Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
File: 1zSS5NJcO70MXiDFqF7LIuyXNgo.mft (raw, json)
Hash identifier: vtlubKuOGKMJcKuRBVZLZO3mQ0vmJhOFDvV30DFBA28=
Subject key identifier: A4:3A:74:E6:65:98:59:53:DA:02:27:27:EA:21:FF:1E:6D:24:55:4E
Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
Certificate issuer: /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Certificate serial: 019937CA8BAC679403CBFEB5DE1C2DB32A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
Manifest number: 0F6B
Signing time: Thu 11 Sep 2025 08:00:44 +0000
Manifest this update: Thu 11 Sep 2025 08:00:44 +0000
Manifest next update: Fri 12 Sep 2025 08:00:44 +0000
Files and hashes: 1: 1zSS5NJcO70MXiDFqF7LIuyXNgo.crl (hash: fRwtzXxu0r8ac21+NJouG4El4SRz4aUhhv2g+o2Qqzg=)
2: 5xcSPqM5FqBggD3xhK_H_WBIj8c.roa (hash: 6UaEvDEdIHAI+VC/wqQ4jP8F3NZ9weH+TS5AN/LWzwY=)
3: NDt_WTrjoPL0cL8oTyPCRgNakA0.roa (hash: Hp1RzwRCWlMoxPuIUolhJVdqweoyQ9ReAqFHs5ETdBY=)
4: oTJ3WFdDrwDwPRwq0KV_9933-4Y.roa (hash: mhBZetUkSVK2917d65VbBa4ZgrfV11qg/and0h4flas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:ca:8b:ac:67:94:03:cb:fe:b5:de:1c:2d:b3:2a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Validity
Not Before: Sep 11 08:00:44 2025 GMT
Not After : Sep 12 08:00:44 2025 GMT
Subject: CN=a43a74e665985953da022727ea21ff1e6d24554e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:b7:8f:4a:8b:8c:9b:80:49:b5:c9:cd:3c:
ed:67:73:94:ca:3c:24:d0:c1:60:1f:83:33:7d:ac:
6b:99:0e:8c:5b:25:f9:21:f7:4e:f0:6e:76:4e:a5:
2b:85:e1:46:fe:d6:8f:53:07:6e:57:11:7f:d8:12:
c0:32:92:47:52:83:d5:b0:9e:a2:63:d4:69:0e:f5:
e0:12:d1:aa:15:58:fc:c3:0b:4f:37:2b:e2:aa:a3:
94:2c:13:59:c2:0b:f8:1b:c9:d2:99:e8:56:a5:f3:
8e:dc:0a:35:6b:7a:1f:79:84:25:ad:1f:92:81:91:
c8:17:0a:81:61:04:94:9e:2b:37:fc:ef:f9:b1:5f:
b9:cc:0c:29:1f:bd:b0:f6:f7:d2:f0:52:a5:d6:0c:
8e:a4:d9:3d:ed:1c:b4:d8:f0:64:18:1f:7d:ad:9f:
55:7e:76:41:2d:f5:28:42:e2:3a:0b:35:2b:4b:11:
6e:6b:5d:a7:81:32:d1:5b:cd:02:92:37:3e:1d:1e:
79:68:19:97:46:cd:fd:4f:1d:f1:0f:4a:c6:38:1b:
68:12:e3:0e:8d:0a:e6:0f:b3:5a:cd:0a:96:e2:86:
aa:71:c3:45:bf:60:93:47:eb:63:2c:11:e8:11:65:
26:62:cd:58:44:db:59:af:aa:4d:8f:1c:12:8c:fa:
bb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3A:74:E6:65:98:59:53:DA:02:27:27:EA:21:FF:1E:6D:24:55:4E
X509v3 Authority Key Identifier:
keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7d:23:38:0b:ee:56:5d:56:23:e9:27:f9:c4:1c:aa:e9:69:
78:5e:9c:62:ab:6d:95:5d:bc:3a:85:9a:2e:74:95:c0:15:49:
22:08:29:31:23:2e:c5:38:67:d0:95:59:6f:11:5f:ff:b3:74:
76:83:10:5f:0c:c9:7d:6e:1f:71:21:e9:cd:6c:84:6b:d5:20:
4a:5a:35:5f:92:05:d3:9d:88:69:be:59:a8:2d:d6:93:4f:69:
35:be:31:54:2f:f4:63:bf:59:20:36:2e:00:d4:33:d7:45:26:
29:b3:ff:bc:e0:56:4e:aa:4a:dc:cc:1e:ed:19:cb:ea:13:c9:
3d:51:8d:35:66:07:ed:da:51:20:0b:b8:06:67:c3:9c:7b:a4:
c1:1a:ec:4f:87:ec:1e:c0:da:cc:06:8d:3f:63:6e:11:2f:1f:
46:83:b1:1b:55:8c:e5:94:5f:5b:76:79:59:d5:ee:9a:13:71:
03:28:cd:81:54:c7:0f:94:4c:69:ae:a6:d4:79:ab:94:3a:df:
2d:64:7d:43:95:0b:92:ae:f1:08:11:d3:4b:06:ee:75:32:85:
1f:02:04:e9:0d:29:8b:0c:db:f0:1a:55:84:b2:91:5b:7a:08:
57:fc:db:bf:0d:7a:78:ee:96:80:99:99:f9:a3:14:a6:c3:b9:
fa:78:5b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 16:14:52 2025 by rpki-client