Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
File: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft (raw, json)
Hash identifier: WCOfYeEqto00KVAhsXG6nksXuWhdXakfCR4/+xIvWgs=
Subject key identifier: A3:D8:51:F8:0A:74:A8:19:04:9B:C4:85:2D:A0:41:15:0F:92:F7:6C
Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
Certificate issuer: /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Certificate serial: 019923312C00E27B7BB890FCEA037742D9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 08:00:49 +0000
Manifest this update: Sun 07 Sep 2025 08:00:49 +0000
Manifest next update: Mon 08 Sep 2025 08:00:49 +0000
Files and hashes: 1: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl (hash: 4IH0NEUxnaL7Htkc1lvBMsdPzpY+rBIG6lK+ex94yLc=)
2: H-kQEaFf2MPiwlkPCOgWrFwC_9I.roa (hash: WMlarJWRcXR27oWlU2I21RPYRd4PDPHteVf5HE7I34E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:2c:00:e2:7b:7b:b8:90:fc:ea:03:77:42:d9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Validity
Not Before: Sep 7 08:00:49 2025 GMT
Not After : Sep 8 08:00:49 2025 GMT
Subject: CN=a3d851f80a74a819049bc4852da041150f92f76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cf:12:94:fb:4b:53:97:76:08:89:c6:2c:8f:
f3:3f:09:eb:7a:d9:de:9a:f3:d5:6a:53:39:03:cb:
70:33:93:ac:3c:a3:21:ef:c0:4e:a9:aa:46:1b:e0:
2e:cf:49:ef:51:92:8a:51:7d:8b:8c:9c:c6:d0:2f:
68:18:96:e0:58:a7:d6:6e:43:3c:96:dc:16:73:07:
c1:0b:80:de:a4:ce:08:06:71:1d:31:fc:50:54:23:
f4:6f:ee:8f:2e:30:9e:4c:25:24:d2:27:c8:6f:6f:
57:02:9a:7a:49:a0:39:37:ad:e3:a9:1d:7e:99:5b:
76:9d:89:3e:38:77:ac:b1:da:be:c4:fd:c1:1b:a7:
07:13:e0:84:c9:0c:ed:f0:4e:d2:a0:50:da:6b:55:
26:94:87:18:bc:b5:c7:c3:e8:07:68:51:56:b7:75:
60:c8:36:b3:fa:f0:44:ff:6c:92:1d:c5:ed:2a:64:
d2:dd:98:50:f7:f1:99:39:3d:83:c5:60:a0:04:42:
12:56:88:91:16:d2:be:8b:81:21:4d:0d:5b:1b:cd:
57:9e:b1:00:02:36:3f:3d:96:ca:89:f4:59:d7:1d:
f5:fa:8d:0b:94:42:a7:2c:fd:9e:db:b3:fe:a5:27:
28:22:ed:83:f8:dd:27:c8:c0:e1:4a:a6:2f:59:46:
3a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D8:51:F8:0A:74:A8:19:04:9B:C4:85:2D:A0:41:15:0F:92:F7:6C
X509v3 Authority Key Identifier:
keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:70:6d:ad:9f:78:88:1c:d0:0e:f1:57:85:3a:b1:04:41:ee:
aa:56:1b:02:c9:17:f9:f6:a3:ec:a7:b2:0c:f7:fa:27:93:de:
8e:8c:15:f3:d3:f2:06:7e:f3:46:60:de:96:ae:af:ec:48:27:
10:c0:d4:3c:13:17:26:9e:21:b9:ed:6a:da:bc:55:1b:e6:56:
7e:7f:d4:4d:1b:5b:7b:63:49:a2:3e:cb:49:54:33:95:f2:e4:
b4:3c:b2:9c:3e:f5:95:8e:3e:f9:a4:60:82:97:56:fa:9a:96:
b7:23:b9:aa:41:b9:b3:af:42:0e:08:85:dc:ec:ae:6a:3f:61:
33:e9:14:1e:6f:63:0c:af:83:7d:e4:f7:24:b0:03:40:59:b5:
dc:44:75:bf:fa:03:72:40:4f:6a:3f:06:a8:54:6a:aa:9a:1a:
f9:a1:63:54:03:00:96:b0:2b:52:15:c3:e8:b6:6e:91:3f:99:
86:8f:a5:1a:55:8d:84:a2:ca:4f:aa:73:4e:a8:b9:38:6e:1c:
de:52:27:28:fd:db:e2:88:90:b2:52:d7:20:41:7d:02:45:02:
33:46:04:02:d9:51:06:7d:c2:a8:bf:e0:1d:51:d5:a6:2f:57:
1b:9b:49:ec:96:b5:c7:75:5f:d8:7c:0f:36:c5:00:48:ab:13:
16:72:46:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:07 2025 by rpki-client