Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
File: 1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft (raw, json)
Hash identifier: zMpD+dalGtz7sg9O58JQyz2aLISp2XVUuRpaBoMcvwA=
Subject key identifier: 10:C4:7E:2A:E5:E5:A4:D4:48:95:F0:A8:DA:9C:8F:54:6E:B6:90:2D
Authority key identifier: D6:F2:E1:42:C4:4D:5D:51:BC:7E:42:CA:07:10:F6:B6:4E:F1:10:91
Certificate issuer: /CN=d6f2e142c44d5d51bc7e42ca0710f6b64ef11091
Certificate serial: 019936EFAE263E0BD540C3B746C74941FFBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
Manifest number: 167D
Signing time: Thu 11 Sep 2025 04:01:41 +0000
Manifest this update: Thu 11 Sep 2025 04:01:41 +0000
Manifest next update: Fri 12 Sep 2025 04:01:41 +0000
Files and hashes: 1: 1vLhQsRNXVG8fkLKBxD2tk7xEJE.crl (hash: ltcD6wexhLPqUIgys7Azya8g4CxsxTGbP5fhcGACq9U=)
2: LYJYFx2T8LJuRb12iyxKMr93evo.roa (hash: YqeTPnX1EtI+d0+m7mdzwt1Rn2TJyLXd1g7Ztcm9f4Y=)
3: Xj3oVMUCt01u8YFkgqP2XNxNOYc.roa (hash: 6auuGJzllRElAKkh+2dzfD1kSlIMjRra0ICkRJJ17wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ef:ae:26:3e:0b:d5:40:c3:b7:46:c7:49:41:ff:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f2e142c44d5d51bc7e42ca0710f6b64ef11091
Validity
Not Before: Sep 11 04:01:41 2025 GMT
Not After : Sep 12 04:01:41 2025 GMT
Subject: CN=10c47e2ae5e5a4d44895f0a8da9c8f546eb6902d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:61:89:87:3d:2e:9e:7e:dc:d2:07:0b:d9:9f:
76:06:d8:db:6c:98:83:3a:38:ad:53:ed:13:7c:3e:
95:05:f0:94:e7:96:9e:11:c8:69:52:26:02:a1:d0:
a6:7b:da:fb:9d:09:e4:78:95:19:1a:9c:e9:23:03:
53:d5:b3:6a:35:a8:47:54:f1:c6:3e:16:69:10:f3:
48:4d:c8:56:57:cf:ae:75:ca:28:56:f8:88:28:16:
01:41:a6:de:ab:5e:39:71:35:3a:e9:18:7a:df:20:
77:2d:b2:76:46:bb:80:a4:76:39:17:de:74:60:2e:
cd:99:b6:03:1c:b6:0c:9e:8f:99:4c:bb:ae:c5:a4:
5f:60:78:5a:95:e8:27:b3:2f:52:51:75:fb:70:45:
06:22:0a:20:ba:94:a8:37:8d:d3:2d:1b:b9:1a:f7:
8c:a2:99:b5:47:32:ad:d4:0a:e3:31:7b:c3:e1:d1:
dc:f0:e3:66:31:e3:ac:00:f1:d9:5f:29:48:b9:cf:
a5:f8:87:78:76:b5:ba:a9:65:c9:cf:02:c7:c0:a3:
a9:e7:18:be:17:52:1c:58:62:93:58:be:cc:5a:1a:
8a:62:3a:41:6e:dd:79:27:76:e4:2c:6f:fb:13:fa:
1e:85:66:ba:0e:95:36:df:6c:21:20:05:5d:c5:75:
e4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C4:7E:2A:E5:E5:A4:D4:48:95:F0:A8:DA:9C:8F:54:6E:B6:90:2D
X509v3 Authority Key Identifier:
keyid:D6:F2:E1:42:C4:4D:5D:51:BC:7E:42:CA:07:10:F6:B6:4E:F1:10:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:76:16:18:ae:fc:f2:2b:8b:63:c1:a0:d2:1f:55:4c:cc:29:
e8:16:c3:8e:9d:17:8f:e6:88:1b:70:9f:aa:c0:d1:89:0a:08:
3f:7a:76:05:ec:9a:84:ad:bc:c9:08:7f:17:69:b5:c0:26:1d:
dc:6b:9b:19:e3:59:34:79:36:d7:ee:d6:a9:fc:04:0b:d8:ac:
be:cf:c7:51:3f:fd:78:be:08:0f:d7:63:6d:c3:c0:37:25:37:
26:6f:90:42:d5:75:78:ea:8b:e5:44:2b:d4:84:d1:4e:c6:46:
c6:e9:99:3b:a4:5c:84:c9:f6:5b:d9:f5:45:6f:71:11:02:6b:
19:a9:12:bb:ba:45:c9:d1:da:76:2a:15:de:da:8f:10:84:93:
10:bc:a7:ae:a6:43:44:6d:13:15:0f:6d:3d:d3:ed:40:f1:36:
8c:25:13:bc:49:e9:ab:8e:6c:3d:bc:d8:cd:1c:74:a4:37:f7:
05:42:7b:1e:f6:72:4a:b5:96:15:8d:3b:f5:56:39:62:97:1b:
77:5a:a8:b1:7b:dd:a2:57:8a:4e:82:3d:38:91:d1:9e:57:d0:
73:c3:ba:31:d1:7e:72:aa:fd:a4:b8:10:1b:7d:bd:cc:a0:8f:
e8:1f:ed:b0:3a:c1:33:c9:0c:1c:77:5a:f5:7c:2a:97:3d:8c:
0d:3e:1a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:19:52 2025 by rpki-client