Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
File: 1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json)
Hash identifier: tDkKorpbri+WAVU1MCAj/r2eiuQx7ghAtJmkdDcF+Qg=
Subject key identifier: E8:46:57:8F:17:9B:FB:F3:7B:06:97:4A:AD:91:30:0E:C4:B4:EE:B0
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 019954C2CF1C9E2D5026CE08343BC25C0578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
Manifest number: 13C6
Signing time: Tue 16 Sep 2025 23:01:17 +0000
Manifest this update: Tue 16 Sep 2025 23:01:17 +0000
Manifest next update: Wed 17 Sep 2025 23:01:17 +0000
Files and hashes: 1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: QAEqH6YUXp7cRGTbAIczw/aNzQaQAC09H7yXlVHz0xQ=)
2: skjABuaYQdSyDecgxOrBPzscPeU.roa (hash: kzk4xU92DAB+Vcg2V/rYHygGxD8dQRxlWxtwdylCcxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:54:c2:cf:1c:9e:2d:50:26:ce:08:34:3b:c2:5c:05:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Sep 16 23:01:17 2025 GMT
Not After : Sep 17 23:01:17 2025 GMT
Subject: CN=e846578f179bfbf37b06974aad91300ec4b4eeb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a2:50:79:6c:f7:7f:72:53:72:b4:7c:94:c8:
0d:14:6e:af:0d:40:c1:c6:3b:43:fa:e7:15:c1:95:
be:0b:b2:c5:96:69:13:ce:a7:28:fe:4f:8d:bd:0e:
22:7d:e2:e2:ce:f9:fb:54:84:ba:96:50:a5:64:87:
70:51:a6:88:ac:8c:66:51:00:82:75:f9:cf:24:bb:
9f:fc:d5:d7:3d:65:b0:51:37:39:a4:40:3d:61:28:
f7:f5:ff:e6:43:78:95:bf:d0:60:3b:f5:7d:65:81:
1a:16:42:87:99:31:24:72:04:df:5f:a3:84:7a:05:
d7:31:19:89:48:66:72:03:9a:2b:1b:d5:0a:b2:ac:
27:35:7e:f4:46:20:1d:49:9a:b2:42:fe:c5:dc:0f:
6a:21:bb:3c:fd:de:b5:ba:a2:7c:62:7b:09:f2:ae:
94:67:1f:fe:ef:f7:16:29:3b:58:a5:b9:61:04:10:
c7:2f:65:c6:6c:ca:cf:5c:f2:33:3d:12:49:6f:e8:
9b:6b:c8:b6:05:18:ed:eb:b8:d1:50:53:6b:0a:52:
4d:23:ef:48:dd:aa:f1:eb:4d:d0:83:a4:bd:72:40:
e7:51:fa:c2:38:65:6b:77:a7:31:f5:49:c3:06:a9:
44:28:77:a6:47:6f:20:c7:3b:e3:89:a8:b5:cb:3f:
3b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:46:57:8F:17:9B:FB:F3:7B:06:97:4A:AD:91:30:0E:C4:B4:EE:B0
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:40:7d:5d:cf:df:20:b6:e3:e7:22:13:cc:95:81:94:3d:cf:
1e:ba:bc:69:cd:32:de:d4:0b:5e:a4:d6:21:1b:cb:84:23:40:
e4:1d:fd:4b:86:04:7b:15:b6:8e:4b:5c:12:de:87:cb:1f:85:
7a:ee:0d:c6:52:b6:15:6e:0c:27:9b:47:11:fb:00:0c:5e:23:
a0:64:ad:86:77:da:86:ca:52:5f:c9:b2:c3:9f:a3:1f:b1:12:
2c:1c:61:34:3f:81:1c:8d:f6:0b:72:70:5c:6c:e0:ac:f0:67:
ce:33:9a:1e:df:49:8a:f0:c5:b0:66:61:74:69:d5:9e:da:45:
2f:19:8d:d9:cb:4b:60:2c:98:b9:8f:14:0a:5e:cf:8d:b4:fa:
48:63:fc:bc:61:f0:25:54:97:d8:e9:fc:af:89:51:92:b1:f5:
93:1c:e4:40:f9:bd:56:a2:3b:dc:bc:73:cc:76:30:82:8c:48:
01:90:9d:41:aa:3c:90:ef:06:f1:2a:51:66:ff:72:64:3d:36:
b9:6d:f5:03:3c:1e:3f:30:e4:32:5b:d6:03:12:f3:80:d8:af:
d1:98:17:55:ad:dd:e2:9e:02:6c:9c:d2:e1:0a:5c:d5:ef:d1:
21:bc:10:ef:2e:de:4a:76:b2:cc:06:55:a7:d0:4c:55:0a:c2:
95:45:91:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 06:49:13 2025 by rpki-client