Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
File: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft (raw, json)
Hash identifier: YnbxMryfTDlTqHQGq5/0INFz5VXG7B2fHhhnMViFYuQ=
Subject key identifier: F5:5B:B3:8A:C0:71:C8:E8:BC:E7:5E:8F:B4:FC:A7:C0:06:54:B0:6D
Authority key identifier: D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
Certificate issuer: /CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Certificate serial: 01993981B2589667329394EAFE34DE2028E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
Manifest number: 0D0D
Signing time: Thu 11 Sep 2025 16:00:25 +0000
Manifest this update: Thu 11 Sep 2025 16:00:25 +0000
Manifest next update: Fri 12 Sep 2025 16:00:25 +0000
Files and hashes: 1: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl (hash: vzL2mdZJCkNVky46t76Ima/1avACSUTtilkcjTaEw60=)
2: 3ZY4SnX1yy3L1vAgX9voAeMkVFA.roa (hash: tg2AmRn5Z2Y+ThyLPd/HKMkLP9Uc9wkQQiNjIF3J+mw=)
3: ugCHO46pUQzd5zqdNawWJEPystY.roa (hash: BahKiNdd/pZ/56ATzb3cvkxPGvUYcM+QZnAs5IV/tZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:81:b2:58:96:67:32:93:94:ea:fe:34:de:20:28:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Validity
Not Before: Sep 11 16:00:25 2025 GMT
Not After : Sep 12 16:00:25 2025 GMT
Subject: CN=f55bb38ac071c8e8bce75e8fb4fca7c00654b06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:bd:6e:a1:d1:48:aa:80:9e:c9:ac:cc:9a:
0a:20:9f:92:8f:10:a6:34:49:30:d8:52:3a:5c:3e:
a3:ae:41:b9:1a:74:a4:20:46:ba:00:40:6d:ba:08:
e8:c5:f1:97:63:68:00:f5:9a:d5:bf:84:b8:fc:e1:
61:6c:8f:f4:df:0d:08:55:bc:c8:cf:ae:be:ed:c4:
93:03:56:90:40:66:e9:e4:83:54:55:37:25:e2:25:
b0:99:38:a8:63:39:62:3d:26:43:69:f6:47:73:e2:
88:cf:b9:ad:b5:de:8d:72:ae:d3:38:27:77:9e:0b:
7f:59:52:7e:37:15:e5:2e:7e:d6:ed:92:2e:b7:18:
d1:a0:83:9c:4d:c8:0a:30:38:ea:f5:46:4a:f2:87:
4d:54:4e:3e:5c:04:25:4a:6b:e3:be:37:a2:99:59:
24:eb:da:74:96:68:79:05:63:b6:bd:f2:b5:6b:49:
fb:de:b7:3f:d6:ee:97:62:34:30:a7:21:77:72:bf:
9d:dd:44:7e:1b:46:c8:2c:18:11:ad:5f:fe:a4:73:
2d:67:14:74:da:e0:be:f4:36:b1:a4:bd:7a:84:59:
0a:b4:d7:76:f5:2c:70:73:5c:45:f0:f8:c4:da:e6:
67:98:1f:a4:af:7d:50:f3:61:29:8f:26:ad:d7:b5:
57:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5B:B3:8A:C0:71:C8:E8:BC:E7:5E:8F:B4:FC:A7:C0:06:54:B0:6D
X509v3 Authority Key Identifier:
keyid:D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:76:da:bb:6d:b8:27:06:68:15:51:e2:15:0d:31:4e:50:13:
0f:04:86:7a:7b:a5:de:78:56:3d:02:cd:68:aa:de:12:84:48:
2f:00:23:99:4e:82:d3:c3:93:42:3a:d6:38:1e:09:4f:76:43:
d9:56:3a:41:93:12:a6:77:ea:81:07:a5:9a:f3:29:8e:c2:27:
04:f9:db:4d:40:b7:a2:59:b7:d8:cc:6b:42:92:29:67:dd:fc:
4b:a5:4b:0d:1f:b5:7f:54:b1:10:2a:75:23:a6:71:e7:fe:3b:
5a:58:86:36:5d:0a:f9:1b:bb:22:86:4e:58:f5:6e:6b:66:ec:
d9:3f:b3:42:d7:59:16:7d:39:89:4f:a1:d0:2f:19:c5:f9:60:
be:4e:13:3e:c3:1e:1f:73:7b:4a:18:8c:1c:46:a2:3e:10:fe:
52:99:9e:42:ba:75:c4:70:fc:1b:c1:38:c9:0a:c1:82:ba:90:
eb:7b:44:b4:65:a6:df:22:00:2a:34:22:6c:b6:24:33:b4:1f:
bb:e8:45:e3:5b:41:7b:bf:2b:20:ad:01:98:7e:59:4d:41:c5:
07:f0:6a:8f:1c:8e:01:73:37:d0:fe:c4:97:16:3c:ef:b7:3c:
1e:8f:99:46:3a:be:37:3f:ff:c8:ea:14:66:b8:50:51:f5:8e:
42:5d:4a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 19:02:00 2025 by rpki-client