Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
File: 1sJp-ek7D7i8SxyUerxbIfIfIwU.mft (raw, json)
Hash identifier: DSUKqW8vcGuzbS89BH7Zb6nntFswb7BGiX4sxE0SJ4s=
Subject key identifier: 5F:41:C4:87:D8:C6:61:3D:53:1B:33:6C:72:DF:D8:B5:6B:90:6E:62
Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
Certificate issuer: /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Certificate serial: 0199307F389C3663CFF0154BC06EFD04EF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
Manifest number: 05B8
Signing time: Tue 09 Sep 2025 22:01:07 +0000
Manifest this update: Tue 09 Sep 2025 22:01:07 +0000
Manifest next update: Wed 10 Sep 2025 22:01:07 +0000
Files and hashes: 1: 1-4EUUJ60y6tCuL7fMYLuUTMussI.roa (hash: ZCZ3I6CzJy+9WHfI/N/oUofNXCUICsdPSdQOOtiTJMs=)
2: 1sJp-ek7D7i8SxyUerxbIfIfIwU.crl (hash: JfpI0Sb2ut/7IvWSjPl8ZgMkFwblJL523nmumRMjOA0=)
3: AJ8BcEY-DdXcTmxMdYHCmI3RxoU.roa (hash: 3dzyfVQpkuELs7hezXS9c0EUIsSeRiw+pnrqw/PWP6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:7f:38:9c:36:63:cf:f0:15:4b:c0:6e:fd:04:ef:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Validity
Not Before: Sep 9 22:01:07 2025 GMT
Not After : Sep 10 22:01:07 2025 GMT
Subject: CN=5f41c487d8c6613d531b336c72dfd8b56b906e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d4:c3:44:1e:75:61:19:f5:56:6a:6c:09:0e:
82:e0:bf:31:18:61:5e:1f:2f:99:3f:2c:37:c0:4d:
e7:dd:db:51:79:6e:e5:da:9c:74:96:d1:7b:2b:64:
be:61:d4:3c:06:89:a5:cc:a9:47:18:b7:68:e5:a1:
81:eb:e7:2a:71:d1:ee:b6:58:84:17:3b:da:8d:a4:
b7:22:e3:5e:f7:14:fd:87:c6:0b:83:13:0d:ff:eb:
83:55:8f:66:bf:93:71:62:b2:57:50:fb:38:f1:23:
53:ae:58:fc:69:40:11:68:38:e5:b7:36:6c:14:61:
0b:04:3e:62:bc:39:6b:a8:eb:d7:a4:01:42:41:b6:
7a:37:ec:7a:d4:70:e3:a4:37:82:e6:8f:40:ae:16:
e7:e9:ed:ed:ce:cd:f5:05:88:fa:84:7d:5c:25:3c:
24:21:b1:a4:fb:9f:6e:84:ab:53:62:a8:5c:19:82:
f1:f5:a7:38:e2:db:3e:a0:58:2b:77:a6:cb:49:5e:
aa:92:bc:fb:62:7f:41:a5:35:86:7f:d9:d3:26:7d:
ae:ad:4e:6f:5c:e9:02:25:e9:1b:8b:84:a0:6c:38:
32:81:97:18:be:00:f9:ca:41:7c:56:dc:2f:09:97:
03:ec:06:b6:b4:77:a9:0f:ab:5c:3d:77:b9:4f:4f:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:41:C4:87:D8:C6:61:3D:53:1B:33:6C:72:DF:D8:B5:6B:90:6E:62
X509v3 Authority Key Identifier:
keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:19:f0:d2:8b:18:ce:16:ac:54:75:87:d3:8f:08:19:7d:e2:
91:04:fd:0b:bd:16:94:91:c2:b5:2e:b9:6b:2a:2c:d1:f2:28:
ee:8c:3b:4b:55:f2:10:8d:a9:a5:96:94:12:ba:6b:b8:25:c0:
62:b2:be:22:da:90:3e:ee:52:05:48:9f:f3:31:37:40:9e:73:
ee:d1:a4:fc:87:2c:d9:42:8b:10:fa:6a:4c:0d:56:e3:cc:4e:
a9:46:5e:f7:cf:d3:a4:d8:a3:5e:a2:df:54:68:6a:aa:ff:24:
ed:ab:55:81:b6:dc:b7:3a:73:5d:17:dc:05:14:f6:08:a3:1a:
07:9e:94:d9:f0:1b:66:1e:05:95:c4:39:79:68:e3:fb:48:5a:
1a:c8:c5:03:66:4d:41:a7:b1:43:87:c6:6d:e9:14:94:0c:b6:
7e:02:a9:6f:88:ad:c0:f0:f5:d5:4e:3f:45:9a:b8:38:a7:48:
38:0b:d2:c4:ad:e5:3e:82:86:bd:af:7c:09:0a:30:59:cb:f8:
08:f8:d5:d6:8e:1a:a2:3b:c3:17:f1:5d:7e:49:bd:8f:f7:d0:
fb:7f:25:ad:08:09:17:e6:5b:06:20:70:4c:57:a2:c1:bf:12:
6e:6a:7e:df:0b:de:23:3a:c8:24:d1:a8:fd:6e:f9:6a:19:61:
bd:37:bc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:30:53 2025 by rpki-client