Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
File: 1fQ0Wir2tUTNG4541z7AK4iVVG0.mft (raw, json)
Hash identifier: Cbb88kit1r1WyrJt4gd+JVWdSOwY2bLMMHtHcBe+53g=
Subject key identifier: 6B:E2:89:E4:DC:7B:E1:1B:6A:FB:03:A2:72:05:1F:8A:85:4A:FF:07
Authority key identifier: D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
Certificate issuer: /CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Certificate serial: 019934923B0CFC5520EB533666DD858BF562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
Manifest number: 030E
Signing time: Wed 10 Sep 2025 17:00:22 +0000
Manifest this update: Wed 10 Sep 2025 17:00:22 +0000
Manifest next update: Thu 11 Sep 2025 17:00:22 +0000
Files and hashes: 1: 1fQ0Wir2tUTNG4541z7AK4iVVG0.crl (hash: 0BBiOOk7TjTp90IK+pO8NknUemJvDJpOsiIShEMINFc=)
2: 3_rjwimXt_D0WovOwZfA5vsj5Yk.roa (hash: 6MzAFEIp9W8TENsOWFtdVkqyFxS1C7g+fYFthRNeyV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:3b:0c:fc:55:20:eb:53:36:66:dd:85:8b:f5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Validity
Not Before: Sep 10 17:00:22 2025 GMT
Not After : Sep 11 17:00:22 2025 GMT
Subject: CN=6be289e4dc7be11b6afb03a272051f8a854aff07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d7:85:9c:4a:db:90:6f:89:f5:93:2b:25:fb:
62:4f:5c:6c:13:e5:ae:5e:6d:f7:00:d4:41:37:5c:
72:aa:01:47:2c:69:fc:70:81:60:63:77:84:9b:dd:
ad:ed:c6:d8:a6:f0:21:61:29:79:92:0d:40:67:c4:
e3:df:94:37:d5:95:01:c1:aa:38:f5:11:83:34:d3:
6a:62:e4:83:45:e3:da:09:44:31:bc:c5:af:fa:5d:
85:23:e3:9e:df:17:a6:45:da:a7:81:cd:6b:38:9d:
d5:5a:ca:07:4f:2d:c2:fa:f9:58:f6:cb:dd:3e:d5:
22:8e:0d:bf:81:cf:cd:1e:c9:d5:50:05:45:e2:fb:
99:4c:f9:66:77:2b:bb:8e:a9:b1:1c:4f:0f:bd:64:
da:b4:68:b8:e2:00:19:30:f2:ce:fe:52:01:3e:d6:
ed:62:00:30:2f:85:04:ee:50:72:25:9d:a9:09:f3:
db:8d:33:33:92:6d:db:fe:dd:24:b8:36:ea:44:28:
96:7f:5f:64:1c:1c:65:b0:f0:9c:3a:bd:ab:1a:f0:
de:81:c5:22:03:e8:fb:16:1e:e0:7f:36:0c:09:8c:
ed:6c:30:91:28:65:8b:7e:eb:e0:6e:43:df:63:e7:
45:d0:ec:76:e8:20:7d:e0:69:e4:3d:8b:f0:1e:a5:
7e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E2:89:E4:DC:7B:E1:1B:6A:FB:03:A2:72:05:1F:8A:85:4A:FF:07
X509v3 Authority Key Identifier:
keyid:D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5b:b7:5c:2a:51:61:b6:be:ce:3b:82:cd:ca:a5:f3:29:dc:
bf:55:70:e9:6b:92:05:fd:0f:0d:4c:5a:a6:3a:05:21:74:a3:
6d:ac:9d:f0:52:bc:e9:da:e2:4c:79:81:59:0d:54:a7:77:bf:
fa:90:b3:15:7f:f5:34:92:00:15:26:c7:31:f0:6d:21:2a:5e:
0b:7c:22:c1:ed:ae:b0:a6:a3:32:89:32:bc:a0:84:d7:30:1f:
27:3c:45:ef:57:41:b4:20:56:fb:f4:6a:37:34:98:aa:1b:17:
7d:c5:2f:06:29:c7:3f:5d:c7:94:cb:32:1f:21:d2:19:49:6d:
57:fe:b1:18:42:17:6c:4a:73:64:97:f7:14:b4:ce:81:00:73:
22:d2:0d:52:34:97:59:98:66:77:be:14:8a:e5:01:c6:39:4f:
08:d3:46:36:a0:f4:c9:fb:5f:e2:98:8d:e3:23:94:d8:19:c6:
f4:50:d3:0d:4f:b7:05:62:78:de:d8:32:2c:9c:73:80:25:89:
95:7e:a4:98:00:e6:4b:31:c3:3e:81:43:d2:65:e8:77:27:6e:
1f:84:ac:ae:ae:69:69:1a:fc:19:6e:67:7f:5e:36:11:c2:f1:
7c:6b:c6:42:83:f5:74:dd:8f:a8:55:72:69:17:34:11:f9:05:
3a:4c:41:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:09:05 2025 by rpki-client