Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
File: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json)
Hash identifier: feu9mabKFN0oRp7QGAOjMY+LEflMuMuRyb5WEuqUPCw=
Subject key identifier: 42:86:18:60:4F:CB:F1:21:76:6B:AC:23:56:8F:79:EE:90:F7:BE:3C
Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
Certificate issuer: /CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Certificate serial: 0199228C48E95ABF376C6BEFEF9DC579B0B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 05:00:42 +0000
Manifest this update: Sun 07 Sep 2025 05:00:42 +0000
Manifest next update: Mon 08 Sep 2025 05:00:42 +0000
Files and hashes: 1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: J8FSxXlyMkJ3lnDcrPGYnnTj3E9pRtc402KspleAfeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:48:e9:5a:bf:37:6c:6b:ef:ef:9d:c5:79:b0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Validity
Not Before: Sep 7 05:00:42 2025 GMT
Not After : Sep 8 05:00:42 2025 GMT
Subject: CN=428618604fcbf121766bac23568f79ee90f7be3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:d6:34:59:22:2e:70:2d:0e:f9:24:5b:2c:
4a:42:a9:a1:de:d3:a0:fe:2f:b0:8b:d1:c4:61:d5:
a5:63:e7:e8:e4:6d:59:56:9e:a2:26:15:8f:9a:18:
6d:21:e2:3d:93:9b:ac:b1:fd:2a:8a:db:e1:25:51:
1b:ec:37:32:6e:36:d5:1f:f0:0c:1c:48:27:ba:4e:
b8:d7:ad:41:6f:7c:f3:d0:43:bc:ad:e1:c1:2d:e6:
32:00:f8:e7:8c:f3:03:5b:17:79:48:43:ff:a9:89:
c5:da:b1:ba:3f:ac:d2:51:a3:44:a0:2e:8f:43:d4:
ee:21:4f:6e:65:77:30:58:87:d0:13:8b:12:99:3a:
c6:05:8e:2d:4e:95:7a:84:37:74:01:9c:bd:ae:96:
0c:2f:0b:ff:0a:29:8e:8e:30:68:12:83:30:ab:a2:
3a:d2:65:2a:bb:11:43:df:a6:f8:5c:55:29:dc:a3:
e7:69:f6:d2:af:24:03:a2:02:ca:9c:04:c8:53:e9:
68:cb:1e:f4:73:04:a9:54:ef:2f:d6:cc:ff:a3:76:
2d:73:e5:08:0d:bd:3a:73:38:b8:9d:36:ba:9d:41:
bf:0d:16:dd:b2:d3:55:73:21:db:a3:d1:e0:da:e9:
2f:e6:81:c6:4e:5e:84:c7:65:d3:78:10:a0:4f:ea:
c2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:86:18:60:4F:CB:F1:21:76:6B:AC:23:56:8F:79:EE:90:F7:BE:3C
X509v3 Authority Key Identifier:
keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b0:c0:a1:e4:79:11:0b:9a:72:71:0f:53:12:70:2d:e8:c7:
fc:57:b4:11:42:84:8d:bd:db:86:99:f1:b3:0c:64:d8:3e:88:
a1:c4:10:27:f8:68:bb:01:d3:86:88:6e:8c:f5:87:78:90:c6:
63:73:38:dd:a5:38:37:1d:63:be:8a:f3:f9:c4:e0:3f:8f:62:
66:58:21:0e:09:00:52:8a:b1:d4:9b:a7:e1:71:2a:3c:f2:f8:
99:01:59:81:a8:83:6d:c0:8e:42:1a:d3:3d:19:1e:66:ac:99:
4d:9c:06:c5:24:52:cc:d2:5d:ae:11:1a:31:77:9e:57:85:08:
ac:58:f7:70:6c:86:ef:5c:f2:1a:84:73:b0:7f:4b:b1:5a:2f:
20:bf:3a:b7:8c:85:4f:1e:b2:a4:85:65:27:86:e3:b3:2f:59:
fb:bc:87:3c:c9:70:48:44:99:7f:92:12:db:ee:86:c8:75:c4:
92:d7:55:05:4d:bc:47:ba:54:98:48:ab:49:5e:73:b9:9a:63:
37:bb:10:3c:9c:33:ce:f2:29:8b:8e:58:e2:1f:1f:1f:2e:94:
05:db:65:f4:17:56:9c:84:f3:92:92:59:7a:cc:e1:73:1c:19:
91:14:1d:8f:d9:d1:65:1c:65:80:cb:a4:58:be:a0:e7:57:3f:
c3:ea:35:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:13 2025 by rpki-client