Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
File: 1GlI-8kl-XWftp-e-xLuPxzUFhU.mft (raw, json)
Hash identifier: mzPmOOB/EbPJrCFcmUSO1+vgoFVR++4JkOXkZILSdM0=
Subject key identifier: 6F:A6:A5:BA:10:CA:D3:F5:D3:9E:C6:90:2D:72:A5:41:D4:75:E4:B1
Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
Certificate issuer: /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Certificate serial: 019921B2210620421D729788547E74FAB423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
Manifest number: 0607
Signing time: Sun 07 Sep 2025 01:02:25 +0000
Manifest this update: Sun 07 Sep 2025 01:02:25 +0000
Manifest next update: Mon 08 Sep 2025 01:02:25 +0000
Files and hashes: 1: 1GlI-8kl-XWftp-e-xLuPxzUFhU.crl (hash: zsKyjUKDnPULM4xzbKgAvRumcGr+gMWWDhJMbfogYd8=)
2: EZ9xcPpmaaiDdmg5D8Xp47gSAJw.roa (hash: /ZPFrrUhiRzvgJS9F6X6CPNQ9l9Fj7isIDOoSoDinwA=)
3: xTN3jN3JRtB4P5xBVjLw9cDkoVg.roa (hash: UKVupoJGtNRB7xSecoUEhumnrVWffmz284NYSDysuEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:21:06:20:42:1d:72:97:88:54:7e:74:fa:b4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Validity
Not Before: Sep 7 01:02:25 2025 GMT
Not After : Sep 8 01:02:25 2025 GMT
Subject: CN=6fa6a5ba10cad3f5d39ec6902d72a541d475e4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6b:db:a7:ce:46:41:5e:e6:11:cd:ab:8c:1f:
6d:e0:24:3c:85:55:16:2b:49:d4:e6:b5:38:d7:05:
6b:32:5b:ec:19:87:5f:18:7b:44:ba:68:67:48:e1:
7a:eb:d1:65:ed:fa:3e:de:79:71:6b:90:84:d6:50:
25:52:5a:3f:68:0d:be:31:d7:30:89:54:ec:af:23:
5f:bb:91:d3:bd:a5:54:93:03:a8:5c:6a:7c:43:f7:
f2:ec:54:00:5e:7c:06:3c:3b:80:74:e8:21:5c:ab:
6b:28:87:0c:3c:7d:45:11:30:14:dd:9a:f2:71:45:
29:86:fc:51:47:18:d0:6a:6b:ea:c9:a2:ab:27:cb:
af:40:3a:fb:fa:ce:94:d5:4c:83:56:19:86:98:34:
aa:8b:1d:8f:86:32:78:5a:ce:0d:ef:51:6b:65:e4:
00:68:01:b2:77:a8:56:2e:34:99:09:17:54:1a:d8:
ad:c2:98:9b:4a:cc:e4:a0:90:3d:63:a5:64:2c:c1:
fe:28:e7:4b:8d:74:44:e8:36:b4:81:8e:cf:6a:93:
d9:36:80:3a:9e:0e:d0:a0:0d:87:19:4f:c7:27:1f:
fa:cb:ad:83:d4:19:eb:67:fb:01:8e:74:c6:0d:26:
18:a3:22:03:99:8b:d3:38:e5:0c:e5:4a:0c:7e:7e:
5a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A6:A5:BA:10:CA:D3:F5:D3:9E:C6:90:2D:72:A5:41:D4:75:E4:B1
X509v3 Authority Key Identifier:
keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f2:6b:8e:35:d1:2d:33:aa:cd:ce:77:d1:25:e1:bf:49:f5:
70:40:3b:94:a3:2e:ca:4e:ec:60:b0:78:6c:73:36:53:53:e7:
7a:47:b0:81:83:7c:d6:46:2f:59:b5:05:4b:48:9e:07:1a:6c:
70:fe:3d:03:10:7e:de:11:7b:62:60:60:0e:63:0f:54:83:d8:
91:46:56:5e:da:40:10:3d:09:0f:20:d4:65:a4:fe:96:e1:e2:
2e:23:31:20:26:bb:3c:51:1b:ad:1a:2c:fb:ad:05:8a:2c:bc:
00:1b:3d:15:97:4b:97:83:bc:b1:89:87:2b:7f:b2:4d:fd:40:
18:e1:d4:ad:3c:92:33:b5:71:a0:c2:0d:07:7e:40:87:09:9e:
3c:27:08:44:11:07:15:9c:66:1d:46:53:bb:b4:cf:a9:ea:fb:
0d:25:e5:42:46:6c:b9:38:e6:a4:4d:f7:7c:3d:ac:a3:89:ff:
ae:21:52:ae:39:e9:45:71:03:16:b5:f5:f8:a3:e3:d8:03:78:
d7:03:4b:7d:3d:e9:88:f3:94:88:4b:cb:c1:54:65:f9:ca:9d:
0d:d6:42:21:96:c7:b5:60:81:65:d0:81:e8:f9:6f:4c:a0:40:
5a:40:86:f2:59:82:3d:66:44:af:f9:8b:0a:d0:90:06:6b:ca:
cf:0a:93:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:19 2025 by rpki-client