Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
File: 1hCKSF368GqTH1Q8CFoAnGrqLZw.mft (raw, json)
Hash identifier: euUxcEqXsLgc9wfZ88KHTate4o+ZHG94KbkWxupL5Ck=
Subject key identifier: 9D:46:74:56:EB:1F:D0:A0:61:4A:DB:0A:CB:3C:16:BA:98:A5:B6:F0
Authority key identifier: D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
Certificate issuer: /CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Certificate serial: 01995C44B642E22501FDE8FCEABAC7C12A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
Manifest number: 0999
Signing time: Thu 18 Sep 2025 10:00:30 +0000
Manifest this update: Thu 18 Sep 2025 10:00:30 +0000
Manifest next update: Fri 19 Sep 2025 10:00:30 +0000
Files and hashes: 1: 1hCKSF368GqTH1Q8CFoAnGrqLZw.crl (hash: NMMqNVKqIhhsSfEDk1dfk1vEvmzMIA3jgYu+RkrTTSI=)
2: XYlDbmNEweM6LqFALkkvUh2W9lE.roa (hash: 9gP6l/HCX+2ev9Uk9YYU1pfiHW7Ig/5Pk5coTY/utmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 08:32:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5c:44:b6:42:e2:25:01:fd:e8:fc:ea:ba:c7:c1:2a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Validity
Not Before: Sep 18 10:00:30 2025 GMT
Not After : Sep 19 10:00:30 2025 GMT
Subject: CN=9d467456eb1fd0a0614adb0acb3c16ba98a5b6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:36:86:93:5c:ff:a9:e1:8e:5e:0a:d8:e9:86:
f7:3c:1e:10:d8:17:97:4e:ef:19:97:ea:dd:2f:61:
d9:f0:e9:48:bf:74:eb:1b:c6:cc:96:61:f9:54:28:
09:e6:2c:26:ce:64:ac:2f:2d:1a:5d:8b:f2:c4:b3:
13:a7:65:24:85:b1:79:75:70:75:bd:64:be:9b:47:
d5:31:4f:2e:fc:7b:f6:f5:a4:36:6e:98:eb:a8:7a:
44:3a:85:21:f7:e6:d1:c9:0b:dd:45:ec:45:7c:c5:
91:b3:95:30:5a:a6:1a:fd:d9:b4:51:d0:2b:b6:44:
f2:7a:d7:26:c5:6d:f2:6e:f5:af:3a:6e:38:76:b7:
bb:c6:b6:31:5e:01:35:d5:20:02:25:3c:f8:56:ce:
29:2b:a0:3f:aa:d3:d1:88:f7:98:7b:06:16:5d:85:
4b:f8:55:f1:a2:76:ad:61:bf:63:02:fc:b2:33:d0:
6b:3f:cf:df:4f:6a:6c:eb:a9:92:e2:1b:13:4a:7c:
c8:6c:4d:5e:f2:a5:72:04:ab:84:59:87:66:0e:f4:
78:5b:f7:22:e9:06:fe:ad:fa:b3:68:46:03:81:03:
98:d7:c3:70:9c:53:c4:88:4d:af:db:61:89:6c:e8:
e0:ce:5f:61:a5:44:35:67:05:40:31:85:4b:b1:7c:
56:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:46:74:56:EB:1F:D0:A0:61:4A:DB:0A:CB:3C:16:BA:98:A5:B6:F0
X509v3 Authority Key Identifier:
keyid:D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:cb:0d:3b:3c:27:57:81:85:b7:a5:97:1c:ef:4a:ff:7b:65:
9e:21:11:db:18:30:78:63:6d:11:61:72:7c:a0:dc:04:3b:85:
c2:67:41:8b:3c:c8:d7:df:e6:61:67:a8:90:5f:63:fb:d8:db:
35:4c:66:e2:b6:93:6b:3a:b4:0e:6c:70:44:12:93:07:14:42:
21:64:cb:f5:72:eb:ce:0b:24:bf:ea:0b:4d:77:42:dc:a6:f2:
d6:de:f3:83:5d:a4:cc:44:06:67:46:f9:6f:b7:c6:f7:57:56:
b9:7a:b5:88:e4:78:ad:2f:fe:ec:55:01:24:61:1b:36:06:a4:
45:b8:bb:eb:19:da:fa:d0:48:82:29:58:4e:7a:f5:fb:3e:5e:
0e:ed:d7:0d:a6:d4:07:6c:ab:c0:70:72:7c:4e:0f:52:32:04:
d6:37:cc:61:7e:34:dc:df:7f:65:fd:6f:4a:11:b7:2d:ce:49:
88:d4:4b:56:31:b4:ae:3c:f5:da:f1:81:c3:c0:80:e1:fa:7e:
24:f0:43:28:4c:d7:29:83:e5:cb:62:73:cc:83:3f:89:b0:5a:
82:33:a2:45:96:5d:f4:b2:21:65:4e:66:8c:72:3f:c6:e3:2d:
49:21:dc:4c:3e:c4:81:ce:d9:8e:3d:85:a7:df:47:a6:94:26:
bf:71:d7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:00:42 2025 by rpki-client