Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
File: 1nADQQTxv2WBRLSqRbQaP1d53A8.mft (raw, json)
Hash identifier: bKVcEELUUqjGCCL8ZGO6CqXdUZJDP1uZYpC9VEDAQaI=
Subject key identifier: F5:4E:C4:D2:98:36:4F:11:FF:68:F0:86:ED:47:6B:63:7C:64:02:98
Authority key identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
Certificate issuer: /CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Certificate serial: 019921E79E7D79F014576E1067C7B08A375D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
Manifest number: 7C
Signing time: Sun 07 Sep 2025 02:00:51 +0000
Manifest this update: Sun 07 Sep 2025 02:00:51 +0000
Manifest next update: Mon 08 Sep 2025 02:00:51 +0000
Files and hashes: 1: 1nADQQTxv2WBRLSqRbQaP1d53A8.crl (hash: Vppn48EUR1vO22Pq6fVB0mI+64JKg5E6BUqRHQTFWHg=)
2: hydDgB-snN9BWY7iUjkavnwziQE.roa (hash: ysVRmS6Ip962i/GMIlN3GEIvctnMgjlKTRzkw2GE/YI=)
3: xDk85mkgQuWalB3gqd14km-ibFY.roa (hash: cwL93Aw5JJyqitIvfD6+Awn4jwkns5tDaXlp4E9iKuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:9e:7d:79:f0:14:57:6e:10:67:c7:b0:8a:37:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Validity
Not Before: Sep 7 02:00:51 2025 GMT
Not After : Sep 8 02:00:51 2025 GMT
Subject: CN=f54ec4d298364f11ff68f086ed476b637c640298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:d6:a3:06:4c:a2:7f:b5:ad:ef:b1:09:bf:46:
22:07:b8:93:b6:eb:94:6a:fc:a6:89:9d:e6:b0:c8:
9a:50:fb:04:41:f0:4a:ce:58:1a:db:e9:9d:af:f9:
bd:58:19:16:ab:c7:65:70:08:a9:4a:9f:ab:07:9c:
6e:9c:be:23:db:18:e8:61:45:6f:85:2c:ab:b0:a2:
47:5a:10:f5:84:6c:d9:a7:a4:c4:d9:6d:d9:e4:27:
08:92:67:bd:58:7f:73:fb:9a:e9:1e:a3:a7:25:63:
9b:4c:64:e5:e8:13:c3:a7:c7:f2:56:b2:37:81:77:
e2:bf:10:32:cf:1b:78:fe:27:90:a9:6a:85:ea:1b:
40:f8:56:5c:93:41:d8:b7:67:3a:b8:db:e4:0c:5e:
a5:2f:53:4c:3d:54:03:12:a7:eb:42:e1:50:a4:1c:
2e:44:18:e5:44:55:d7:e0:89:2e:2c:cf:21:90:df:
85:07:b5:74:88:26:9f:bb:4f:42:e2:0a:32:06:c9:
35:b2:7e:22:6e:39:49:a3:1a:4c:38:17:ab:f7:97:
4a:f7:59:ea:39:d6:59:ca:b4:5c:28:82:5a:9d:1a:
c2:a6:63:8d:ee:ff:a3:d4:a5:52:65:e3:de:8f:01:
2c:16:02:17:0f:92:b2:9a:be:f5:18:0c:86:f9:43:
b4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4E:C4:D2:98:36:4F:11:FF:68:F0:86:ED:47:6B:63:7C:64:02:98
X509v3 Authority Key Identifier:
keyid:D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:63:1f:6b:eb:48:ef:ba:63:34:ff:be:7e:06:39:05:c3:c6:
be:73:a0:cb:89:b9:54:c2:74:3c:6f:fa:d7:e5:b9:35:72:e5:
12:ee:a0:ec:50:5c:ca:52:74:30:9c:6c:e7:c2:83:d8:a7:d9:
92:5e:7a:ef:87:ea:2b:b8:28:f7:79:5d:0d:b5:9c:26:3a:e5:
f0:78:22:ec:85:5b:77:a1:d2:07:78:01:05:9d:63:7a:a7:96:
6e:cd:66:0a:94:97:c7:f4:a2:f3:55:46:c4:71:de:3b:0f:8f:
ea:45:f7:cd:a5:4c:15:1e:33:30:75:4b:d5:c6:19:ef:f0:ad:
01:97:05:aa:3f:21:01:fd:c9:25:4b:a1:a7:14:a1:29:9d:50:
3b:60:1b:b9:28:fe:cc:a4:51:85:54:fd:e7:66:5b:6e:dc:84:
d1:f9:6e:47:17:dd:af:42:38:89:79:ec:fc:de:f3:e0:7e:a2:
c6:e9:aa:86:a6:c0:44:8e:1c:15:f6:3e:bb:9c:45:98:6b:af:
6b:69:97:4a:95:12:9b:ca:26:50:95:8e:05:58:eb:fc:26:e5:
6b:f3:61:32:e3:d7:db:36:c8:22:00:05:3a:7a:dc:66:f4:da:
a2:4c:83:57:ae:31:44:24:50:28:23:1a:37:46:02:53:f4:37:
0a:e3:43:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:47 2025 by rpki-client