Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
File: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft (raw, json)
Hash identifier: uvHro203fhHhjCVnDOQTq3FeEYPbuVXkel9d5NiIYWg=
Subject key identifier: C1:1F:8F:A0:79:32:57:54:8D:B5:5D:59:EA:DC:1D:69:66:C1:AB:AF
Authority key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
Certificate issuer: /CN=fa3c481607619c835d09f2471d976d7cf74a0439
Certificate serial: 019922C337AFA76B2937AAB3B25CD6654F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
Manifest number: 09A1
Signing time: Sun 07 Sep 2025 06:00:43 +0000
Manifest this update: Sun 07 Sep 2025 06:00:43 +0000
Manifest next update: Mon 08 Sep 2025 06:00:43 +0000
Files and hashes: 1: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl (hash: 0tT/g/+KyimsAguo6i4YCebsu2sLoPXxu+mo8NH/L5U=)
2: Sm1L2uD9xe6VKth3NCE80Tv0dS4.roa (hash: 4pEKUYq0mI20y4yprrQN9bkk++T0cMvg0WwPL7Akx3E=)
3: wE4iXQHrpihOXjgvME7qpP1G1M8.roa (hash: 5SJHRAX4MIESmj0+ywOG6OpEbcFrbWg8slbXKt2TqRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:37:af:a7:6b:29:37:aa:b3:b2:5c:d6:65:4f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3c481607619c835d09f2471d976d7cf74a0439
Validity
Not Before: Sep 7 06:00:43 2025 GMT
Not After : Sep 8 06:00:43 2025 GMT
Subject: CN=c11f8fa0793257548db55d59eadc1d6966c1abaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a7:1a:35:e4:27:50:4a:51:28:70:8d:af:f9:
bd:b0:ea:bd:e7:7b:6e:a2:23:da:5d:f7:c0:b0:6d:
80:ad:9b:39:cc:d1:9b:a7:c6:e9:e7:91:a4:60:63:
29:98:80:d1:f6:b0:51:6e:d5:99:d6:9b:8c:9c:a6:
52:39:47:a6:16:b4:dd:cb:6e:08:75:fa:e6:ad:58:
ac:29:14:7a:da:e7:d3:33:95:97:c3:24:04:8c:50:
99:f5:34:2f:d8:e0:1c:44:5e:a9:56:38:56:37:98:
b7:bd:b8:dd:ff:7c:df:2f:a9:12:68:79:86:e3:38:
a5:bb:53:89:75:b6:6d:eb:90:bc:2a:93:01:d3:95:
eb:bd:af:67:c6:d8:09:ad:8b:43:d6:8a:26:ab:9d:
41:c8:28:1f:16:9d:6b:97:cd:46:74:bd:40:28:98:
27:2e:bd:d3:5d:8e:b1:3b:05:18:cc:58:e6:b1:d7:
21:2f:93:af:d1:dd:48:8a:6c:5a:94:d9:b6:bd:c1:
ad:b9:14:57:22:ee:4c:a1:c5:f7:41:14:bb:7d:56:
cf:70:67:ee:34:8c:c1:7e:ab:65:a6:55:36:38:e1:
99:ec:3c:11:ed:ee:d4:90:02:e2:fd:4e:26:97:7e:
79:3d:70:63:64:05:69:f6:31:1c:ae:11:e0:54:6d:
63:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1F:8F:A0:79:32:57:54:8D:B5:5D:59:EA:DC:1D:69:66:C1:AB:AF
X509v3 Authority Key Identifier:
keyid:FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b2:68:c7:8d:46:fd:fa:c9:f4:a9:08:4e:ea:b9:4d:44:f7:
9b:50:b1:49:3d:0c:2b:b6:e4:7c:15:63:de:35:4e:c4:76:16:
b5:e9:e8:d9:50:2e:51:9c:bf:88:d2:22:93:24:76:ed:99:ae:
8f:56:cd:6f:1d:25:8a:1c:e3:6a:9e:e3:45:e7:6c:53:fe:25:
39:71:4e:c0:2f:30:57:70:1e:1a:0e:f8:25:14:2a:d9:ff:1b:
60:12:2d:65:e1:0f:aa:56:61:c8:ba:c4:86:15:ae:b7:5c:81:
91:18:71:46:55:e3:4e:02:35:d3:18:51:d2:95:e4:49:f5:aa:
30:ab:a5:7c:ca:66:f6:05:19:67:71:d0:f8:a8:30:0f:58:5f:
d5:eb:91:2a:9b:5a:42:c3:c8:b2:30:b6:1a:77:7f:7c:18:81:
7e:37:4f:38:5a:a5:f5:5b:2e:ed:2d:53:1d:e8:2c:1e:29:1e:
97:97:c2:9c:f0:5f:25:3e:d3:31:d3:a2:b1:7b:31:c0:ab:73:
aa:6e:36:a3:b1:7e:4e:d2:0e:0d:57:cc:33:b8:60:90:41:32:
e8:05:01:23:96:e1:57:2f:88:cf:b2:16:3a:6e:80:67:df:d8:
e7:c4:da:52:ce:86:b7:13:fa:e8:39:a1:02:c2:4b:73:27:f3:
f8:a2:57:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:59 2025 by rpki-client