Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
File: 1-38ZGo278fExR0l1NY8kRNaVDoI.mft (raw, json)
Hash identifier: wc1HPFlkBlS480Il/uoIgZstgb83WSWV3aPBAs4Qklo=
Subject key identifier: C6:D6:9C:83:7B:79:F6:A5:57:2B:CC:82:3B:0F:42:77:1F:A4:E6:0A
Authority key identifier: FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
Certificate issuer: /CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Certificate serial: 01992EFE17C75771212326092B429C09E331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
Manifest number: 04
Signing time: Tue 09 Sep 2025 15:00:27 +0000
Manifest this update: Tue 09 Sep 2025 15:00:27 +0000
Manifest next update: Wed 10 Sep 2025 15:00:27 +0000
Files and hashes: 1: 1-38ZGo278fExR0l1NY8kRNaVDoI.crl (hash: wFX2RdtOS6xHw6ZsDTtDxl7TRMyxKy2Td2w44q12Ryw=)
2: _uXBkuhUshA9qmVceLo2r4NfxjI.roa (hash: eLDt5MUCNFk11wBf0J4j69ReU2zTScT7dm7QbxFh55c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:fe:17:c7:57:71:21:23:26:09:2b:42:9c:09:e3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Validity
Not Before: Sep 9 15:00:27 2025 GMT
Not After : Sep 10 15:00:27 2025 GMT
Subject: CN=c6d69c837b79f6a5572bcc823b0f42771fa4e60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:2b:e6:f4:f5:5e:b7:ff:cb:01:a7:e4:1b:
ff:af:fc:85:45:a6:15:a9:c2:21:82:1b:51:bd:e6:
65:52:b3:20:d9:4e:e2:1f:9b:0f:e6:12:94:ed:30:
82:1e:2a:69:44:97:c7:20:f8:7a:be:fb:57:66:9a:
bd:94:a4:ad:70:f5:79:5b:df:3f:80:a5:ec:f0:bf:
a2:de:5d:fa:85:60:cc:b1:1c:e4:f5:23:24:9c:2d:
6e:82:ae:ed:5d:85:b7:de:13:ad:ab:63:4e:ec:d0:
aa:bd:61:d2:2a:8c:d5:c4:a1:cf:e7:77:23:84:c8:
94:47:32:83:5a:fe:dd:84:f7:7c:54:fa:fb:80:7f:
fa:24:c5:09:24:25:d0:21:6a:2a:4c:7e:ab:68:cc:
ae:aa:79:95:49:9f:ba:0a:71:da:46:92:dd:49:c9:
c4:8a:b7:01:5f:78:12:2e:22:2f:c7:81:8f:ab:52:
c7:a2:c2:69:b7:df:3a:14:6d:3f:04:78:c3:d8:48:
c3:19:4d:df:f4:60:0d:bf:a5:43:72:39:35:9b:98:
66:94:fe:d3:c1:0f:56:f5:7a:ee:5d:bb:04:71:a5:
f1:e0:3b:69:f4:05:3b:94:13:af:91:c4:6a:44:3a:
16:23:ac:57:ae:21:49:df:fb:29:9f:96:6b:19:04:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D6:9C:83:7B:79:F6:A5:57:2B:CC:82:3B:0F:42:77:1F:A4:E6:0A
X509v3 Authority Key Identifier:
keyid:FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c2:71:eb:0c:d7:61:4d:c3:59:31:ee:be:7a:cd:77:e6:c7:
97:45:fa:1d:99:c3:11:6b:8e:9b:a3:a0:5a:08:26:59:87:11:
f2:f9:5b:b0:f1:2a:a5:17:2a:89:a0:fc:4f:4d:31:9b:9a:e1:
5f:e0:54:2e:1d:af:4a:98:41:e9:a0:38:f9:d5:a9:d6:47:87:
3d:af:27:8c:55:76:70:a7:d8:e2:84:7e:81:0d:41:b2:0b:73:
d6:f6:52:df:7d:08:29:11:12:ff:ad:22:d7:df:40:66:04:82:
c5:97:f7:33:fa:c4:5a:92:b3:82:a4:53:17:54:ad:6b:76:24:
b9:79:9f:d1:d5:93:21:6d:bf:b9:53:fe:b7:a2:69:3e:b6:36:
7c:39:40:5e:34:37:46:b3:0a:ce:66:e8:07:fd:11:15:8e:c0:
81:7f:fa:00:58:5e:b1:55:0a:10:8a:0a:cd:40:bc:37:c7:0e:
38:6c:d6:0e:6b:83:9f:ab:e5:d4:3e:9a:dc:44:70:e8:b4:fe:
de:6e:32:72:b1:62:a5:bf:06:da:bd:32:f9:55:56:69:2b:ac:
73:17:51:a4:37:05:59:d2:bd:c7:c3:10:35:9f:a3:4f:08:69:
df:cb:a5:42:c4:dd:1b:e6:49:8d:f1:bc:3e:a7:b1:49:73:30:
81:55:b3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:50:02 2025 by rpki-client