Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
File: 1gTknpKDBavLjzLe8_78A-u83kQ.mft (raw, json)
Hash identifier: 3uYXj+x/SvHfwQyGaCpaRjd3FD9YDkS2alVhpg+On48=
Subject key identifier: 15:62:3A:B2:5C:F8:8F:E6:F4:11:7D:D1:E7:06:9E:85:97:AD:16:AC
Authority key identifier: D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44
Certificate issuer: /CN=d604e49e928305abcb8f32def3fefc03ebbcde44
Certificate serial: 01992B5961C5BCC763B833C9AFDE988B7FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
Manifest number: 1609
Signing time: Mon 08 Sep 2025 22:01:41 +0000
Manifest this update: Mon 08 Sep 2025 22:01:41 +0000
Manifest next update: Tue 09 Sep 2025 22:01:41 +0000
Files and hashes: 1: 1gTknpKDBavLjzLe8_78A-u83kQ.crl (hash: 8SngAjiJLOKExUDxzauqjwpMicdglV6tBOTnClZg7y4=)
2: pucl_qoNJsFNHYReBDscEGdx2N0.roa (hash: SiJfUuqs3fjKSI6Mo6WtKDUOtA0gOnKfbqvupwDeWPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:59:61:c5:bc:c7:63:b8:33:c9:af:de:98:8b:7f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d604e49e928305abcb8f32def3fefc03ebbcde44
Validity
Not Before: Sep 8 22:01:41 2025 GMT
Not After : Sep 9 22:01:41 2025 GMT
Subject: CN=15623ab25cf88fe6f4117dd1e7069e8597ad16ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:da:bb:7e:7f:9f:aa:83:7b:94:ac:c0:78:52:
09:b4:d7:b3:b9:db:8e:e2:9e:3f:09:da:cd:91:04:
2e:97:0e:10:37:14:1a:b7:1b:8c:41:11:14:dc:3d:
55:1d:da:89:7e:c9:67:55:c3:cc:a6:94:76:21:6e:
ea:11:3d:13:86:b6:3a:f8:b6:24:1a:59:fb:70:b5:
f4:d6:2c:9c:a8:10:65:7e:48:ff:45:d7:a0:86:9d:
20:aa:af:fe:00:88:19:85:d2:38:d1:d6:26:6b:f7:
32:2f:b0:30:d3:10:01:a8:7f:53:44:c3:f4:23:78:
8a:51:6a:fc:4a:35:93:99:f2:4f:21:fa:17:e0:63:
14:3b:29:6f:59:c9:dc:d4:15:e7:6b:d6:cd:43:51:
96:ef:68:ff:92:62:13:45:39:6a:37:33:4f:a6:d8:
ae:44:fe:54:36:da:73:20:68:fd:33:05:10:a7:3f:
85:89:f8:50:4c:6e:9a:78:33:26:7c:3a:cd:d6:43:
63:e9:6e:ab:e6:47:ed:fc:59:f5:6c:be:53:c8:a6:
22:fe:eb:6a:3d:02:7c:31:09:d3:a9:c4:4a:3c:f9:
08:fc:f6:2d:62:e4:ee:59:64:0a:40:44:5e:59:fd:
8f:2a:76:34:53:82:df:36:b9:37:f8:04:c7:41:42:
3e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:62:3A:B2:5C:F8:8F:E6:F4:11:7D:D1:E7:06:9E:85:97:AD:16:AC
X509v3 Authority Key Identifier:
keyid:D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:89:ee:23:8b:d4:8f:10:0c:01:a8:16:0e:bc:a5:88:14:a0:
89:2d:fd:ad:60:ea:b1:66:69:1c:fc:44:cb:04:a3:0d:44:90:
e2:5b:9f:04:1f:aa:9d:e4:1a:a6:84:76:5b:af:e5:3a:e3:3c:
07:04:f7:54:93:f1:36:92:31:91:1c:3f:02:e4:8d:ff:8e:22:
f6:33:3d:86:1b:85:cf:88:1a:a5:1f:5c:18:1e:7f:26:86:3f:
0c:4b:72:46:d6:4e:8d:39:08:bf:72:a4:41:86:c9:74:25:6d:
35:e7:00:44:28:9a:18:6b:77:0e:bb:6b:89:5b:30:36:35:e4:
aa:ad:6b:ff:0f:d3:2f:df:5c:5a:52:ba:d2:ec:18:32:91:ca:
df:0c:75:47:89:0e:66:dd:e5:64:26:a8:c0:97:e3:54:ab:83:
27:10:cb:18:23:45:56:c5:5a:00:d4:16:27:ed:70:97:4c:83:
e4:31:41:09:d9:51:ed:9e:6d:78:fc:87:77:78:04:d0:dc:6d:
6d:bf:f2:ca:86:0e:83:68:3a:e0:43:fd:d6:88:1f:73:6e:26:
8f:08:ce:4d:7b:22:ee:88:29:4b:95:e9:c7:6b:8c:93:ab:8b:
f0:65:7e:54:97:aa:21:d1:c3:ec:e0:e3:db:6d:4e:ef:8c:11:
f8:de:01:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 04:17:19 2025 by rpki-client