Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
File: 1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft (raw, json)
Hash identifier: 2R/z+QOtpmVSL2ArbkBBOtSPnzzNA4IAa+rNuhqFXXc=
Subject key identifier: 26:EB:99:2D:73:CE:7A:61:9B:C5:6D:A9:4B:70:71:5F:D5:4C:6C:45
Authority key identifier: FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51
Certificate issuer: /CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051
Certificate serial: 019922FAEDC79DED0D6ECED526A66B57EB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
Manifest number: 12C9
Signing time: Sun 07 Sep 2025 07:01:34 +0000
Manifest this update: Sun 07 Sep 2025 07:01:34 +0000
Manifest next update: Mon 08 Sep 2025 07:01:34 +0000
Files and hashes: 1: 1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl (hash: MKTiFptzO3Pgfh2tYVMReCbJ3jWU2cPXq6h0AJG+E1A=)
2: igBGcaK6I-04bslxB8dvdsYLHhw.roa (hash: FBSMg/oDiupeLPZD+Uq2Nknq3gqPFPRMj+3j0Pt7jOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:ed:c7:9d:ed:0d:6e:ce:d5:26:a6:6b:57:eb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051
Validity
Not Before: Sep 7 07:01:34 2025 GMT
Not After : Sep 8 07:01:34 2025 GMT
Subject: CN=26eb992d73ce7a619bc56da94b70715fd54c6c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:41:6e:bd:0e:04:dd:9d:ea:3b:b5:ee:64:
3a:22:95:81:5f:5e:08:fb:ad:2f:09:77:b4:bd:64:
29:cb:44:ba:94:90:a3:a5:5c:c6:00:db:7b:65:24:
7b:28:6b:2a:da:40:fc:6b:2a:6b:92:38:a2:7f:59:
c4:74:a8:61:14:4a:d0:1d:c8:12:6f:7d:ac:27:83:
70:68:17:5a:e9:f3:a1:a3:a9:b3:a1:24:75:c9:3c:
cd:fc:1a:10:27:e5:32:dc:ab:c0:33:81:bc:e2:6e:
ab:3a:17:62:5d:66:28:da:f0:22:50:99:e5:76:9e:
38:bc:de:3a:fa:0f:1c:d2:2d:0d:de:db:d7:01:49:
d7:20:71:fd:bf:b9:32:eb:8b:ef:67:23:d0:0c:fa:
20:5a:a0:f7:83:0a:ad:f4:1f:9e:18:6f:53:65:ce:
ea:94:39:53:5f:1b:f5:df:00:74:38:38:b9:68:97:
c3:29:8b:bb:78:4a:5d:12:10:67:7f:e6:f5:75:7c:
ed:75:24:cf:f4:8c:f9:b8:56:53:78:33:61:5c:12:
4a:33:33:d3:d0:19:be:1c:9d:fc:cf:67:9d:ea:1b:
6d:2b:06:98:4a:ba:55:ff:e6:88:0e:5c:06:f1:b3:
8c:28:f6:ca:e8:11:1c:03:8f:24:2f:e5:03:89:44:
ea:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EB:99:2D:73:CE:7A:61:9B:C5:6D:A9:4B:70:71:5F:D5:4C:6C:45
X509v3 Authority Key Identifier:
keyid:FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:2b:57:de:52:1f:d6:06:54:da:c4:76:9e:f4:9c:d3:7b:b0:
1d:70:11:98:45:f9:65:97:42:a0:bd:65:03:d1:bf:e4:84:cc:
18:5d:4e:be:bd:09:3c:59:6f:14:ff:ba:56:f5:5c:03:2c:d5:
07:59:db:01:aa:ef:e9:07:65:c1:4c:57:fc:a1:d5:fc:0d:bc:
f5:3a:a0:4d:15:95:af:e2:03:82:4e:43:fd:e2:8b:dc:0a:c2:
59:81:75:3e:5b:60:59:d8:5b:3f:ba:7c:3e:6e:ee:8a:58:b8:
62:c5:c6:ad:a8:bf:c9:d9:b8:3d:e6:8e:6d:c5:c7:33:4c:38:
44:fc:2d:5f:1c:81:58:d3:44:f2:ec:df:34:24:3a:fd:37:7a:
74:85:0c:21:90:e1:97:70:73:23:30:3c:e1:61:b9:02:26:b0:
73:e2:27:4c:6b:1d:26:0a:5f:11:dd:37:ed:c9:d8:84:e1:60:
26:b1:3c:fc:7b:3c:03:0d:9b:68:67:23:64:c2:f4:59:de:25:
e6:35:18:85:22:52:ac:3b:46:4b:32:35:c2:ec:40:97:45:38:
0a:4f:a5:1d:a7:b1:67:f0:ce:52:3b:2c:ea:f1:29:82:00:8c:
3f:07:f1:2a:1e:63:89:fd:6e:b4:ee:f4:34:13:54:dc:81:f8:
f3:05:b3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:52:14 2025 by rpki-client