Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
File: r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft (raw, json)
Hash identifier: Dmuzun5Ggg9ojPNff9YTVGS5lQ1v1uB+JSXM7ExKED8=
Subject key identifier: 63:21:4D:9F:0B:07:F3:49:25:01:2A:A0:D9:AB:8F:C5:09:70:DE:98
Authority key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
Certificate issuer: /CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Certificate serial: 01992669AAB0CDEEF86B317835E196778AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 23:01:23 +0000
Manifest this update: Sun 07 Sep 2025 23:01:23 +0000
Manifest next update: Mon 08 Sep 2025 23:01:23 +0000
Files and hashes: 1: 4spQ6NxJCHQlIe40OSpahfCWkew.roa (hash: q8IYfG4TfaqBRLC5bxYFRKAEUKhB1rQ/o2LIt/ycHL4=)
2: f_yXJGNzegLxOLz8jRnmFe-XGpI.roa (hash: tOrW/MEZqwnfeildny0YITd6StrSUroZ/b9Bx2DHobc=)
3: r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl (hash: Qa460Satc7+tfRoW3i1ZRlidR6abltDaXE7+N2CtDcc=)
4: wfzndjh_1PyK6B8Rf4Qnrhzhf1I.roa (hash: conmJC0uHXltpd+fK7k2U4ghVYU0Xoj8HIet8R78GBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 23:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:69:aa:b0:cd:ee:f8:6b:31:78:35:e1:96:77:8a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Validity
Not Before: Sep 7 23:01:23 2025 GMT
Not After : Sep 8 23:01:23 2025 GMT
Subject: CN=63214d9f0b07f34925012aa0d9ab8fc50970de98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:d2:46:8c:a6:8c:d8:36:34:d6:d6:01:68:
25:c1:2d:7f:16:0b:d7:89:da:2f:42:b5:fd:1a:32:
f3:7d:1b:b0:1b:05:b1:16:72:89:28:21:f3:76:31:
42:f8:21:e0:5e:37:76:79:89:75:2f:07:66:ae:6e:
b8:e8:c7:31:e9:14:27:ff:ae:25:57:46:33:da:6d:
22:25:c1:4d:79:4f:0c:1b:23:12:5f:8e:99:64:40:
42:ba:76:8f:44:9b:94:ea:48:f0:fc:0a:c5:5b:62:
28:28:b2:a1:90:77:8b:b2:b3:31:7d:c7:00:28:b1:
b0:07:99:82:d0:5a:a3:80:50:d4:aa:76:77:dd:c3:
8b:49:9a:3d:41:91:d6:6f:9a:ad:d5:39:e4:41:58:
5a:58:e2:be:cc:5b:6c:2d:29:95:48:bb:a3:79:93:
87:11:71:bf:fc:64:04:65:f6:a4:fe:1a:39:b8:f4:
07:d8:46:72:49:0a:91:de:ce:1f:5d:89:41:a3:3c:
6a:31:bd:41:de:19:0c:80:1f:ae:d6:5f:f0:b9:2c:
c0:fe:1f:be:a8:65:a1:32:74:81:57:93:03:30:bc:
4e:67:71:8c:a6:fa:bd:49:ab:68:31:78:73:01:20:
bd:35:2f:38:c4:ee:40:58:7e:68:17:0b:60:35:09:
95:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:21:4D:9F:0B:07:F3:49:25:01:2A:A0:D9:AB:8F:C5:09:70:DE:98
X509v3 Authority Key Identifier:
keyid:AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d6:20:5d:48:b4:4a:fc:e6:3a:a1:08:a0:61:94:93:9e:ac:
d8:17:b7:cc:73:e8:c2:ab:dd:98:4a:65:77:45:a1:d3:70:3a:
e2:b7:7e:6a:15:e0:d7:70:b2:75:31:fc:a6:30:ef:2e:16:f8:
25:fd:b9:9d:da:d0:da:91:5f:96:7f:e6:3b:9c:79:7a:26:7a:
48:a0:91:8b:45:fe:63:8d:b2:e3:25:b7:53:9f:e0:36:1c:d5:
aa:f5:bc:f1:86:ce:08:5f:ad:ec:f7:c0:01:d7:b8:1c:3b:05:
da:f1:fd:97:9c:99:d2:03:91:37:5d:6f:7f:fe:20:d0:15:d4:
4b:71:e6:bd:d6:40:65:90:d6:75:cd:8e:3b:74:e1:8b:bd:6c:
83:06:af:39:54:a4:e3:8c:71:e4:11:2b:03:c9:09:1f:1a:07:
f6:ef:8f:29:f3:8d:81:ed:f9:60:88:42:80:4b:ad:76:d6:39:
fc:0c:46:29:e9:31:3e:d4:17:3d:af:36:e0:6a:45:9e:ad:36:
80:92:3d:c9:8f:6d:dd:e7:88:b7:a6:25:51:bd:3e:77:42:2a:
41:e8:26:3c:87:1e:b1:3d:b7:b0:f5:06:86:7c:8d:17:52:67:
68:be:63:14:81:6d:8d:59:a4:13:7c:54:5b:d2:bd:08:87:c8:
a7:72:91:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:07:01 2025 by rpki-client