
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
File: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft (raw, json)
Hash identifier: jVaTLHMRDMYHpdVVzUkBIK1FQ0dHYpXgZBy5+0TmXtg=
Subject key identifier: ED:46:3C:47:F4:29:D1:69:5A:0F:B5:B3:84:71:AE:AE:7F:B5:E9:B4
Authority key identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
Certificate issuer: /CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Certificate serial: 01991808B1FC23FBE9A54264A0C9F6C89CCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
Manifest number: 1668
Signing time: Fri 05 Sep 2025 04:00:46 +0000
Manifest this update: Fri 05 Sep 2025 04:00:46 +0000
Manifest next update: Sat 06 Sep 2025 04:00:46 +0000
Files and hashes: 1: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl (hash: 6camsC6uh2Hauu9s1TJVbz1WoLNqm8MW12CFX9x9wSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:08:b1:fc:23:fb:e9:a5:42:64:a0:c9:f6:c8:9c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Validity
Not Before: Sep 5 04:00:46 2025 GMT
Not After : Sep 6 04:00:46 2025 GMT
Subject: CN=ed463c47f429d1695a0fb5b38471aeae7fb5e9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:5f:48:f5:5e:51:13:ee:b1:d3:b6:9e:ec:
58:6e:4f:0b:23:c9:20:e1:b1:e1:f0:4e:41:49:d2:
0f:d8:e9:f5:0f:bd:90:47:d5:e4:49:f5:6f:28:2b:
d9:d7:b1:c8:32:ba:42:14:eb:b7:dc:c0:f2:76:c7:
04:d7:28:ad:b6:7f:4b:03:61:1b:61:b5:4a:6a:57:
e2:a1:11:94:6a:a0:52:cd:8a:71:dd:da:60:b3:33:
31:93:a5:88:fe:4b:1d:80:99:08:bc:45:97:61:0b:
c8:e4:1a:ca:3e:02:79:2c:be:2b:25:eb:87:1f:d1:
3a:a8:39:0a:cb:b5:f2:48:cc:f0:41:63:89:ca:f5:
ac:01:2b:23:7e:1d:a1:49:23:99:05:52:d2:9b:55:
de:55:fd:f8:7a:df:83:c8:22:37:ac:f3:db:d0:5e:
97:cf:83:db:d0:e2:2c:0c:8a:06:bb:f4:17:eb:cc:
42:75:da:3e:ab:5b:17:71:da:89:91:62:0b:db:3e:
44:e3:54:34:f3:ae:d0:18:d0:f2:93:18:b6:11:85:
c6:28:e3:1f:bc:dd:5b:dc:09:43:de:45:91:16:18:
a9:a9:96:5f:60:da:a7:67:01:53:3a:1c:d5:9a:c1:
48:ac:40:35:38:ad:5f:9b:91:ea:b5:d0:7b:1e:2a:
ce:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:46:3C:47:F4:29:D1:69:5A:0F:B5:B3:84:71:AE:AE:7F:B5:E9:B4
X509v3 Authority Key Identifier:
keyid:FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:35:6e:ac:7f:67:43:9c:c5:43:57:60:60:0b:3d:74:32:f1:
d2:8b:f2:4f:6f:9d:45:a8:dd:65:b9:01:63:06:b0:c5:a9:c9:
27:2e:a5:34:28:cd:e1:fe:ce:84:ad:f5:08:7e:ad:9c:cb:d4:
59:aa:3a:85:d4:15:99:d2:b6:fd:97:53:58:5c:ce:8d:1e:f4:
eb:43:5d:ab:b1:e9:5e:49:8f:3b:2e:7c:10:61:67:ea:42:48:
65:23:1a:d5:e2:24:86:17:30:f4:8d:bf:52:2a:88:9d:a7:be:
18:f8:29:31:c2:35:92:1c:8f:99:2c:bd:c9:32:fa:af:6b:0a:
09:05:a9:a7:49:c8:14:dc:81:2e:e7:41:41:c5:99:71:0f:76:
c2:9a:1d:48:88:47:fe:7b:b3:8e:4e:2c:e0:9b:21:3b:12:7a:
51:d3:55:1f:df:0b:61:55:01:78:ec:30:0b:79:91:72:72:0e:
41:3d:6f:c0:51:4c:23:93:04:cb:8e:1c:54:80:70:93:8c:db:
56:b4:5a:fd:a1:91:96:e7:ce:09:23:57:37:ae:d8:6c:ca:c5:
37:64:d8:91:20:62:9d:8b:42:45:0b:72:19:75:5d:f8:5a:12:
24:d6:05:c4:a0:1a:73:4a:be:38:4c:33:a4:a1:a0:30:00:06:
b8:3e:a6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:35 2025 by rpki-client