Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
File: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft (raw, json)
Hash identifier: 9nwyIVWUcW856DThL8bCQXspvjL6Vic+TbM4gSB0RV4=
Subject key identifier: 32:61:30:96:8B:15:F9:A1:8D:5E:A5:71:D1:9F:22:2F:3B:B1:A3:12
Authority key identifier: FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
Certificate issuer: /CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Certificate serial: 01992F6C25DB7B72C3D781890E3296393262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
Manifest number: 167D
Signing time: Tue 09 Sep 2025 17:00:40 +0000
Manifest this update: Tue 09 Sep 2025 17:00:40 +0000
Manifest next update: Wed 10 Sep 2025 17:00:40 +0000
Files and hashes: 1: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl (hash: BopxU5s/1Brdwm4iIzOg+S3FDT22R8pgesb12Xx2+Xs=)
2: b1EekpPHczR9SbF16iWNQ3damig.roa (hash: Fw8tFU/rOTZrNv9R1o3/Px5yWIdWmaPwzJuJsuMKmH0=)
3: eADzDJE6P-qH0r5TYUNn_ncYKzA.roa (hash: PxBgbfMtKG6Jth9+kbRfrbslcA+mMm5JhYaaugK0nGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:6c:25:db:7b:72:c3:d7:81:89:0e:32:96:39:32:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Validity
Not Before: Sep 9 17:00:40 2025 GMT
Not After : Sep 10 17:00:40 2025 GMT
Subject: CN=326130968b15f9a18d5ea571d19f222f3bb1a312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:e6:46:77:4a:55:34:a1:9e:b8:84:ae:73:
7c:7f:df:31:55:4e:16:b9:89:a9:d9:b5:82:d3:ee:
3e:2c:ee:ec:34:6d:59:6c:50:e6:29:83:31:74:92:
17:32:3c:0f:7d:90:d4:d6:56:16:6f:f7:02:a6:b9:
07:2a:ae:1e:66:d7:0f:f0:ba:9a:77:36:0b:83:d3:
0d:52:8f:0f:35:28:bf:a5:80:2a:d2:9c:fe:45:00:
1b:6b:66:b7:9f:56:40:4b:af:a5:b8:50:66:5c:c3:
85:95:d5:6e:96:bc:aa:7b:04:f4:fe:c9:35:fc:08:
50:26:b6:9b:15:df:39:f4:6c:81:8c:1d:bf:12:47:
3e:4d:1e:88:a5:7c:06:44:b5:a9:d3:51:1d:81:db:
3d:9b:38:9e:33:b4:cb:e7:c7:f3:ce:6a:00:52:5c:
57:72:e5:ca:f1:26:0b:e8:e2:0c:05:2d:83:08:68:
99:e5:49:bb:76:e8:8c:c4:bf:ec:6b:14:90:e4:74:
53:fb:57:ba:be:44:ee:fb:a8:d2:1d:9e:f7:bc:17:
83:06:28:eb:fc:51:1e:99:c7:ce:61:3c:0d:ca:c3:
e1:19:c9:a9:8a:ab:19:5e:73:14:8f:72:0d:ae:d3:
43:14:b4:b0:31:0c:d2:90:ae:74:41:a0:0c:a1:f7:
fe:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:61:30:96:8B:15:F9:A1:8D:5E:A5:71:D1:9F:22:2F:3B:B1:A3:12
X509v3 Authority Key Identifier:
keyid:FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ee:f2:14:44:4c:29:e2:d7:ac:99:f2:45:35:5f:ae:9c:df:
82:75:3e:26:69:62:9b:4a:56:de:3e:92:57:73:76:a5:36:62:
f4:87:7d:52:41:e1:c7:f3:65:25:32:a2:2b:aa:0e:46:a3:04:
8f:19:77:41:83:61:30:44:82:eb:ea:41:03:4e:d0:e9:4a:31:
f8:81:b3:c4:06:61:7f:ae:3d:d4:80:e3:dc:2b:e7:d3:db:4c:
9b:14:79:9a:82:0a:d0:2d:9d:a8:53:92:26:15:7b:f7:64:db:
e3:ed:19:5c:54:ef:b7:bc:02:48:74:af:70:d8:49:b7:9e:e0:
48:a0:26:89:1c:23:52:aa:21:40:ec:c9:d6:e2:4c:4f:13:e9:
29:61:61:73:9a:47:78:95:64:e6:1e:90:cf:00:04:6c:32:6b:
82:b7:2a:7c:1f:e3:18:cc:6e:0e:7c:88:75:da:aa:93:c0:dc:
8b:3e:67:42:7e:09:cf:40:b0:b1:07:d0:2b:9e:62:d7:38:27:
b8:e5:8a:6e:e1:6b:e2:e3:09:9f:7a:7a:fe:19:2e:21:f5:50:
d3:70:cf:b9:2d:1c:a7:e3:46:d5:0e:26:6c:5a:b8:66:f9:48:
14:11:8f:63:f3:54:7d:ba:33:15:fb:17:f7:3e:ed:a9:39:b5:
8b:f1:d7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:29:43 2025 by rpki-client