Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
File: 1RWTKWDzwXTUlXq-n1qylSZNVFM.mft (raw, json)
Hash identifier: P8xPT/47J7DmF5PCXK5dzbKhp8Ko7STXwZAd8g8eRjI=
Subject key identifier: A1:E5:40:6E:78:93:86:F6:90:97:4E:3D:1A:94:0D:F2:00:F3:A4:60
Authority key identifier: D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
Certificate issuer: /CN=d515932960f3c174d4957abe9f5ab295264d5453
Certificate serial: 01992331441FD770630F6C9C3207D1EA7A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
Manifest number: DA
Signing time: Sun 07 Sep 2025 08:00:55 +0000
Manifest this update: Sun 07 Sep 2025 08:00:55 +0000
Manifest next update: Mon 08 Sep 2025 08:00:55 +0000
Files and hashes: 1: 1RWTKWDzwXTUlXq-n1qylSZNVFM.crl (hash: wXk0m8trM2lX+c1E/XikgNhgYrU7g5/85HCI9QqukM8=)
2: 5-grPTSSQ46ki6vrVlQC7SeehIc.roa (hash: vQAPGdX1KSbjltYnmf1gVhaVezYrxmfY7AB2aHZ+pA4=)
3: NBYK9HcV9zHH6p3edxqHgVRXk0w.roa (hash: ctgn9UPX1hGKPuPf8G1MPg9i0aaG134wq4vfRAm3Qis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:44:1f:d7:70:63:0f:6c:9c:32:07:d1:ea:7a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d515932960f3c174d4957abe9f5ab295264d5453
Validity
Not Before: Sep 7 08:00:55 2025 GMT
Not After : Sep 8 08:00:55 2025 GMT
Subject: CN=a1e5406e789386f690974e3d1a940df200f3a460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:bb:d3:4b:80:ec:d8:26:e1:a5:6c:3f:6e:
86:a9:3e:9d:df:15:b7:d4:1f:78:6a:19:f1:89:40:
21:9c:9e:b4:34:b4:04:32:5a:79:4e:11:35:a1:9d:
59:25:2b:cf:ad:52:6b:7d:7d:c4:26:ae:72:78:90:
38:d9:59:69:de:df:45:68:50:c3:de:8d:2f:91:ec:
ec:ed:cb:61:b5:0b:99:d2:8c:ba:44:9f:f6:53:0f:
19:b5:40:87:b5:ba:d9:db:51:68:bd:c6:aa:e2:f5:
83:04:6b:94:5e:c7:b7:36:b3:27:9f:61:e8:ec:01:
7c:cf:3a:1c:74:a1:67:de:f6:b5:db:e4:f9:f7:a9:
68:44:44:05:24:98:b9:e5:71:33:12:5f:80:21:c8:
de:16:bc:19:5a:a8:70:fe:2d:83:ce:06:11:e2:00:
0f:01:a8:4a:21:9b:4d:a5:52:be:3d:62:79:ba:1e:
60:08:02:52:b3:22:8b:31:23:a3:3b:ea:4e:3e:3e:
5f:fd:4d:87:c6:76:e8:97:10:b5:53:07:4a:83:19:
f9:f4:f4:fd:9a:b7:6a:ff:58:9d:ed:82:d4:06:0b:
07:38:8a:1f:2b:2f:7e:66:d4:bb:14:45:bb:8d:e5:
e8:ab:dd:81:6c:de:0a:e6:88:91:e5:09:c5:f8:2a:
af:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E5:40:6E:78:93:86:F6:90:97:4E:3D:1A:94:0D:F2:00:F3:A4:60
X509v3 Authority Key Identifier:
keyid:D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:42:8e:1c:78:85:dc:47:7c:12:57:a3:db:cd:7a:b0:56:4c:
6e:50:98:b8:aa:67:c2:e4:d1:1c:f9:3b:78:ed:ab:fb:7d:40:
f0:2a:f0:6e:c3:fd:3b:1a:d8:cd:05:fd:70:07:0c:98:87:b8:
89:4c:42:f9:a5:2e:08:74:10:2c:bb:3c:c1:85:e2:1d:8e:65:
ec:dc:ef:f5:c7:e1:49:a0:a8:ba:ca:bb:a9:34:af:ae:14:a5:
49:6a:f4:57:81:2a:4c:40:7c:5d:2b:f7:fc:0e:05:c5:51:9b:
e8:33:4c:7d:16:51:35:7f:69:b6:99:37:6c:5e:5a:45:46:ce:
4d:84:b8:29:a4:84:e0:2f:6e:d1:f0:00:8e:a9:ae:91:2a:15:
d1:b3:fe:0e:dc:97:48:75:e8:38:c8:e1:1e:24:9a:52:3a:e2:
ba:67:c4:29:eb:77:74:70:f8:25:9a:41:09:19:87:95:0a:16:
ce:f7:39:9b:2f:02:4a:f2:02:c7:2a:6e:c7:2b:cd:9a:7e:57:
ed:67:83:66:65:57:0f:da:3b:45:86:d2:ae:24:80:99:2d:af:
a1:9f:b7:d5:37:01:8b:9c:bd:a4:d5:d2:37:a4:6d:11:37:7e:
69:fc:b2:22:e6:4e:bb:11:5b:8d:e7:bc:b4:d7:e5:b0:8c:d2:
1d:43:7a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:35 2025 by rpki-client