Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
File: 1-6DtkuyUMh3LIZ03842QfhgyRL0.mft (raw, json)
Hash identifier: gSMrg6EWkzcNb0DxWvI/bj67uW4vRupEQBT5zCSzRBc=
Subject key identifier: 83:D5:EB:86:88:8B:7E:FC:66:BE:97:60:89:EA:0A:57:FC:B1:67:6F
Authority key identifier: FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
Certificate issuer: /CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Certificate serial: 0199168862F7E60E27F506774F82E8CE3A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
Manifest number: 0A2B
Signing time: Thu 04 Sep 2025 21:01:00 +0000
Manifest this update: Thu 04 Sep 2025 21:01:00 +0000
Manifest next update: Fri 05 Sep 2025 21:01:00 +0000
Files and hashes: 1: 1-6DtkuyUMh3LIZ03842QfhgyRL0.crl (hash: QCI0teq2+ThWs7gGIfUAicbWdNEP7n4HvyFR3VfaTvk=)
2: 1s70h6r87L-IulVsz6h8zyFXb_Q.roa (hash: 5H/5j8LaoLq/mqGaGFCi4+VAwjIOpu8grnJTKJtYod4=)
3: sEXfZ_frVlYD_mxkBMmTSShT4Aw.roa (hash: q9q1zeZ/+pc1h+hiJuULLx4217R4jnkBQRFKylMHrZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:62:f7:e6:0e:27:f5:06:77:4f:82:e8:ce:3a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Validity
Not Before: Sep 4 21:01:00 2025 GMT
Not After : Sep 5 21:01:00 2025 GMT
Subject: CN=83d5eb86888b7efc66be976089ea0a57fcb1676f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:13:1f:22:dc:48:fe:f2:83:0c:60:d5:a9:
c7:9b:fe:81:20:4b:07:cc:71:26:de:21:d7:0f:b5:
23:06:05:bf:37:c7:87:52:ff:07:e4:6a:9c:dd:a6:
8d:4e:43:a9:b2:c2:60:d5:2d:54:49:45:4c:bf:50:
eb:97:73:14:30:bc:e0:3e:0a:05:2e:99:e3:79:d6:
89:04:a7:c7:ba:42:25:5f:46:1c:c1:e9:1f:75:c8:
ae:c3:51:5c:43:10:40:84:19:4e:fa:73:b3:79:96:
3c:16:62:ab:8d:ab:f1:65:85:d0:f9:17:80:9d:40:
83:3a:83:bb:ef:df:98:4a:fc:8a:c7:08:8f:87:10:
ce:6c:74:13:8d:e6:95:5f:e1:9c:8e:f3:6a:39:ae:
26:44:b4:6f:0a:d1:b6:e1:96:07:81:36:ac:35:0a:
5c:62:44:49:5a:ec:e2:13:b0:0d:ba:c6:3a:49:78:
a8:50:62:c5:31:af:9c:0d:a4:07:ae:b5:3c:b7:89:
ee:28:e0:a4:cb:0c:0f:c8:b9:96:f7:15:8f:f8:3a:
b9:8f:8f:7a:7e:51:bb:de:1e:02:4c:5f:12:53:bf:
cc:6c:6b:1e:17:8e:bd:f3:64:72:86:30:6f:60:dd:
33:61:59:cf:e8:da:d9:51:f0:b5:ab:eb:6e:bc:75:
01:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D5:EB:86:88:8B:7E:FC:66:BE:97:60:89:EA:0A:57:FC:B1:67:6F
X509v3 Authority Key Identifier:
keyid:FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f6:18:43:15:1d:16:ba:68:3a:6e:5b:8c:25:06:2f:c4:1d:
64:01:cc:df:cf:45:72:82:f2:ff:94:30:d3:aa:90:99:c6:a3:
3a:aa:d6:15:23:1c:5f:63:bf:ee:90:61:9e:bf:bb:66:4d:63:
d6:e5:08:49:02:e4:28:22:95:95:4c:77:bf:3c:7a:24:db:5f:
bb:2d:23:eb:f6:5e:ad:c0:92:22:f8:e1:70:ad:cc:ed:4f:43:
06:5f:d8:fe:c9:36:b2:56:4c:01:8a:bc:5e:90:66:3d:90:03:
9e:8a:ea:d8:86:d4:71:06:b5:7a:66:48:a8:d7:f5:05:92:d6:
ac:ee:16:d2:1d:e8:bd:6b:ef:3d:fb:79:89:90:9c:f1:8a:87:
f7:8e:d7:94:48:e2:50:34:c4:3d:74:9a:27:2b:79:d1:34:85:
e6:ad:58:af:4f:52:8f:5b:b8:47:88:b0:d8:87:36:d3:de:bd:
94:d0:40:8d:17:4b:44:78:42:06:9f:23:e2:0c:e0:3e:8e:7f:
bb:82:c1:ad:bf:ab:6a:9e:7c:db:b5:38:82:c9:0a:6b:db:00:
e1:57:77:86:ce:a0:5d:89:3f:65:39:ca:33:4e:98:b3:f2:62:
8d:e7:88:60:62:90:9d:27:49:f0:30:10:18:f7:d9:5d:53:0f:
b8:34:1c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:10 2025 by rpki-client