Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
File: Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft (raw, json)
Hash identifier: BhRIT7Rq4y9XCvC2udXytEQx+xo5GRN+dAlxnMvXfQg=
Subject key identifier: 05:18:B1:93:7F:D9:CF:A2:65:33:F0:DD:DA:74:73:D6:77:35:7E:D2
Authority key identifier: 16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
Certificate issuer: /CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Certificate serial: 019921B12027EECCF475174B57A3953FA133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 01:01:20 +0000
Manifest this update: Sun 07 Sep 2025 01:01:20 +0000
Manifest next update: Mon 08 Sep 2025 01:01:20 +0000
Files and hashes: 1: Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl (hash: 4v8CGCoX1E7gcCyYw1SaNulBPg5h8kjk8JjrltUWB2Y=)
2: WIJApdkXlbEUeEO2cKb4qiLS28o.roa (hash: 1qyiMGZ/E0ICeDVPfHZdxWe+RTO7sCD7GgXGyaWl1c0=)
3: jmPpCt20gyt7K42Iosl951LnaB8.roa (hash: pgMiVWt2zP5Kw215EB82Tgo4s/CVNPF5riSUMPLjECQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:20:27:ee:cc:f4:75:17:4b:57:a3:95:3f:a1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Validity
Not Before: Sep 7 01:01:20 2025 GMT
Not After : Sep 8 01:01:20 2025 GMT
Subject: CN=0518b1937fd9cfa26533f0ddda7473d677357ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fa:07:40:7f:25:51:bf:62:40:88:ab:e6:93:
fa:c6:c1:4b:d0:88:e4:b4:12:d9:25:1f:bd:7d:7f:
ba:7b:44:7f:50:44:64:55:d1:c9:d3:f4:e5:8c:3b:
dc:b5:5f:0c:ac:3b:a9:fe:66:72:8f:14:4a:b0:2c:
b5:f0:2a:77:3c:7e:d7:4b:4f:b8:16:a7:6a:90:83:
d5:90:d2:02:50:77:fc:5a:c2:9e:34:89:75:f7:ac:
00:63:c8:9f:b6:70:fe:69:08:c1:d4:26:ef:b8:c1:
4e:d3:1b:3f:49:f9:41:d6:45:9d:32:65:8e:f2:1c:
ec:b8:3c:7f:0d:9b:07:7c:07:57:f0:94:ef:07:10:
3c:90:34:74:89:81:71:66:ab:59:bf:62:d4:29:26:
6b:e3:8b:76:a3:1c:cf:d9:58:41:e9:d3:6e:42:41:
d7:73:3c:c5:1d:3b:89:be:ed:7c:04:d2:84:0e:da:
71:fe:d2:66:80:45:1a:c4:35:f4:85:25:bc:1a:34:
6a:36:a5:e9:d5:9b:e1:b8:c0:7e:13:9f:d4:4c:2e:
95:ff:15:cf:73:a8:dc:6a:a2:75:07:0f:f4:f8:95:
1c:56:2d:43:f7:4e:83:3b:d5:96:f9:88:ef:4c:a8:
5b:b8:4d:cc:6e:9d:f3:e6:95:1e:78:de:e8:33:d8:
cf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:18:B1:93:7F:D9:CF:A2:65:33:F0:DD:DA:74:73:D6:77:35:7E:D2
X509v3 Authority Key Identifier:
keyid:16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:1e:f8:8f:ba:4e:98:bf:00:11:c2:c8:21:05:ba:a4:10:19:
50:e8:e5:07:d8:0c:37:9a:d9:74:da:e1:22:af:d7:b0:26:6c:
b8:f6:87:63:cf:ca:92:5d:f5:36:ce:ec:6c:76:4e:cb:a4:96:
89:ad:af:90:9f:f1:16:c9:5b:a4:a0:42:2c:44:cd:21:33:fb:
9e:9c:1c:ce:f0:45:c6:cf:30:c8:64:32:c7:a9:e5:fd:c4:b3:
1a:8a:b3:4d:dd:03:2d:e3:f1:0a:e4:92:b7:68:c1:b0:d8:d1:
50:a2:84:1d:1a:2c:25:99:e9:22:86:73:65:f9:36:87:a9:61:
7d:2a:1a:47:3f:65:70:ba:77:dc:94:e2:91:dd:d2:b6:fe:31:
76:7b:0f:48:e8:69:7a:03:27:59:9e:d0:d0:c7:82:78:d9:9b:
57:1a:26:c1:8e:ff:d1:2f:3c:e4:45:72:91:89:60:4b:31:fc:
66:c2:53:da:88:94:a5:68:2c:44:bd:0c:e4:ff:97:2d:88:39:
8c:0d:0a:b4:1a:42:25:eb:91:d0:39:64:af:86:77:a6:c9:c3:
a5:3c:43:5d:b3:7a:66:ae:9d:21:c5:50:16:84:3b:bd:65:29:
e2:d1:10:12:07:c9:a2:a3:35:53:74:e4:46:2e:b3:2b:85:42:
8c:0b:ab:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:21 2025 by rpki-client