Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json)
Hash identifier: ERws6Ftn/KXyoVhETf7aVgohLK6Y93BTQZfICTsNRnU=
Subject key identifier: D7:CC:89:A9:9B:58:D6:B0:CD:CE:ED:D9:2B:13:2A:09:37:5A:D1:8E
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial: 019A2A7A12D358B060BB8D31D3A49C893AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
Manifest number: 07E3
Signing time: Tue 28 Oct 2025 11:00:34 +0000
Manifest this update: Tue 28 Oct 2025 11:00:34 +0000
Manifest next update: Wed 29 Oct 2025 11:00:34 +0000
Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: 2DlxPE6tQJ4kM8in7wqxk1jPUQt3gYj4fNKGLL43/yI=)
2: goyOFyNzCSnjNoSGUslWBJblZKU.roa (hash: gOANPYh3QzN79F/MQE5xUnJrm2gWdrunUVxAKHrrHlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:7a:12:d3:58:b0:60:bb:8d:31:d3:a4:9c:89:3a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Validity
Not Before: Oct 28 11:00:34 2025 GMT
Not After : Oct 29 11:00:34 2025 GMT
Subject: CN=d7cc89a99b58d6b0cdceedd92b132a09375ad18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:23:de:44:d9:d3:9e:e3:c1:62:d7:52:25:5b:
9f:58:10:cd:cb:bd:fd:f6:d1:03:86:6e:bb:c2:3d:
07:ab:9b:10:9e:68:ad:da:53:d7:a3:e1:8e:ac:8e:
0a:3c:21:bc:49:32:d1:11:04:6d:66:7d:d9:95:2a:
e4:16:06:a2:5b:7e:81:21:03:e6:bf:78:c5:19:a2:
b2:34:cc:c9:18:bb:88:ea:1b:30:1b:0b:ff:5f:13:
f4:42:65:1d:a1:6d:00:c1:ab:8f:17:5f:be:1d:18:
e4:77:ee:fb:73:c9:92:cf:e0:21:08:b1:74:98:7e:
77:bb:da:52:04:e7:24:ac:5f:5e:19:58:10:5a:c3:
0d:b5:a4:ad:10:b6:6a:64:a5:a5:fd:cb:d6:52:f4:
f4:da:c9:60:0e:8f:43:c6:e8:de:b7:b3:ad:e9:9c:
07:34:38:8e:5d:c3:58:ab:bc:f1:34:f3:1e:22:53:
67:6a:b6:06:2f:d4:bb:c1:78:84:6d:07:65:ff:84:
1b:bd:d8:34:19:45:50:84:37:93:f2:4a:5a:1c:5c:
1a:aa:c9:24:58:06:f7:21:58:e2:55:69:0b:83:31:
5f:cf:8d:cd:dd:f8:31:4e:77:ca:b5:10:46:57:6e:
10:fb:36:46:88:9d:49:6f:02:6d:61:d2:c9:96:84:
1f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CC:89:A9:9B:58:D6:B0:CD:CE:ED:D9:2B:13:2A:09:37:5A:D1:8E
X509v3 Authority Key Identifier:
keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:db:ec:9d:16:28:20:39:eb:73:a5:a5:a7:bb:a1:47:6d:e3:
65:c4:ab:a0:c7:92:9c:2e:bf:a9:6b:bd:84:48:55:3f:31:59:
33:fb:78:e2:15:76:93:c4:a3:70:49:ed:df:31:4d:55:38:1c:
eb:61:72:07:38:86:94:7c:57:dd:04:fb:ec:79:13:2b:2b:5b:
82:23:ad:9f:05:48:7a:7e:e6:0f:19:ea:b1:e6:d5:e9:37:6a:
ca:ac:69:05:17:f9:77:0a:4c:97:64:b0:96:3a:4d:8b:5a:bb:
dd:de:2d:94:d7:85:c5:7c:de:d1:aa:cd:08:92:cf:69:2e:de:
8c:0f:88:a6:78:18:8a:56:e7:7f:07:9b:c5:a0:5d:fc:04:22:
3b:13:b1:89:bb:e3:86:d1:3f:1a:9a:13:ec:49:74:83:df:75:
bd:4e:fc:f5:65:6c:16:01:11:98:ed:ec:b9:55:8c:61:7f:29:
ec:c3:69:65:40:26:0c:00:81:83:99:24:25:56:81:a8:41:05:
cd:93:f5:6e:05:f1:9c:65:37:8a:63:7c:a0:f3:7a:0b:05:b8:
24:93:6d:ba:02:fd:c4:3a:04:5e:70:20:9b:ab:bb:5f:52:ed:
7e:a5:44:5c:20:bb:fb:e8:84:ed:6a:3a:4c:38:24:6a:01:81:
07:58:3f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:56:22 2025 by rpki-client