Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
File: 1-9JdpktGOvOLRE_zcxGxVm31_LI.mft (raw, json)
Hash identifier: DMzDqrfdXtAISs2JxYyVL8PZIWPgxFNY0QC/rW6YDfY=
Subject key identifier: 6E:CB:10:73:AE:B6:15:8E:6F:17:F9:A6:9D:DB:5A:17:08:FD:39:0D
Authority key identifier: FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
Certificate issuer: /CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Certificate serial: 019923D5D907090FB0D611B3510F1F82D153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 11:00:41 +0000
Manifest this update: Sun 07 Sep 2025 11:00:41 +0000
Manifest next update: Mon 08 Sep 2025 11:00:41 +0000
Files and hashes: 1: 1-9JdpktGOvOLRE_zcxGxVm31_LI.crl (hash: ElbuS/5I3ss5ze0MDVqC1TyZeqJirVxhwsovMmAFRmo=)
2: 3GvpHIxxSBOh_JH9oQawEJfN78g.roa (hash: m/cK1kN4KKcnsjbPKB2PXLCdGbbG3lcfoo431XMf3kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:d9:07:09:0f:b0:d6:11:b3:51:0f:1f:82:d1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Validity
Not Before: Sep 7 11:00:41 2025 GMT
Not After : Sep 8 11:00:41 2025 GMT
Subject: CN=6ecb1073aeb6158e6f17f9a69ddb5a1708fd390d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:e3:4d:4c:2d:1d:fc:92:5d:3a:d6:d8:1a:
a3:f2:c8:ac:db:1a:1a:16:13:43:0d:d2:d2:e0:7f:
df:17:fd:b4:09:75:c9:3b:cb:1e:17:53:f0:92:27:
c3:81:da:58:af:a4:29:fb:72:61:2a:04:e7:17:a9:
c4:07:af:f8:27:9f:ce:fc:df:a4:20:c5:02:01:ff:
f9:d5:e3:05:54:37:d7:e9:8a:c7:41:a1:d2:24:7a:
0f:9c:72:8f:27:48:49:e0:b0:c2:b4:f7:aa:bf:87:
01:08:a2:1d:fc:1e:7e:1c:7b:be:4f:f3:70:dc:42:
85:4d:46:23:dd:48:c1:56:9f:a6:cb:cb:4c:a3:3a:
e5:57:74:3d:ce:63:47:f3:81:0c:75:39:ab:97:2c:
14:0c:15:f6:25:bc:f1:d0:72:e1:da:8d:73:7a:e8:
09:c9:4a:78:cf:1b:90:68:91:e5:60:8d:5a:e0:a6:
76:7a:ae:cd:c9:8c:1a:10:7a:fa:72:8b:65:29:c4:
9a:43:9d:b8:ee:ed:3c:6f:f3:6d:ca:cb:6c:13:ff:
d2:b1:32:d2:71:26:50:d4:40:b8:6a:5e:80:44:f6:
3d:ac:dd:6d:14:08:a8:c5:ee:da:4b:03:91:d3:e0:
11:67:9b:f0:7d:1a:23:5d:2e:10:c2:9b:c0:33:36:
1f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CB:10:73:AE:B6:15:8E:6F:17:F9:A6:9D:DB:5A:17:08:FD:39:0D
X509v3 Authority Key Identifier:
keyid:FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:81:61:49:0d:cb:d7:aa:d3:e8:4d:44:dc:8f:67:02:4f:e6:
03:8e:74:67:2c:2d:ac:a7:0d:5d:1d:bd:c6:d5:e4:39:70:31:
c3:65:5d:75:85:f8:1a:9b:93:dd:3f:53:3d:08:49:b1:03:5d:
c9:ee:7e:5e:1d:00:2f:c3:87:0b:9f:68:35:46:67:90:9c:77:
a6:4f:af:15:41:e8:fe:ec:2d:37:d1:1d:24:71:d9:a2:47:21:
24:6d:f9:32:0e:84:87:f9:87:ee:f7:e2:20:06:44:f7:d2:a9:
31:19:0d:b0:f9:ea:0a:c3:34:65:74:93:03:c0:82:90:72:61:
06:d8:d2:08:b9:46:5e:23:6e:81:9b:bd:ba:50:f1:d7:88:50:
77:e2:c4:f2:1a:4d:1c:c0:53:5e:9c:d9:12:80:b4:78:0b:1f:
cf:14:fd:fd:25:23:80:44:ef:66:bb:7f:b5:ca:c2:00:43:59:
b8:d1:c9:96:db:e6:08:84:b6:5f:9b:7a:a3:48:6c:76:07:6b:
c4:29:a2:14:65:94:7c:a3:bb:a1:c4:c7:ab:08:de:08:89:3c:
47:9b:c1:38:7d:eb:eb:7e:03:f3:5a:7a:f9:1b:bc:be:2f:af:
d9:ff:f0:91:59:1a:ed:f9:12:1e:aa:36:f1:6b:e3:0a:50:3d:
fb:da:50:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:47 2025 by rpki-client