Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
File: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft (raw, json)
Hash identifier: ruHVpgXO3TWQkJj/ybetK7T5raCmERKXP2wNw4N+0Mg=
Subject key identifier: F1:10:75:DE:CC:7F:00:CF:C8:DC:B4:CB:C6:7C:70:E0:1C:CE:B8:C4
Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
Certificate issuer: /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Certificate serial: 0199345B509611AC660B313A733BFBA9FBF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
Manifest number: 164B
Signing time: Wed 10 Sep 2025 16:00:23 +0000
Manifest this update: Wed 10 Sep 2025 16:00:23 +0000
Manifest next update: Thu 11 Sep 2025 16:00:23 +0000
Files and hashes: 1: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl (hash: LcBdPADDH4U9l5rHUxgQUxrf0/N4JrBsVYTwyuesrbA=)
2: U9Nd4lA1nfYgFbzG2ZpmfKjrQ9c.roa (hash: lVZokALnBnr4+UddkLMCY202V6rmOp2F9LXdZYcTxX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:50:96:11:ac:66:0b:31:3a:73:3b:fb:a9:fb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Validity
Not Before: Sep 10 16:00:23 2025 GMT
Not After : Sep 11 16:00:23 2025 GMT
Subject: CN=f11075decc7f00cfc8dcb4cbc67c70e01cceb8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5d:b9:0d:b3:7c:50:65:34:12:00:fc:ed:33:
bb:ef:dc:7b:26:d5:ca:6a:1f:c5:b9:45:59:d1:cd:
02:54:60:a4:de:18:fd:4f:78:6a:d3:33:43:97:49:
0e:fb:54:76:4d:2d:ff:f9:fe:79:78:ac:21:61:95:
91:01:9a:e3:76:f3:2c:f3:d4:b0:22:06:72:ab:51:
23:eb:c9:4c:8f:ee:ad:a1:c7:cf:44:da:4a:71:ae:
e5:9c:03:11:ab:78:a4:3d:d5:55:04:b8:30:dc:07:
c2:28:d5:ed:c5:49:aa:d7:d4:98:a4:1a:d5:af:a1:
e6:89:66:39:a0:da:e5:41:73:71:b8:75:b3:64:e2:
34:91:a8:9f:e0:a8:3c:9f:cc:e5:aa:7e:de:2f:8d:
0e:8b:08:a0:c9:5b:03:38:3d:a8:01:18:be:62:99:
51:02:c3:ff:a0:a3:ee:4a:d6:21:af:9b:2f:a1:44:
e8:63:ef:2d:e8:18:6b:d3:f6:5d:10:71:f8:1a:06:
de:90:4c:55:1a:a6:7f:c0:30:a8:09:2d:bb:cb:88:
c9:34:c6:e7:d6:8e:eb:c0:97:5e:7a:86:da:69:0f:
28:36:f8:9d:04:bc:60:18:fe:44:2d:a8:a0:dd:fe:
60:5f:d6:59:c4:9c:6a:57:f0:fd:93:53:a0:e6:c5:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:10:75:DE:CC:7F:00:CF:C8:DC:B4:CB:C6:7C:70:E0:1C:CE:B8:C4
X509v3 Authority Key Identifier:
keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8e:35:19:01:7b:cb:90:73:d8:d1:9a:77:bd:9b:89:89:ce:
0d:44:36:54:b5:46:3c:f3:6d:22:39:d9:90:c9:34:fc:07:ca:
7d:85:7e:ae:2d:46:4b:0e:ee:30:18:08:1c:6c:72:e0:ee:71:
db:17:a0:02:6f:c9:c6:37:60:bd:e9:f6:72:9d:3e:a0:78:37:
0c:0e:ad:e0:c5:de:b1:b2:b0:06:23:0c:2e:fc:67:fd:76:11:
87:52:09:56:cd:6b:34:93:0c:ed:b5:11:46:f0:8b:ab:e9:b3:
d3:8e:c0:dd:11:02:50:3b:40:cd:7f:ef:b0:ec:33:c3:8a:58:
64:c3:0c:3a:4d:9e:fb:27:a8:db:11:33:b9:7a:72:38:f2:cb:
d4:99:1f:8b:ee:69:b0:af:b2:68:e6:f5:04:8a:63:ee:77:c9:
ea:a7:1e:9a:58:35:92:9d:be:47:c7:48:f0:8e:9a:20:24:5e:
3a:c8:33:0c:2c:24:11:cf:7b:3a:28:d9:ca:8e:b2:5d:d1:f7:
0e:93:13:c3:90:bd:3d:c7:5f:83:98:2f:8c:5f:ee:21:8a:27:
7d:fb:ec:5b:04:dc:f9:91:3f:59:3e:b3:d9:20:6b:ef:ba:e8:
24:73:19:ef:75:86:1e:f6:e2:18:f0:11:fc:5d:2c:32:5e:0d:
3c:49:4b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:19:11 2025 by rpki-client