Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
File: 1l2axr8fKjjiwXKFDu9wda686Ig.mft (raw, json)
Hash identifier: 34Chcs1BgVGc7GrTcncpPMSuvBlmlTo6rT4bmNf9zIc=
Subject key identifier: 01:CB:E8:1E:16:F9:85:BE:77:02:11:95:B6:22:EF:97:E6:CD:36:8F
Authority key identifier: D6:5D:9A:C6:BF:1F:2A:38:E2:C1:72:85:0E:EF:70:75:AE:BC:E8:88
Certificate issuer: /CN=d65d9ac6bf1f2a38e2c172850eef7075aebce888
Certificate serial: 0199228C33F0E8A69037C570311F3BAE892D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
Manifest number: 135C
Signing time: Sun 07 Sep 2025 05:00:37 +0000
Manifest this update: Sun 07 Sep 2025 05:00:37 +0000
Manifest next update: Mon 08 Sep 2025 05:00:37 +0000
Files and hashes: 1: 1l2axr8fKjjiwXKFDu9wda686Ig.crl (hash: 2Rurv1cM9KDTi7yvaQblt3OO0+2soWOPMEAgJMEdQMs=)
2: QajEwkbx04DeU-__NIG_To3nAd4.roa (hash: DL3wmR5aQwUYr9WHU8u6HM9lbpHPvXLenfBtN39yssQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:33:f0:e8:a6:90:37:c5:70:31:1f:3b:ae:89:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65d9ac6bf1f2a38e2c172850eef7075aebce888
Validity
Not Before: Sep 7 05:00:37 2025 GMT
Not After : Sep 8 05:00:37 2025 GMT
Subject: CN=01cbe81e16f985be77021195b622ef97e6cd368f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:df:5c:21:12:1f:3e:7a:12:7c:e0:ce:91:97:
5e:07:bc:cb:f9:20:7f:e0:7e:0d:0b:72:08:b6:8e:
97:9f:3a:b0:ca:d7:3f:79:a5:52:14:02:74:d4:b8:
03:51:76:9c:19:fd:a4:4f:ff:13:78:ba:82:f3:64:
f5:2f:49:03:d3:65:55:56:eb:77:1d:bb:60:fc:05:
fc:46:bf:40:81:51:da:a0:66:8b:cb:f8:6d:91:8d:
d1:d6:36:98:3a:05:e2:8e:42:e0:2b:38:e9:e0:b0:
8c:28:71:79:0e:3e:59:40:fb:6e:b1:d9:67:9a:5f:
d6:68:3b:be:1a:7a:8d:1e:ec:12:36:53:41:a1:5e:
d1:ef:52:97:4d:7f:4a:da:dc:83:e3:93:7e:6c:05:
ec:a7:af:bb:ec:1c:19:c9:d4:da:b7:e5:87:b2:a2:
3b:24:74:21:b7:87:22:05:ac:8e:05:76:ce:92:62:
00:ee:9a:b6:c3:8f:49:d3:33:9a:6d:59:ad:96:8f:
31:17:c7:10:0f:1d:a6:92:73:9c:99:79:f3:63:08:
02:fb:c6:16:9e:ea:3d:98:2b:1d:92:d0:88:5d:19:
58:ed:ff:cb:7d:80:e6:da:b1:45:9f:d0:5a:b2:3f:
04:46:79:3a:03:44:3e:d8:37:d6:bf:5e:3d:d5:4f:
6e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CB:E8:1E:16:F9:85:BE:77:02:11:95:B6:22:EF:97:E6:CD:36:8F
X509v3 Authority Key Identifier:
keyid:D6:5D:9A:C6:BF:1F:2A:38:E2:C1:72:85:0E:EF:70:75:AE:BC:E8:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:cc:a2:95:99:bc:60:4e:72:92:84:05:d9:b8:42:f1:dc:4e:
11:c8:ec:cc:6a:c9:f5:9f:fb:c0:38:fa:12:84:59:82:ca:bc:
33:48:4b:db:78:1a:a6:81:3e:42:67:a7:16:f0:1e:78:a5:18:
7a:19:f1:c5:bc:28:8c:bb:fb:8d:59:6a:0e:d8:83:76:8d:e8:
96:76:60:c6:c1:9a:3e:04:e2:1f:72:82:9f:0c:e2:d2:0e:d6:
62:2e:18:5a:2e:c6:c1:c6:af:c4:a5:05:b0:fa:d7:38:3b:52:
60:04:5f:0f:76:ad:3d:9f:f6:31:ec:72:c0:2e:1f:9b:5c:bd:
20:ed:c2:80:cf:48:18:cb:b0:a0:bc:0c:f8:31:1c:fc:40:5b:
44:d6:f4:32:10:8d:5c:72:4c:5d:1f:7a:4e:7a:a6:22:92:21:
be:5d:ac:25:f7:0c:7f:e7:85:a9:be:6f:d4:da:05:b0:cb:77:
f7:0d:74:79:ea:e6:e2:e6:36:66:1c:99:d8:6a:3c:06:c4:21:
75:12:4f:76:0b:55:bc:2f:a9:57:56:6d:11:03:79:c2:84:54:
28:e3:04:c8:34:1c:7f:44:94:2a:ca:0e:fe:26:3d:07:a1:da:
fc:51:ad:b0:85:47:bb:ad:1a:91:53:41:64:54:a6:62:f0:59:
11:15:88:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:34 2025 by rpki-client