Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
File: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft (raw, json)
Hash identifier: 4ORjRj0nipB2UNUOZ25EafcTXv/BQfcIb3L0uWINf2I=
Subject key identifier: F2:90:CC:49:F0:83:AC:88:19:20:3C:B0:8F:A4:0B:4D:15:7B:B9:9A
Authority key identifier: D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
Certificate issuer: /CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Certificate serial: 0199239FF7021FC542470B6E45899F9A2167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
Manifest number: 0A1C
Signing time: Sun 07 Sep 2025 10:01:49 +0000
Manifest this update: Sun 07 Sep 2025 10:01:49 +0000
Manifest next update: Mon 08 Sep 2025 10:01:49 +0000
Files and hashes: 1: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl (hash: B2bAKydiBESEWhK7gqGO8Vupb+xlJxM5hRosrPtExkM=)
2: nyuERDVJh6-PTXV2ajcksYw_55g.roa (hash: K7CKnx/jM/EuzQ/IpR2qcCsRtlnJ0y6qFH+bAbkXnGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:f7:02:1f:c5:42:47:0b:6e:45:89:9f:9a:21:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Validity
Not Before: Sep 7 10:01:49 2025 GMT
Not After : Sep 8 10:01:49 2025 GMT
Subject: CN=f290cc49f083ac8819203cb08fa40b4d157bb99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:10:ac:08:ce:70:ed:46:ca:0f:d0:89:31:f7:
e9:05:48:9c:3f:83:02:7e:28:2c:a4:2b:6d:d2:6b:
7b:9a:2d:35:2a:9f:8d:12:70:e4:23:d9:9f:a7:f0:
ad:94:75:d7:d3:27:35:dc:f4:52:3b:a6:4c:96:c4:
eb:8e:e7:bd:4d:13:45:ac:8b:19:99:62:be:f9:21:
3f:4d:12:21:11:11:8f:8a:07:25:d8:b2:db:35:3d:
a2:c4:42:65:65:aa:60:be:23:e8:da:e5:d7:02:ab:
95:81:bf:12:8c:c1:e5:37:c6:51:d6:01:26:7d:ef:
23:40:b5:02:20:f8:d0:8d:30:3e:c5:80:1d:c8:18:
45:52:b7:07:0f:e5:f6:12:fe:97:8f:44:79:12:e0:
f5:a8:7c:85:75:f9:a5:d1:a2:af:90:80:0d:2f:9c:
43:9a:a7:cb:08:9f:bc:42:be:5e:4e:0c:55:20:ed:
50:f4:cc:04:e5:e0:cf:ed:16:9c:bd:b0:8d:6c:92:
24:1a:d2:64:33:25:8b:ff:35:5d:d7:ae:c4:a6:3e:
d7:bb:94:76:91:09:32:9b:c2:7d:2f:29:8a:f2:b9:
af:a1:27:10:13:cb:41:29:61:63:1d:07:33:d4:c1:
55:be:1a:40:0c:94:14:41:bf:78:85:42:55:e8:2b:
76:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:90:CC:49:F0:83:AC:88:19:20:3C:B0:8F:A4:0B:4D:15:7B:B9:9A
X509v3 Authority Key Identifier:
keyid:D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ca:84:93:1d:f6:ed:8c:d5:59:62:8d:00:cb:ae:d7:24:04:
0c:c2:89:a9:c1:48:cf:81:59:d9:f0:c1:21:d7:85:42:2d:5f:
a6:af:ab:8f:5a:bf:29:df:4c:65:04:27:3e:e3:0b:e4:45:46:
ef:3f:d5:75:77:12:8b:b3:52:f5:f8:49:3f:98:c8:1f:20:c8:
33:6e:5c:a3:4f:c0:3b:1e:01:12:e7:a7:0f:7d:33:56:cf:2b:
72:5f:87:d2:c0:4c:58:fc:13:d5:ed:35:09:a7:72:dc:94:be:
01:50:03:d0:26:96:df:cf:ca:99:c3:70:43:63:60:3c:aa:37:
50:f8:2d:06:b2:dc:d1:0b:fb:42:73:6f:a9:41:02:da:0e:91:
f5:39:f2:c6:1b:28:60:df:6c:72:b5:13:34:25:f5:fe:33:d8:
8e:8e:28:b3:66:a8:63:cd:e8:eb:36:f4:16:bb:84:04:6f:0e:
0d:43:91:f0:f2:89:39:33:8d:fd:02:2f:22:0d:62:40:05:d1:
4c:8a:8e:56:a8:a1:31:60:4a:8c:b4:8d:f9:8f:55:6c:32:8f:
87:99:51:2a:75:ab:4a:d3:5c:9a:6c:27:f6:a6:11:c6:3f:95:
62:40:a3:48:cd:13:d4:84:74:f4:db:bd:6d:07:73:dd:61:5f:
e6:08:55:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:14 2025 by rpki-client