7:
a1:03:e8:16:5b:74:b8:3d:d5:a0:de:c2:f7:fe:80:
0b:0a:f2:e5:a0:46:1f:d8:c5:b5:1d:c8:1c:eb:81:
31:4e:2d:29:df:d1:19:77:f6:bf:03:09:6c:10:38:
c8:f7:c4:43:f7:af:15:78:9e:40:cc:cc:13:38:a5:
ae:80:f8:be:18:a0:4c:ea:8e:ac:41:b5:63:03:9f:
b4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:76:98:BE:C2:CE:B7:CD:92:E8:05:DE:05:6B:77:DC:F1:C5:F1:57
X509v3 Authority Key Identifier:
keyid:FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ee:56:e0:36:52:33:88:67:9c:98:45:1b:c3:91:88:b8:19:
e5:39:c4:f8:d2:86:a5:f4:1c:95:e7:57:49:54:4d:51:9c:14:
a3:e3:fc:4c:ce:3c:55:f2:ce:13:fe:41:56:04:71:ac:15:87:
5a:9f:ad:c3:19:46:e1:42:1f:39:f9:42:0a:fc:9f:e7:7c:f2:
8e:45:fb:b0:8b:3f:96:ac:2b:75:04:f0:6e:0b:c6:9d:dc:59:
4f:cb:de:88:8d:60:d7:04:1b:10:87:27:c9:eb:60:a7:6f:de:
46:58:ee:7f:a7:ab:d0:c5:66:67:4f:de:8c:d0:8a:97:db:54:
d0:03:b7:f0:bd:55:0f:70:f4:5e:ed:6b:1f:b7:b2:c1:ee:f5:
6f:d4:8f:ec:69:3e:6d:41:52:2a:2a:3c:80:26:7a:6d:f4:df:
dd:5d:36:58:4c:39:87:b8:97:97:58:7f:4a:e9:3b:b3:08:66:
cc:0c:04:59:d6:59:47:0c:e9:14:af:8c:77:83:16:6f:22:2f:
71:e9:77:d9:1a:55:38:85:83:5f:43:f0:e6:d6:de:7e:28:09:
b8:3c:93:ed:1d:ad:f4:58:e9:95:8d:5e:e7:c7:d2:78:48:0c:
76:f1:93:ba:73:c1:ce:4a:c1:bc:88:f3:53:81:98:9e:28:69:
7a:6a:74:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:07 2025 by rpki-client