Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
File: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft (raw, json)
Hash identifier: uQo7LO91giyCXnOIOAqG1ItsyeX8GJZTBKkZTVlsBZA=
Subject key identifier: A1:F9:0E:3E:FF:17:B6:26:41:35:BA:40:AC:63:A5:79:46:AD:B6:0C
Authority key identifier: F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
Certificate issuer: /CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Certificate serial: 019931FF1DBA86E37BEDBDC8B8273B420742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
Manifest number: 0E31
Signing time: Wed 10 Sep 2025 05:00:26 +0000
Manifest this update: Wed 10 Sep 2025 05:00:26 +0000
Manifest next update: Thu 11 Sep 2025 05:00:26 +0000
Files and hashes: 1: 0MrgjigrDPt6rPegZME8cXiUORo.roa (hash: 7glCaQ9Yvpvmun3d90ogrApzDsZCqJLUsDw/+14dTgE=)
2: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl (hash: L3zqHqhjEwUSO7JahMpqpbOSrA7/XitueoSeroMzCNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:ff:1d:ba:86:e3:7b:ed:bd:c8:b8:27:3b:42:07:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Validity
Not Before: Sep 10 05:00:26 2025 GMT
Not After : Sep 11 05:00:26 2025 GMT
Subject: CN=a1f90e3eff17b6264135ba40ac63a57946adb60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b1:4a:7f:9f:27:be:3b:4d:07:6e:e7:60:a4:
52:3b:28:3a:27:f5:e8:67:3a:7d:5a:e8:52:eb:37:
e4:1b:80:27:b6:67:7a:cc:e9:d8:f2:6b:99:5a:35:
91:6e:63:8b:42:7c:2d:b4:fc:5e:de:1d:b1:2f:c4:
d7:54:9b:68:26:f3:41:9f:e1:c2:08:db:48:84:16:
51:4b:ad:f7:ec:2a:a2:41:66:de:6c:31:04:87:98:
4e:32:ad:28:0a:ed:64:19:28:2f:74:bb:aa:e7:10:
03:73:97:cc:ca:c3:12:bc:f0:ee:81:07:10:0d:d5:
13:d9:9b:2f:98:61:90:58:32:35:9c:9b:2c:fc:99:
1c:f6:c8:52:a5:bf:30:50:d4:91:14:ca:cd:19:51:
71:96:2a:31:08:ee:78:85:43:81:94:23:e9:c9:2c:
a3:58:be:36:a3:cd:80:f2:54:9d:48:c2:d0:f9:98:
3d:0e:75:38:f3:12:b9:27:6b:fe:39:55:3f:a2:48:
ed:a4:32:fd:89:90:bc:ab:de:b3:63:e5:5b:06:54:
9a:c6:18:56:bf:e8:a5:97:39:5c:c3:df:cf:b8:7e:
d5:75:53:ff:1e:2a:e1:8f:15:c5:3e:ca:6d:e3:9a:
97:f4:24:16:54:76:7e:08:0f:d0:bd:87:9a:2b:c8:
74:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F9:0E:3E:FF:17:B6:26:41:35:BA:40:AC:63:A5:79:46:AD:B6:0C
X509v3 Authority Key Identifier:
keyid:F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5b:8e:55:bb:5d:cb:d9:1c:f9:5d:a6:99:20:bf:05:a6:1b:
91:27:3d:c1:42:ff:66:9a:f0:ab:4a:81:f2:e5:52:23:33:c4:
67:a9:29:d2:99:95:1c:8f:e0:f7:ef:87:0e:a4:68:61:55:27:
ae:ae:c3:da:22:0c:af:81:09:6c:cf:de:58:2d:d2:30:8c:ae:
45:4c:a3:ec:6e:52:12:35:54:9d:01:3f:7a:a3:09:15:e0:31:
9f:8d:a1:37:ec:96:15:a7:b0:92:4a:86:7b:92:78:1a:57:0c:
e1:9f:7c:fc:c1:b6:2d:6d:45:b5:5c:21:ae:b1:7d:4a:fb:3a:
20:bb:9a:62:61:42:68:a6:e9:56:70:d1:4a:e5:29:7c:fb:51:
86:2d:70:0d:45:90:26:a4:ee:0c:06:24:70:4a:ef:0c:97:43:
51:e2:68:bd:08:1e:0b:56:6f:b7:d3:e8:ef:53:40:d1:02:ed:
cb:10:23:63:01:3c:42:1d:16:6b:fe:e5:cf:c4:27:1e:d7:f5:
3f:8c:1e:89:69:16:8f:20:3f:22:c9:39:1e:bf:3c:08:af:16:
70:1d:f1:1f:35:c1:79:27:ad:d9:09:8f:18:15:7e:25:1e:a0:
ac:8b:11:d0:f4:ce:dc:f9:61:db:87:37:18:a0:e8:6d:76:7a:
41:05:03:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:26:51 2025 by rpki-client