Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
File: 201SqwmxbXL0w-SMxLSQJdCDZ20.mft (raw, json)
Hash identifier: BPksSAgg/HG7tj55P8LY3lLTpFPUoNnaNQldB+GGgRg=
Subject key identifier: 1D:22:E6:4B:E8:9C:FA:0A:D9:4F:23:03:0A:3D:66:30:E0:29:44:CF
Authority key identifier: DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
Certificate issuer: /CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Certificate serial: 019921E7D855C2B0A46CE7E69871B101AF58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 02:01:06 +0000
Manifest this update: Sun 07 Sep 2025 02:01:06 +0000
Manifest next update: Mon 08 Sep 2025 02:01:06 +0000
Files and hashes: 1: 201SqwmxbXL0w-SMxLSQJdCDZ20.crl (hash: 56mtuti21t+XZ6rbo03zRAoSTXXyI0NVELx6iFZCKp0=)
2: p7ugqnkl0eeyrlpJX13_lCmtLp0.roa (hash: f1GZebrpy+RrPUG5oAnHmyhNSF3EcTIUbcYbxWqO8rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:d8:55:c2:b0:a4:6c:e7:e6:98:71:b1:01:af:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Validity
Not Before: Sep 7 02:01:06 2025 GMT
Not After : Sep 8 02:01:06 2025 GMT
Subject: CN=1d22e64be89cfa0ad94f23030a3d6630e02944cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:36:95:47:14:14:eb:70:b3:6c:eb:84:a3:
91:fe:94:2c:3c:a4:4f:e6:18:13:f5:a8:a3:12:58:
f0:aa:4a:6e:cb:ce:1c:b5:ad:74:28:bb:a4:31:7b:
c6:35:46:48:a2:e5:18:15:a1:2c:b0:5c:e1:7d:cb:
01:f0:81:e3:fe:62:36:bb:8d:01:b6:28:ae:42:f7:
13:f8:fd:40:81:50:e9:32:00:75:0d:32:a9:b0:d6:
4b:12:37:51:a8:81:31:95:69:6d:9c:4c:ee:f5:5c:
c9:3b:ba:22:3b:ef:63:8a:a3:93:e0:a6:ea:87:62:
41:ac:b1:5b:f3:bd:1b:00:a6:13:fe:97:ab:26:9c:
c7:b8:a5:83:90:f9:63:bf:ed:fd:73:c3:b3:98:9a:
d7:e0:b7:d7:e0:e2:cc:d8:bd:6b:60:9c:9a:c0:f8:
72:91:95:33:23:3b:4f:ae:e6:5e:5b:d5:ab:95:a8:
a1:c7:d2:98:81:00:d3:80:70:05:2a:e5:12:42:41:
b7:59:7f:78:00:57:98:56:59:9a:d1:bf:76:35:96:
96:0d:7b:93:78:a6:7f:0e:1d:11:bf:02:d1:12:e4:
73:5f:ce:a5:d9:e6:69:9c:44:78:21:a1:12:78:fd:
cb:a1:e5:8b:8b:a9:3c:9c:de:5e:51:1f:00:30:f8:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:22:E6:4B:E8:9C:FA:0A:D9:4F:23:03:0A:3D:66:30:E0:29:44:CF
X509v3 Authority Key Identifier:
keyid:DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7b:8c:fe:9a:50:8e:f1:6d:4f:a4:c3:1d:e9:8c:f4:b8:4b:
19:5d:1f:66:fe:ba:ff:03:32:9b:42:40:2d:ec:68:1b:53:df:
3c:16:44:96:06:75:aa:03:32:b3:d3:2b:6a:e9:9e:b4:8c:21:
68:da:f0:7a:92:c3:04:95:ce:3d:35:e5:ca:a8:b7:28:a2:b9:
19:72:4e:d9:53:95:00:86:dd:f8:bc:56:db:1e:da:49:78:f9:
34:cc:0d:6a:74:62:89:da:e9:04:1a:88:1e:9b:45:6b:1c:2b:
c8:53:a0:f2:06:bf:c3:8e:70:22:e5:19:18:59:65:6d:33:eb:
c6:08:ca:02:76:a8:36:1e:ea:bc:99:8e:85:d4:03:c3:26:d5:
87:2f:de:3f:08:3f:5e:48:f6:f3:9a:5c:94:50:15:c9:fb:bd:
53:a1:20:38:5a:7e:2e:7c:d5:65:24:b9:d5:82:fa:59:36:42:
a2:cc:32:22:60:7b:af:53:d4:6d:7f:99:15:10:c1:be:ad:d1:
21:1e:fa:9e:26:ab:b5:cd:64:73:9e:d0:84:85:87:02:54:5a:
4d:c4:1a:2f:64:3c:9e:da:0e:64:66:fc:78:e4:06:47:dc:9b:
4a:c5:f2:e1:a5:55:08:bf:8c:cc:98:3f:c2:ed:25:8e:fe:7a:
91:09:10:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:26 2025 by rpki-client