Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
File: 1h61PLVnGN8NlHbNmEqsRDK5D2w.mft (raw, json)
Hash identifier: H1p3K+iIUbpjFww6C1OyuqlCxYaGxhSI5B1HGm9BXdQ=
Subject key identifier: 8C:BF:F4:7C:AE:76:3D:E9:C0:3B:30:B7:A8:78:4D:98:63:16:AF:D1
Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
Certificate issuer: /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Certificate serial: 019922C3C89A2055FE97E25498D4E93BC087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
Manifest number: 0D4A
Signing time: Sun 07 Sep 2025 06:01:20 +0000
Manifest this update: Sun 07 Sep 2025 06:01:20 +0000
Manifest next update: Mon 08 Sep 2025 06:01:20 +0000
Files and hashes: 1: 1h61PLVnGN8NlHbNmEqsRDK5D2w.crl (hash: 4ZaTJ2yipcfWex1lnI1R2TesVsycJgX01mlL0IhOqZg=)
2: OrR8ArTb8w0zfL8vZIwz8tbKQ2c.roa (hash: DXI54xHOK1LCP4IfsOxKtDE/CK97CgmE5qjdIRspp1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:c8:9a:20:55:fe:97:e2:54:98:d4:e9:3b:c0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Validity
Not Before: Sep 7 06:01:20 2025 GMT
Not After : Sep 8 06:01:20 2025 GMT
Subject: CN=8cbff47cae763de9c03b30b7a8784d986316afd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:83:67:5d:34:0a:eb:fd:f3:5d:77:b9:8c:
d3:bc:e5:6e:0a:28:14:cd:3d:33:83:49:b2:00:08:
80:7f:39:36:ff:37:3b:a4:bd:ec:38:45:be:87:ee:
b7:fe:56:e0:b3:a9:7a:ae:ad:5d:5a:a9:1c:5e:75:
1b:87:96:6e:77:cf:c2:f9:8d:5b:e4:57:52:b5:0b:
23:8b:aa:e6:a7:ed:33:ae:b3:e2:b8:b5:7d:62:3e:
6a:c8:ca:e9:3c:3d:39:71:54:76:86:b9:ed:f0:70:
f9:e0:d0:37:5e:11:b2:eb:98:21:ac:16:20:f7:d3:
21:41:1c:1f:b1:ae:45:08:4c:78:83:8a:22:bc:0d:
5e:46:ae:9f:a5:43:ee:ec:d7:2f:f3:1e:ab:2b:b2:
92:36:f2:6d:5c:9e:fc:70:b7:58:95:29:7e:90:cb:
b7:c5:fe:c0:b7:4f:b2:6f:58:f1:9c:00:ac:06:5b:
24:09:3f:56:2c:6f:24:a7:84:4e:a8:fa:e4:66:9d:
09:44:60:1c:af:35:de:56:68:8e:80:74:62:92:4d:
44:a8:2d:cd:86:ea:bc:9c:7b:b2:ef:20:15:dd:eb:
f7:0e:3a:62:c5:d2:e6:d6:ad:44:0b:e0:81:f9:48:
8c:8b:fc:03:7e:e2:0a:c0:eb:a8:0d:2b:b2:6b:a2:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BF:F4:7C:AE:76:3D:E9:C0:3B:30:B7:A8:78:4D:98:63:16:AF:D1
X509v3 Authority Key Identifier:
keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:00:95:ef:26:e8:a4:8c:b1:8e:cd:0b:7c:df:ad:36:a2:36:
e9:41:ee:0c:0d:01:16:e4:26:b7:63:58:62:20:ed:c0:68:b7:
90:86:8d:28:94:29:af:bc:60:1d:8b:0f:ac:c7:0c:42:26:a6:
97:ea:28:e5:3c:64:3e:b1:8d:e4:4e:36:28:73:97:8a:22:1e:
39:41:95:41:45:ee:e6:61:48:c9:cc:9d:bb:98:67:a7:c6:3e:
d2:4b:c6:65:6c:1d:30:2c:01:10:c6:9f:74:70:12:e1:05:8c:
6d:98:c3:2e:8c:3e:a8:90:88:e7:17:72:3c:ae:81:ee:5d:01:
a2:0b:ff:0b:e6:53:60:b3:68:0d:b0:fd:e2:44:ee:a2:ce:a2:
f7:f0:18:97:d0:ce:30:3c:3c:df:5f:02:6e:93:f3:36:20:f1:
7c:6f:b7:dd:19:7f:31:81:8b:9a:89:23:b3:f1:1f:4b:1e:22:
12:e7:f3:09:0b:bf:e0:22:59:ab:45:b5:5b:4c:90:a8:f0:e3:
31:d9:33:45:74:b6:05:dd:1b:e9:fa:d8:e1:22:63:3e:7f:e4:
de:51:cb:0a:6c:e8:55:2b:61:10:2e:12:fc:64:6b:05:2a:7c:
4d:ab:91:dc:35:6e:5f:73:01:13:b9:59:65:d8:ca:0b:79:89:
57:22:41:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:16 2025 by rpki-client