Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
File: 1-6DtkuyUMh3LIZ03842QfhgyRL0.mft (raw, json)
Hash identifier: BOJVEsCGw21hmt2+k/7GS5eHt8/aEZSxnkVZUPN38WQ=
Subject key identifier: 98:2F:6A:98:31:1A:C3:8F:D9:FC:ED:E8:32:4F:81:C6:E2:EB:5F:53
Authority key identifier: FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
Certificate issuer: /CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Certificate serial: 019A09DC7EED71FEBC229D8AF88F91777F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
Manifest number: 0AA9
Signing time: Wed 22 Oct 2025 03:00:36 +0000
Manifest this update: Wed 22 Oct 2025 03:00:36 +0000
Manifest next update: Thu 23 Oct 2025 03:00:36 +0000
Files and hashes: 1: 1-6DtkuyUMh3LIZ03842QfhgyRL0.crl (hash: aD6HpUJG7wY86YvC/Ifj2LQwzhdbBLzi7WZ2MPFj5w0=)
2: 1s70h6r87L-IulVsz6h8zyFXb_Q.roa (hash: 5H/5j8LaoLq/mqGaGFCi4+VAwjIOpu8grnJTKJtYod4=)
3: sEXfZ_frVlYD_mxkBMmTSShT4Aw.roa (hash: q9q1zeZ/+pc1h+hiJuULLx4217R4jnkBQRFKylMHrZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:dc:7e:ed:71:fe:bc:22:9d:8a:f8:8f:91:77:7f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Validity
Not Before: Oct 22 03:00:36 2025 GMT
Not After : Oct 23 03:00:36 2025 GMT
Subject: CN=982f6a98311ac38fd9fcede8324f81c6e2eb5f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ea:ea:fb:e5:68:41:67:30:7f:ac:4f:66:a7:
27:34:d5:4d:db:de:56:34:12:7b:ac:0c:5a:db:cf:
a9:c7:3b:8a:f6:81:e8:d2:d7:7d:4c:18:79:eb:d3:
4a:1c:a3:1d:85:f9:f0:91:e5:e0:0a:57:25:8a:f6:
c0:95:db:b9:39:48:f0:a3:d4:32:be:41:00:e4:47:
9a:c0:ef:49:8d:0c:7a:55:43:c1:bc:0c:76:c6:64:
b6:aa:01:fa:9a:57:03:e6:ad:3e:2f:a7:61:7e:0e:
ab:1d:9c:6f:b1:2f:de:14:79:6f:d0:7b:78:78:fc:
8c:c3:74:85:2b:55:99:e1:0f:c7:d2:c2:b0:72:9b:
30:11:bc:99:d8:2d:3b:c6:2e:1e:5c:8a:71:3e:86:
55:51:e6:b2:66:8a:48:39:51:a5:d6:f5:f5:41:9d:
a6:48:f8:fe:b3:86:df:14:cd:64:05:1e:9b:84:bb:
c4:ef:27:e8:f4:c5:69:47:58:76:b4:62:d7:f5:f5:
72:3e:21:e7:05:e9:7c:92:67:8d:84:a2:2b:7a:87:
96:18:e9:60:13:c2:60:0c:90:e0:6f:18:cd:b1:e0:
7a:b6:b0:30:8f:9a:95:9d:e8:29:c7:4b:c6:64:04:
35:bf:e7:20:b6:29:78:43:95:14:c5:62:ae:4c:59:
58:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2F:6A:98:31:1A:C3:8F:D9:FC:ED:E8:32:4F:81:C6:E2:EB:5F:53
X509v3 Authority Key Identifier:
keyid:FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9b:19:37:d5:65:91:bf:20:0c:dd:5e:9f:46:ad:72:69:d9:
d2:28:29:c8:7e:65:8b:a3:4f:52:ed:f3:29:b2:b9:a1:f1:b3:
ac:88:d3:f1:fc:5e:8d:87:b2:d9:a6:5f:9e:2f:51:03:93:0c:
64:f3:29:6d:ee:de:12:b4:86:fb:1d:2d:1f:a3:ff:16:99:c5:
35:1b:b9:6c:33:cf:4e:0e:6b:f7:bb:82:66:2f:48:54:d3:3e:
26:8e:01:83:fe:fb:d8:23:af:cd:cc:32:13:42:6f:f8:71:b2:
a3:54:c4:a4:9c:02:5d:1e:84:f9:03:1a:86:84:10:3a:07:05:
98:26:f9:92:70:3c:0e:c0:7b:8c:09:1c:45:55:e8:bc:4b:99:
83:09:db:63:9b:0e:10:28:1a:f0:c1:27:b5:16:f7:48:34:28:
fb:1d:0c:15:d3:57:d6:1d:b4:2b:24:f8:dc:1e:06:79:68:bd:
df:f5:83:7b:29:49:ba:3d:61:b4:f2:c2:bb:c7:b2:4f:12:5c:
4c:51:5e:aa:83:c6:a2:2e:de:da:8c:d8:03:83:ff:4e:42:cb:
6c:f7:bf:af:af:d1:29:c6:5f:63:26:30:05:bf:b3:bc:41:3a:
35:a3:bf:e8:13:72:22:8d:71:23:74:bc:07:a5:43:87:46:d3:
fd:00:68:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 11:03:51 2025 by rpki-client