Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
File: 1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json)
Hash identifier: IXUCar47v7OcHLhobF1Bks2b0UXHTYYnpjZEqjfxvSE=
Subject key identifier: 93:40:B9:6D:DD:E3:8F:99:3B:19:A4:84:0C:A4:AB:15:98:D9:34:96
Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097
Certificate serial: 01995F7E43E6A57C5923B20FF389EF692FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
Manifest number: 031C
Signing time: Fri 19 Sep 2025 01:02:14 +0000
Manifest this update: Fri 19 Sep 2025 01:02:14 +0000
Manifest next update: Sat 20 Sep 2025 01:02:14 +0000
Files and hashes: 1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: gVRR46A2XPhlQldbdiLyjw0BpBzhVnd72YUwMECDkC8=)
2: EoE17t8PTfrUuXfL9C5ZkqxDhJ8.roa (hash: sAVxmU6pnEn88UNK22PTFUDf8gXcyDueVttcLFRxFqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5f:7e:43:e6:a5:7c:59:23:b2:0f:f3:89:ef:69:2f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097
Validity
Not Before: Sep 19 01:02:14 2025 GMT
Not After : Sep 20 01:02:14 2025 GMT
Subject: CN=9340b96ddde38f993b19a4840ca4ab1598d93496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bb:da:a3:c2:76:f9:33:53:4e:97:c2:e7:a3:
d9:2f:8d:ef:2c:68:20:a4:0f:f4:5a:d2:0e:a5:bd:
04:95:82:43:ea:47:8b:17:85:ec:c3:cb:71:0d:81:
28:00:42:37:9b:f6:ce:7d:b5:23:c1:49:ce:b1:f9:
48:34:d6:fe:2a:e6:39:e6:bb:d8:dc:ce:47:f9:41:
36:f0:89:c2:5d:bb:3a:8a:a2:8f:9e:fe:ef:f1:4e:
9a:82:64:11:8d:83:f1:5c:f3:02:8f:82:74:fb:19:
b6:08:19:88:42:a6:1f:63:92:d4:1f:7d:45:e8:3f:
75:74:f0:dc:73:8f:b6:c2:21:d6:a3:66:da:05:d0:
45:76:e6:ed:4b:fd:21:9c:84:5a:e9:3b:cc:18:a6:
42:01:7b:41:2a:39:e9:d9:08:38:d5:7b:34:13:83:
b0:30:41:33:5c:10:1b:54:01:38:b7:fa:fc:8e:a0:
17:d2:0a:d8:0d:d2:ec:64:c7:7e:b0:c6:7f:ad:6c:
c7:79:33:85:8d:95:49:90:14:9a:73:b0:74:3a:a1:
6b:12:21:b7:2d:37:ff:1a:a8:45:53:84:e0:14:33:
73:4c:49:a2:42:45:d1:aa:98:fc:bb:bb:4c:b2:25:
41:b4:5e:6c:cf:c8:4b:ad:31:99:5b:96:fe:39:8b:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:40:B9:6D:DD:E3:8F:99:3B:19:A4:84:0C:A4:AB:15:98:D9:34:96
X509v3 Authority Key Identifier:
keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f4:a7:d6:32:0a:9e:2e:94:60:31:33:72:16:00:14:9d:16:
fc:34:67:95:9e:71:8e:a6:58:86:9f:c4:84:00:2b:bb:02:fa:
8c:4d:f5:5d:ee:84:2a:cd:0c:bc:da:ae:98:e6:e1:82:f6:34:
33:06:57:cc:e5:ed:dc:d7:14:7b:da:ca:bd:44:37:ab:65:b5:
13:2a:0b:b1:76:8c:00:65:bd:61:0d:05:df:d0:f0:24:78:a3:
58:12:10:7c:a2:c0:1a:5d:f6:b7:bb:5c:c7:12:ce:2f:7d:c5:
3f:4f:32:fb:1f:e2:9b:5a:e9:db:7d:ee:be:cc:56:8c:c4:cf:
a9:66:1c:91:1a:f7:05:48:7d:54:72:93:e7:e3:67:18:47:03:
37:34:2e:a5:1d:e4:cb:a2:ec:5c:b1:ec:2c:fa:e9:f0:d9:c1:
d7:48:10:68:03:b7:2a:84:03:0e:22:da:01:74:66:8f:61:40:
6a:24:43:03:76:6b:51:55:4a:3c:69:ed:17:f8:44:3d:f9:10:
f6:06:a1:0a:93:5f:1c:b0:7d:93:4f:86:07:85:f9:c7:c5:1f:
54:ca:64:35:ce:e1:08:ae:63:94:e6:c4:0a:51:ea:37:ff:b7:
b1:75:b7:65:a0:b1:85:55:a7:6d:a5:19:97:f4:84:bb:39:d7:
8e:2c:d4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:31:10 2025 by rpki-client