Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
File: 1-X_eytsyYTNDh88JHQLgcTt4HTE.mft (raw, json)
Hash identifier: 6j4V3R3r7y0SYx8mUstNpPs8Nil9sMUo8I6uGgv7So4=
Subject key identifier: F5:D7:31:64:33:4E:8D:AF:FD:4E:97:A6:46:C9:82:6C:E8:1D:1D:7B
Authority key identifier: F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
Certificate issuer: /CN=f97fdecadb3261334387cf091d02e0713b781d31
Certificate serial: 0199228C3AE93A8213DDA1A4936CA022EBE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 05:00:39 +0000
Manifest this update: Sun 07 Sep 2025 05:00:39 +0000
Manifest next update: Mon 08 Sep 2025 05:00:39 +0000
Files and hashes: 1: 1-X_eytsyYTNDh88JHQLgcTt4HTE.crl (hash: 9o2hNMopon8vrzaRtlczJ7/NPTfuE7iO/6Ekb1IEBxM=)
2: FCnaaFMRUSsD-s93_AVnx22U1ao.roa (hash: 4tCe1gcr3PUaM9byeRkhDZQavz/cazZjqikDLI+wcCg=)
3: mAXlXNB9v-X9Wiu9xA-qkNOSmGk.roa (hash: oVGw8L/hb1uj03ZIPyJ/jrTD+46lhm6KM/O1Nxc9Los=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:3a:e9:3a:82:13:dd:a1:a4:93:6c:a0:22:eb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97fdecadb3261334387cf091d02e0713b781d31
Validity
Not Before: Sep 7 05:00:39 2025 GMT
Not After : Sep 8 05:00:39 2025 GMT
Subject: CN=f5d73164334e8daffd4e97a646c9826ce81d1d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:66:20:29:90:41:d4:f9:8e:80:33:32:47:9c:
08:42:a3:8b:72:9a:1a:2d:10:d8:e5:cc:3c:76:f2:
6d:82:8c:a3:87:5b:32:40:15:03:48:a3:14:38:6c:
9e:df:78:8b:0b:15:6f:97:14:7c:3f:a3:1b:a5:15:
38:64:e5:df:b5:70:b7:74:a8:37:d3:10:53:ae:83:
a3:c9:8e:51:ee:30:a3:91:3b:dd:f7:6d:ef:53:12:
ea:af:7f:aa:df:b6:8b:ea:d8:5d:fd:7e:57:a9:ef:
12:31:42:f9:67:19:f4:b2:14:57:40:bd:ae:4f:a1:
63:c5:ce:8a:b8:6d:d2:ae:cd:1b:fa:69:e0:a1:c4:
cd:06:91:17:90:6d:dc:9c:3f:b7:57:b9:ac:b2:63:
98:b7:ea:e1:94:d3:03:23:7b:a3:28:b4:28:4a:d9:
9d:d2:61:26:65:5e:7c:78:79:7b:d2:50:3a:ea:2c:
47:11:04:d4:78:28:2d:41:6f:07:2f:a2:63:dc:44:
c5:04:b3:b8:fe:cc:85:5f:82:9c:53:ec:33:ae:b8:
05:05:f1:58:e7:f5:8b:e3:bd:01:ea:b0:a0:54:61:
fd:f5:12:7a:bb:a6:75:c1:04:f8:5c:49:47:5f:24:
76:de:cf:1e:c2:36:c0:64:99:74:28:35:4c:0d:c6:
9f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D7:31:64:33:4E:8D:AF:FD:4E:97:A6:46:C9:82:6C:E8:1D:1D:7B
X509v3 Authority Key Identifier:
keyid:F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:94:65:2f:e2:ab:85:24:88:4c:ed:b5:fc:d1:2b:84:2a:a6:
1b:a6:86:89:1c:fe:82:bf:ad:4c:b7:a9:8a:31:3b:ca:05:0a:
f4:a8:96:67:44:8e:45:02:8b:88:d5:98:22:c5:a3:78:79:28:
7c:9f:ac:20:3c:e8:3e:de:e9:7e:f8:30:85:b4:af:2c:ae:e2:
6c:35:2f:33:07:97:a9:60:85:24:23:99:b5:ae:5a:fc:73:7b:
ee:83:5c:b0:bc:52:ce:72:86:5a:f8:42:1c:b1:6c:f6:9f:f8:
f1:77:6b:ec:03:7d:45:b2:4f:ca:40:5c:80:c6:80:d3:33:5a:
73:97:e8:c3:93:c7:97:49:47:17:81:16:22:45:f7:da:97:dc:
be:0e:d0:66:ca:db:32:15:9d:2e:4d:16:58:66:5c:ca:64:67:
89:fa:d8:c0:96:23:41:9f:12:d1:f8:19:a9:98:0e:48:de:f6:
f8:94:9d:89:b8:03:20:90:e6:81:47:01:94:49:da:49:ec:c9:
47:1d:fa:87:33:bc:ba:62:d7:57:e6:1d:82:54:3f:09:92:d6:
32:00:a1:1f:45:df:56:da:78:d5:fa:cd:d7:1d:8f:c8:fe:1e:
1a:f2:2d:3e:a9:11:c0:cd:03:7b:9f:cd:09:f1:6f:ec:87:79:
95:70:a5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:35:54 2025 by rpki-client