Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
File: 1jpuJY1igPPdl6ltlIbZPULxjUs.mft (raw, json)
Hash identifier: CDuh13FVPhGzfyReYko3kjAkQyNrfXWLrZQYdLMHdfc=
Subject key identifier: D0:98:DB:72:54:F4:79:19:B8:48:29:0D:C0:7E:01:3C:69:BF:F1:4D
Authority key identifier: D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B
Certificate issuer: /CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
Certificate serial: 01993380C5295423709BA167FDC71A8906CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
Manifest number: 02DD
Signing time: Wed 10 Sep 2025 12:01:40 +0000
Manifest this update: Wed 10 Sep 2025 12:01:40 +0000
Manifest next update: Thu 11 Sep 2025 12:01:40 +0000
Files and hashes: 1: 1gbNoUsKP-Iyf8BunKWL6vmT8hs.roa (hash: i5ay2vgUuK/RxNcOzQcdamhI5FZ4CZrQepcSEalRxfU=)
2: 1jpuJY1igPPdl6ltlIbZPULxjUs.crl (hash: Kp4PDhTVX4d9gsNggBlc/2j06hJ0vsNiWDqNOmQYyKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:c5:29:54:23:70:9b:a1:67:fd:c7:1a:89:06:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
Validity
Not Before: Sep 10 12:01:40 2025 GMT
Not After : Sep 11 12:01:40 2025 GMT
Subject: CN=d098db7254f47919b848290dc07e013c69bff14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6a:66:f2:3f:6d:31:a8:33:ca:aa:45:bf:be:
bd:c3:1a:9f:5c:5f:a6:21:29:71:94:35:63:9a:c8:
b9:89:6a:7f:21:82:40:e7:b3:e5:ff:21:f6:fc:6c:
e1:58:3d:b9:2d:b2:a1:65:2a:67:13:c3:7c:8a:a7:
85:56:1c:48:31:5b:a0:89:2f:64:6f:55:88:c0:59:
6e:7d:8d:fb:30:f1:41:14:84:e6:31:18:4c:f9:42:
61:27:61:a0:e4:d7:e1:3d:0a:ce:90:55:26:24:ab:
0d:07:36:f5:38:a2:9a:56:a3:c6:b3:92:6b:a0:8b:
71:cc:de:01:07:d8:e2:8e:f9:46:c3:f0:32:eb:4a:
2c:84:53:f7:c8:dd:3c:6e:c0:55:a3:59:37:92:d7:
b4:12:be:2f:4f:03:a9:63:b6:44:f1:95:12:a8:ef:
e8:ad:b5:92:06:c5:b5:8f:60:bf:81:1c:fb:8d:dc:
f2:10:57:37:5f:54:c1:a8:44:6f:98:c7:7f:2a:cc:
97:a4:59:b9:cf:a9:b4:e3:bd:66:d8:4c:a9:31:50:
aa:bd:72:2b:19:2f:cf:4c:31:00:83:45:8c:95:70:
67:56:a6:3f:40:46:7b:76:a4:eb:fb:4f:98:a1:57:
c8:ab:cf:f3:f1:0c:04:93:b1:eb:61:68:f7:37:23:
ef:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:98:DB:72:54:F4:79:19:B8:48:29:0D:C0:7E:01:3C:69:BF:F1:4D
X509v3 Authority Key Identifier:
keyid:D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3c:3c:5f:92:f3:e9:ee:c9:66:0a:98:3d:73:b5:ef:20:81:
98:ab:75:bb:23:6e:b2:50:55:d6:9f:0e:8b:29:5a:94:f2:a0:
2f:f7:8d:40:de:25:b0:e4:d1:6d:01:0c:37:6c:38:a7:c9:00:
ef:ec:23:0a:c3:83:e1:49:d6:fa:e3:1e:fa:fa:07:4e:26:cc:
14:53:c5:24:5d:e4:33:2c:d9:26:fc:c9:b6:35:d5:a8:a6:c8:
8f:65:2e:5e:f0:1f:09:b7:8d:3a:43:65:08:8e:55:6e:ba:df:
50:d7:ca:2c:1f:6f:07:f4:2c:e5:94:f4:5b:6e:0b:65:4e:31:
62:8b:2f:4b:b4:7b:7f:fd:ae:01:47:f7:de:0a:62:de:8a:a9:
17:69:4d:49:79:a1:2d:de:35:4e:5a:b8:57:dc:51:d7:b7:6d:
87:b7:0e:a3:57:b8:dc:85:95:61:25:20:8a:f9:63:5f:7a:55:
55:16:bf:d9:43:51:3f:7d:27:a7:ef:94:f0:d4:81:60:f6:60:
f3:8e:50:9c:48:09:f5:e9:39:aa:74:62:3e:ee:4b:96:55:19:
ab:aa:76:43:b8:c7:5c:dd:39:79:27:ad:d2:0d:03:82:32:a3:
06:03:f2:7a:4a:14:31:15:e0:26:71:13:3e:0b:40:48:bc:96:
fe:40:1d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 18:30:21 2025 by rpki-client