Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
File: 1TOwlDCwSPBSbvapN3dOfwYgNzE.mft (raw, json)
Hash identifier: 3lLjzOLahBFq/9+ifAF3BrnvQEHH4ff5Yldq7ZL/0pE=
Subject key identifier: D4:22:CF:95:49:64:46:3E:35:00:AD:45:D3:D6:AF:A3:6A:85:61:82
Authority key identifier: D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
Certificate issuer: /CN=d533b09430b048f0526ef6a937774e7f06203731
Certificate serial: 01995D8F02AC576E95758ED70B64431D8F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
Manifest number: 09D2
Signing time: Thu 18 Sep 2025 16:01:17 +0000
Manifest this update: Thu 18 Sep 2025 16:01:17 +0000
Manifest next update: Fri 19 Sep 2025 16:01:17 +0000
Files and hashes: 1: 1TOwlDCwSPBSbvapN3dOfwYgNzE.crl (hash: pSvzhWc9T3xCYgMu45rF+axA25UEIV45sLsnd5s055M=)
2: b2-2zA239FER4wC7CBSDQ_s6itc.roa (hash: ttiQIOl1DGhdd6BIOrtS+dGFnQqKAzV6ghp1LfZsaAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 13:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5d:8f:02:ac:57:6e:95:75:8e:d7:0b:64:43:1d:8f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d533b09430b048f0526ef6a937774e7f06203731
Validity
Not Before: Sep 18 16:01:17 2025 GMT
Not After : Sep 19 16:01:17 2025 GMT
Subject: CN=d422cf954964463e3500ad45d3d6afa36a856182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:71:c1:2d:16:af:00:17:85:2d:03:c9:79:71:
26:41:95:3b:5e:9a:5f:ec:e4:1b:87:61:19:6f:e8:
44:e9:5e:01:eb:7a:61:17:b0:c7:a3:dd:fa:34:56:
c4:bc:01:17:aa:6b:6e:81:fe:ea:92:87:3c:0f:20:
58:e1:5b:68:07:16:ae:39:4d:9e:1c:4d:03:a6:24:
d6:1f:f5:66:43:dd:26:20:b2:cc:d5:66:30:84:53:
52:71:d3:00:14:ca:41:33:e1:57:73:9a:bd:9a:8a:
3f:72:b2:91:8b:75:ec:6a:d5:9f:f4:3a:68:ce:e9:
68:72:9f:36:79:78:29:d3:3b:c4:b0:e6:66:b5:40:
e0:fc:9d:2e:4c:3e:f0:5e:fd:b6:a7:16:9e:d3:73:
a1:3a:8c:0d:fd:1a:16:61:e1:b7:f4:98:54:3c:ec:
b8:c2:3e:64:40:7a:0d:d9:30:6a:f6:2f:87:3a:d4:
38:c3:58:ac:c8:5f:78:ca:00:27:b0:61:33:f6:fe:
e6:ed:f4:02:17:77:24:e3:0d:28:90:db:c2:34:8a:
d6:c8:f6:b0:b6:99:dc:56:52:90:87:31:24:f1:31:
bd:f2:f3:e3:63:00:0e:e2:96:96:cf:4f:db:42:ff:
3c:d7:37:8e:40:a1:99:c4:be:be:eb:d1:f2:da:32:
fd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:22:CF:95:49:64:46:3E:35:00:AD:45:D3:D6:AF:A3:6A:85:61:82
X509v3 Authority Key Identifier:
keyid:D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ac:78:e3:a1:b7:d2:6e:59:ba:af:2e:32:e0:0b:0f:1b:7f:
71:7d:31:80:08:3e:ea:87:82:2a:84:c1:70:73:9b:ec:8a:d5:
a2:2b:d2:bd:bc:5f:92:cb:d1:56:4b:d4:84:b6:db:5d:84:1a:
db:96:70:4b:1b:d3:d7:7a:e3:ad:7a:ff:0b:0a:23:51:0e:0e:
00:af:47:2a:9b:d4:ca:3b:76:88:41:16:b1:97:3f:9e:31:35:
7f:48:87:e7:a8:5a:d0:d2:c4:54:4a:ab:75:2c:31:25:66:cc:
b2:c3:6f:c8:00:c7:1a:ed:1e:44:3e:8c:bd:5b:c9:7e:d4:f6:
72:a2:8a:52:ea:17:12:47:1b:3d:4b:e0:16:ed:b2:be:ca:c3:
5d:83:a4:77:25:7e:9a:ad:86:95:bf:c2:3f:c7:4d:4e:bb:3c:
32:3c:12:6f:30:23:1b:85:63:5e:29:69:80:73:00:84:42:b3:
9f:f1:b1:ba:97:60:90:ea:a8:5e:15:88:71:3f:d0:2d:de:83:
19:39:f8:29:e1:8e:45:a7:30:7f:c4:6a:77:c2:55:56:84:c2:
72:28:d8:f6:dd:88:04:84:a2:79:84:10:69:04:82:7b:1b:cc:
6f:db:26:96:72:df:9d:28:19:69:27:6c:1e:68:12:c9:3c:d3:
f6:83:6f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 21:34:53 2025 by rpki-client