Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
File: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft (raw, json)
Hash identifier: Cml4ad2Nzbg/snHIeMEJZZ4oay2fC/RGFBesyCNpZXE=
Subject key identifier: CB:BC:4F:C4:FE:9D:E7:91:DC:61:CF:87:09:F6:A3:AA:E8:AA:2A:83
Authority key identifier: D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
Certificate issuer: /CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Certificate serial: 01992331721A1C900E967DB4500FEA5F19B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
Manifest number: 167E
Signing time: Sun 07 Sep 2025 08:01:07 +0000
Manifest this update: Sun 07 Sep 2025 08:01:07 +0000
Manifest next update: Mon 08 Sep 2025 08:01:07 +0000
Files and hashes: 1: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl (hash: 7LS2ZN7KBKWGKe4wb5RUdP1+0S5J3LuSaHF9T4JlqJ8=)
2: SRL2XQIBoKefODwi32v5f2eOog8.roa (hash: Dn7L+HcQU8DFcaAaO+5zWbM9Yhm50QvkCe2vCWCUn7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:72:1a:1c:90:0e:96:7d:b4:50:0f:ea:5f:19:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Validity
Not Before: Sep 7 08:01:07 2025 GMT
Not After : Sep 8 08:01:07 2025 GMT
Subject: CN=cbbc4fc4fe9de791dc61cf8709f6a3aae8aa2a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:13:54:15:36:dc:86:df:fd:1d:bd:4a:10:
52:c9:d9:41:be:2e:23:c3:b3:e4:1d:3c:b0:07:bb:
b2:da:dd:cc:f6:9c:92:66:35:d5:56:3d:57:4f:84:
24:d5:f3:e8:e4:38:b0:e4:7d:e6:89:79:12:cd:08:
a1:66:a7:f2:74:11:88:f9:94:f5:33:fa:9a:93:8a:
2d:0e:4b:63:15:1a:25:93:e3:a2:2b:5a:d3:ae:b4:
0b:48:49:2d:97:04:88:ba:dd:da:d0:7e:be:9f:bd:
07:f5:a9:62:21:21:09:e1:d5:cb:93:51:46:bf:66:
52:e7:cd:41:38:56:34:5c:0e:be:f2:82:65:93:e0:
68:a0:94:d6:36:c3:f0:26:d2:40:8b:63:e4:29:f3:
17:c0:be:30:8b:23:19:bb:69:25:12:f4:c9:88:9e:
78:3f:b4:4e:30:8c:9a:80:35:28:00:cc:b7:67:61:
c3:cc:48:c7:ad:82:e0:35:a1:36:f1:74:d3:53:32:
d4:cd:a3:43:3e:28:6e:7d:51:c1:fb:a3:42:5b:99:
01:56:b6:10:4b:af:1a:35:f5:0f:de:9c:4e:0f:e3:
71:7b:96:89:96:ed:eb:5a:f0:ae:a5:9d:8c:ae:dc:
0b:53:33:e7:a3:a2:7d:ca:17:d2:0e:12:f2:f3:0d:
6f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BC:4F:C4:FE:9D:E7:91:DC:61:CF:87:09:F6:A3:AA:E8:AA:2A:83
X509v3 Authority Key Identifier:
keyid:D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ed:38:a3:a1:da:02:6e:60:b7:ed:24:65:7c:29:84:54:9b:
81:45:a9:48:70:4c:05:90:65:03:bf:b5:e7:43:5f:b2:b1:1a:
27:70:a1:97:62:b3:39:7d:3e:f4:d8:e3:42:92:4c:d4:43:f3:
1e:24:37:56:61:59:51:12:0e:2a:dc:6c:fc:57:80:59:32:20:
66:f3:f5:2f:ea:46:f6:5e:61:ce:6a:df:96:b4:2e:ab:4e:b9:
ed:79:32:4e:d2:d4:8b:24:1b:cd:0f:b3:3d:5b:1e:59:33:29:
3a:86:7c:5b:66:69:41:19:fa:cc:3e:d0:c6:d8:ba:17:dc:a5:
c6:df:07:ce:5f:92:d5:d3:88:bf:9c:3f:ea:30:3d:0c:a1:0b:
50:67:7f:66:63:95:f0:10:bb:f1:5e:54:a8:fb:4d:3a:fd:ed:
6e:e7:2e:95:00:92:f0:47:0a:54:6c:84:8a:b1:64:99:1c:9d:
6c:ab:8b:7d:a7:90:6c:0d:47:ac:0b:27:e0:c8:a0:b8:8a:c3:
20:ac:51:e2:4e:d8:b3:a7:c0:bb:8c:be:a2:0e:66:e5:33:a6:
e5:e6:1a:02:8e:5b:3b:d6:f5:81:a1:85:49:c7:71:e7:d2:26:
07:74:b6:a6:25:37:2e:fe:d8:55:3d:34:b0:2c:1c:e1:50:7d:
43:48:c0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:58 2025 by rpki-client