Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
File: 1nYY00F5w-pSMwJkoZZBh7I83SQ.mft (raw, json)
Hash identifier: s0tt41g9rk4cEZOSsbc0aTOCezkvelQX7hE8ke0D9Sg=
Subject key identifier: FF:EB:8C:B9:76:AB:71:03:69:72:38:96:E8:60:EB:9F:65:D6:CF:7B
Authority key identifier: D6:76:18:D3:41:79:C3:EA:52:33:02:64:A1:96:41:87:B2:3C:DD:24
Certificate issuer: /CN=d67618d34179c3ea52330264a1964187b23cdd24
Certificate serial: 0199375C8C404BC62AF939846C7146A09412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
Manifest number: 1190
Signing time: Thu 11 Sep 2025 06:00:35 +0000
Manifest this update: Thu 11 Sep 2025 06:00:35 +0000
Manifest next update: Fri 12 Sep 2025 06:00:35 +0000
Files and hashes: 1: 1lITG_UqnfavYQ_xoQlV3wFv38U.roa (hash: EEjmi7deVkOh9RZ1Yb2ahklKAUhFdcMk/pd79vay4U0=)
2: 1nYY00F5w-pSMwJkoZZBh7I83SQ.crl (hash: HFsqiK7AURy+vyc7lSSOBbdMpNzKzd09zO4XIYknDv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5c:8c:40:4b:c6:2a:f9:39:84:6c:71:46:a0:94:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67618d34179c3ea52330264a1964187b23cdd24
Validity
Not Before: Sep 11 06:00:35 2025 GMT
Not After : Sep 12 06:00:35 2025 GMT
Subject: CN=ffeb8cb976ab710369723896e860eb9f65d6cf7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d4:5b:97:32:5e:e4:09:85:d1:35:22:68:55:
b7:69:86:e3:42:c4:fa:4a:5b:45:cb:39:37:79:b7:
3f:6a:5f:0e:82:f3:bb:85:ad:c2:93:44:d2:ca:33:
86:ab:4d:d9:a3:a8:d5:7d:e8:4b:12:74:31:f8:fe:
f1:b3:7e:61:7a:c0:21:16:47:79:eb:9c:f7:d4:af:
bf:c1:70:b9:f4:fa:5b:9b:e6:d4:bd:78:45:55:cf:
e6:14:18:59:14:54:07:97:3a:bc:d5:48:5d:a7:7c:
48:0a:d2:d3:60:94:92:7e:27:50:4a:59:fc:e8:24:
6c:8c:2b:4e:81:3c:b2:8a:01:91:b4:a1:ec:29:95:
5b:02:76:57:8e:0d:66:50:33:dd:ae:b9:b1:11:79:
ee:45:d9:0a:7c:20:7d:79:7f:f9:0d:ea:a3:1d:5a:
45:6d:1a:2c:ae:f9:56:96:1e:42:83:29:ea:54:b9:
54:ee:59:6a:a0:cd:4c:9b:98:b5:a6:0e:f9:bb:c3:
b9:ea:84:cc:f2:a4:64:c0:b7:70:90:bb:43:85:b2:
d1:1b:da:c5:e2:da:c5:26:72:38:9d:bd:9f:08:82:
d1:5a:ad:41:57:a9:a7:06:a2:8a:e5:58:13:67:1e:
f6:19:a0:40:83:e7:62:1b:c3:41:d8:be:ae:15:8f:
e9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EB:8C:B9:76:AB:71:03:69:72:38:96:E8:60:EB:9F:65:D6:CF:7B
X509v3 Authority Key Identifier:
keyid:D6:76:18:D3:41:79:C3:EA:52:33:02:64:A1:96:41:87:B2:3C:DD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:c4:9f:d8:ca:16:d7:c0:9d:ad:3c:bf:14:78:38:0e:48:05:
c0:15:c2:8a:c1:f4:ff:27:4d:ec:6e:4f:d3:f4:c1:dc:70:7e:
05:de:a5:e5:b5:94:6e:32:dd:8d:25:86:4e:33:16:f4:6e:55:
80:bc:28:71:1b:ff:32:95:c1:c2:b7:4c:62:51:f4:88:9b:a9:
87:7c:8a:12:1d:ef:49:2f:3e:9c:db:46:6e:e5:b4:27:3b:7b:
72:5a:4e:40:8b:19:68:c7:95:9e:74:17:78:fa:ad:f1:97:17:
4d:95:79:4d:d7:4e:8c:48:15:20:f6:5e:01:a1:1f:bd:1d:66:
54:50:fe:f7:b1:8e:2e:a2:13:a8:b7:fe:16:a8:fa:1c:fb:ea:
46:7b:63:30:e8:8b:e1:50:b4:7a:3a:15:9f:93:ea:33:96:82:
89:76:d6:a1:44:3e:b8:76:ab:a0:10:ad:88:7f:e5:f4:85:55:
7a:a7:5c:ba:f4:04:5e:70:09:00:47:8c:a7:79:6f:2e:43:bb:
e0:c6:96:3a:99:53:5c:8c:be:97:05:71:a7:d3:22:c9:ac:ac:
26:80:93:64:7f:13:18:d9:fd:65:a9:dc:e9:60:c6:47:cf:00:
15:d0:9c:a5:4f:95:09:08:6b:7e:a4:c8:62:22:9d:65:d9:29:
bb:04:31:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:26:06 2025 by rpki-client