Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
File: 1BcD2zAgzB7y_XEJGkaPSmScI48.mft (raw, json)
Hash identifier: qU40b07DDNx2g1IdOMxHa+67/FK4wSlIZC40uY8Iw48=
Subject key identifier: 98:81:A5:44:F8:7B:1C:75:B3:19:98:AA:F3:40:24:22:4A:A2:D6:9F
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 01996510D8E1165EA564DEE20E6F991F7900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
Manifest number: 16AA
Signing time: Sat 20 Sep 2025 03:00:26 +0000
Manifest this update: Sat 20 Sep 2025 03:00:26 +0000
Manifest next update: Sun 21 Sep 2025 03:00:26 +0000
Files and hashes: 1: 1BcD2zAgzB7y_XEJGkaPSmScI48.crl (hash: GYn3YHLPMX5+JUUucmy0fBPl0lBvBtQ/78uowj50znk=)
2: cOUnq0vuqxo-7tAHaSmMNpB4xjA.roa (hash: wsxzS6oiT3Fp4m4xvinb8fl886ODt+8izctjh085880=)
3: dumiLPj8dIgbkOu_ODKjUhmF_rM.roa (hash: kFpbhODmKPkVFS8czIjYIk5us47dHmcmchszyizHwz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Sep 2025 00:54:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:65:10:d8:e1:16:5e:a5:64:de:e2:0e:6f:99:1f:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: Sep 20 03:00:26 2025 GMT
Not After : Sep 21 03:00:26 2025 GMT
Subject: CN=9881a544f87b1c75b31998aaf34024224aa2d69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:85:e6:b4:2d:85:c0:45:94:ba:d3:2c:c3:a3:
33:bf:91:60:a0:5d:fe:e5:b1:ce:60:bd:60:55:5e:
ce:9e:19:36:62:26:bc:6d:16:41:38:0a:b9:09:17:
e9:f4:79:ef:6c:c6:d9:a3:31:1e:43:54:a6:95:3c:
e6:7e:fc:57:b1:ac:55:08:a6:b0:9b:9d:6c:e5:75:
ce:97:da:3c:e7:c9:21:8c:60:23:dc:fd:28:87:b1:
9d:c6:eb:bc:c8:f9:56:0c:71:fc:fb:b3:3d:49:dc:
96:f4:42:be:29:9b:17:05:19:82:f2:44:81:10:6f:
3d:cd:6a:f9:fa:88:7d:3c:63:76:80:28:69:44:19:
5d:65:29:c5:6a:4d:e8:09:06:08:bf:5a:6c:c2:78:
35:9d:19:b8:3b:b9:bc:3f:2a:36:57:98:3c:31:6a:
35:1d:3d:41:b1:21:b5:d1:3e:84:72:f4:db:7d:ba:
6e:3f:24:bf:79:3e:b3:af:f2:39:0c:da:d2:f6:51:
1a:50:2e:83:0f:5b:33:01:21:88:fb:08:39:06:5b:
ea:94:08:cf:6b:43:e3:78:8c:a1:fc:bd:95:39:fa:
1d:5c:92:c0:4d:57:6b:5c:5b:36:eb:16:49:09:96:
d2:c8:6d:4a:ca:99:a0:18:ae:49:14:cd:b9:b1:64:
e9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:81:A5:44:F8:7B:1C:75:B3:19:98:AA:F3:40:24:22:4A:A2:D6:9F
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:13:e4:7b:f7:63:1f:d5:b1:92:75:6d:34:cf:43:31:fe:d6:
34:03:0a:21:cf:12:64:7c:83:3a:0c:a8:6d:8d:89:06:80:1b:
ad:25:46:ae:fc:08:51:f8:79:95:79:8e:3e:46:d1:79:51:3a:
b3:1c:27:bc:cd:a1:2a:3d:37:da:68:de:f4:72:15:50:52:2d:
bf:e4:e1:c3:2b:d2:4f:98:51:bf:e2:63:28:1e:a3:cd:b6:35:
68:8c:95:57:74:61:ee:93:28:4f:5b:9c:c3:4e:9c:bd:c3:8b:
5b:f7:33:89:c7:19:dc:cc:fd:7e:41:0c:e9:2b:96:a7:12:2b:
13:ae:4a:3e:78:4d:35:96:06:2a:22:d8:ad:c7:6d:5e:8a:cf:
77:8a:7e:37:db:2d:9e:08:9a:58:e7:97:a3:90:04:c6:f2:df:
4c:95:00:f7:be:f6:50:14:ff:8b:61:29:e7:6d:79:88:0c:0e:
69:26:8a:86:33:04:bc:da:60:9e:29:86:73:2f:3b:91:08:f4:
98:ac:88:64:74:a2:5c:8c:d7:a1:d3:a5:01:87:de:3a:3a:9f:
41:be:75:be:10:ab:81:ae:58:3e:f1:18:9c:6d:24:0f:29:7b:
14:19:09:dc:97:9a:98:7f:0a:22:5c:b4:43:a5:25:8c:df:bf:
de:18:c4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 04:19:13 2025 by rpki-client