Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
File: 1pI99NrpGVDPANI1_jngDuo4FtI.mft (raw, json)
Hash identifier: GUVA7vSbZMbOslWQzNHAt4IzY/2FDC1AJwb0tJ4ACPM=
Subject key identifier: A5:25:4B:CF:7C:3F:98:DE:DD:6E:93:34:A4:33:2C:7B:6D:6B:87:60
Authority key identifier: D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
Certificate issuer: /CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Certificate serial: 01993726250F02D652F314FC9E001D8ADB0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
Manifest number: 167D
Signing time: Thu 11 Sep 2025 05:01:10 +0000
Manifest this update: Thu 11 Sep 2025 05:01:10 +0000
Manifest next update: Fri 12 Sep 2025 05:01:10 +0000
Files and hashes: 1: 1pI99NrpGVDPANI1_jngDuo4FtI.crl (hash: BFaHmcP19Guyyl8njmzaoSGH1VHwXfLQu6KeQWMpDDo=)
2: k5WIi1Ejnq2UPqn3UpkS8V7jf1M.roa (hash: 0oCwakpSZkb6NAb4lGAZ4tdDGnYcuoaTcDYTLBa8fHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:26:25:0f:02:d6:52:f3:14:fc:9e:00:1d:8a:db:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Validity
Not Before: Sep 11 05:01:10 2025 GMT
Not After : Sep 12 05:01:10 2025 GMT
Subject: CN=a5254bcf7c3f98dedd6e9334a4332c7b6d6b8760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6b:7b:15:74:52:a7:4a:bc:20:4f:9b:80:83:
7f:2c:42:7b:b6:c2:1e:e3:17:eb:9b:15:e1:1c:33:
f8:5b:1a:13:70:d8:7e:50:73:29:cf:94:4d:c4:37:
0c:43:4b:98:89:52:35:71:bb:6d:6d:fb:5a:43:5a:
1e:8c:ad:f6:39:5d:e0:89:6b:95:8f:c2:bb:30:a9:
85:51:05:da:5c:65:2a:13:25:de:43:20:d9:4d:4f:
d8:fe:73:66:ea:95:44:78:5c:55:c4:f6:73:99:17:
cd:4c:e8:45:82:73:60:7f:f4:69:83:56:fb:f5:5e:
f3:f3:73:bc:f8:59:cc:dd:0b:4e:08:1a:7d:cc:84:
4d:61:86:f6:b3:6f:c2:34:d2:6a:e3:2a:65:ce:fa:
0e:78:b0:ac:27:0b:29:ca:f6:53:5b:83:79:b3:7d:
8d:4c:e3:87:c4:89:ba:bd:ff:56:84:84:4b:57:f7:
95:9a:0e:2c:ef:8c:6b:6e:02:2a:a1:a5:1b:c9:b9:
3f:41:b5:db:5b:ba:21:ed:86:ce:2f:22:e5:af:d3:
a7:e4:80:e5:9e:7a:db:e3:10:0a:f1:2a:74:24:33:
3e:e9:7a:f7:09:a7:fe:66:6c:81:bb:2a:0a:8b:7e:
a7:47:f3:8f:6f:92:7b:62:ba:1f:9d:c2:54:fe:a9:
10:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:25:4B:CF:7C:3F:98:DE:DD:6E:93:34:A4:33:2C:7B:6D:6B:87:60
X509v3 Authority Key Identifier:
keyid:D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:78:5b:a7:7d:33:bd:5f:79:87:77:8d:da:82:4d:e6:69:0f:
5b:07:b5:d4:61:e3:9a:85:67:5c:e2:16:2c:cb:2e:b0:aa:50:
38:d4:b3:bd:d2:7d:16:4e:17:2b:eb:82:67:3c:dd:3b:43:d6:
65:f4:4e:6b:ac:25:4f:d8:68:76:ec:f9:27:23:17:da:02:82:
30:4b:61:86:31:e2:2b:81:87:94:72:28:20:9c:a4:96:84:e5:
11:e4:c0:5c:cf:f6:e7:e3:46:7f:72:d3:2c:a1:d6:20:cf:51:
a4:f7:bf:d5:6c:55:04:f4:63:9c:0b:57:9c:9d:c0:af:ac:93:
9f:30:6a:8f:86:1c:9d:77:ca:c9:1b:a1:78:7b:2d:c3:dc:70:
8f:9e:5b:55:f4:4f:20:94:3e:c0:16:ad:6e:69:a5:fe:2e:07:
52:81:80:d5:dd:7b:78:d0:1f:2d:53:4d:cb:07:13:4e:de:29:
78:68:08:96:2e:cf:fd:1f:c6:80:8b:6f:ab:f8:05:ff:73:9b:
43:f3:1c:76:84:2f:27:a5:92:05:6d:08:80:63:a9:c6:08:46:
af:cd:66:53:b1:f9:37:36:8b:9b:1d:12:4c:58:66:4d:49:16:
98:d3:d7:11:e9:5b:f7:02:be:97:df:b3:be:fb:1f:8f:3c:26:
a5:5a:a6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:11:14 2025 by rpki-client