Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
File: 1H2KqhDtz10IFAORU5l7-_TTW6k.mft (raw, json)
Hash identifier: JfsPPGR5MiXyXTsgZIYCzpydxp157kJve2VY95a7Yok=
Subject key identifier: 40:3F:20:7B:9A:39:75:17:90:86:B3:7A:49:68:D4:AA:C9:B6:D9:90
Authority key identifier: D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
Certificate issuer: /CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Certificate serial: 0199221E65EE620B8C2A5EB3B64006CB65DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
Manifest number: 0286
Signing time: Sun 07 Sep 2025 03:00:41 +0000
Manifest this update: Sun 07 Sep 2025 03:00:41 +0000
Manifest next update: Mon 08 Sep 2025 03:00:41 +0000
Files and hashes: 1: 1H2KqhDtz10IFAORU5l7-_TTW6k.crl (hash: SrlEy0sQekNPivWvfXckLgT1pCemkmaLsMBYrodKkM0=)
2: oL3YqmLZNQTklrYCVBkqoxnVPVE.roa (hash: vNB411x6DGxlKgUop3xuDcnHI37Ap9OjrZ9OIS8r31M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:65:ee:62:0b:8c:2a:5e:b3:b6:40:06:cb:65:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Validity
Not Before: Sep 7 03:00:41 2025 GMT
Not After : Sep 8 03:00:41 2025 GMT
Subject: CN=403f207b9a3975179086b37a4968d4aac9b6d990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:b9:4c:37:55:79:53:6f:60:e8:83:f4:f3:
a1:6d:b0:47:f8:62:52:e8:91:e8:d9:70:a0:13:23:
e5:ca:aa:3e:98:13:c8:f6:64:e0:2c:e3:6b:8a:24:
a3:6b:ba:1a:ce:46:a5:71:c2:90:93:1a:90:f3:9f:
21:9a:87:62:9f:e2:73:f2:6c:a3:83:96:ec:1c:9f:
71:08:bc:b2:7c:77:07:2f:43:c0:70:b7:7f:66:93:
aa:47:27:c0:bb:c8:6e:6c:9d:0e:d9:df:38:f5:b0:
46:a6:68:a2:c0:2a:f2:05:94:21:cf:46:0d:09:c3:
71:f3:e4:0d:07:d9:3c:c5:a0:8a:7a:5e:b1:da:a0:
cb:d1:eb:97:3b:0f:b3:33:a8:59:5f:b9:44:07:d3:
11:aa:2f:1d:dc:81:ee:6a:64:75:29:15:1a:1a:ee:
cc:99:c9:92:a9:08:84:7d:b0:62:d8:02:34:cf:6e:
6a:06:07:be:c3:1c:c1:2c:7d:33:7a:c7:f0:71:b5:
be:e6:57:44:79:af:ed:aa:5b:a0:34:06:cd:24:89:
e3:94:09:81:0c:7f:3f:9f:d9:8e:45:22:37:fe:ca:
1d:c0:ab:40:1a:2c:f4:78:14:92:67:f9:68:b5:5a:
cc:93:1a:15:cd:2d:a4:0d:f7:be:18:6a:07:9a:f2:
13:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3F:20:7B:9A:39:75:17:90:86:B3:7A:49:68:D4:AA:C9:B6:D9:90
X509v3 Authority Key Identifier:
keyid:D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:9c:23:8a:27:2b:ee:53:09:2d:cb:e7:59:09:11:f6:82:63:
9d:26:d8:6c:a8:30:90:71:1e:9b:85:3c:80:b6:d3:cb:41:89:
0f:40:6c:80:e4:c1:e7:e2:dc:1f:f8:3e:e0:71:50:14:bf:cd:
de:c1:d6:90:f7:f9:cd:a5:3c:cb:fc:2a:1e:64:84:de:c5:97:
9b:0e:c8:d7:c2:6c:c8:c5:76:75:f2:17:22:4e:0c:a0:43:bc:
f5:d0:7e:59:81:b9:47:da:92:af:4a:94:4f:54:98:6e:7f:b3:
d6:3d:9f:c1:2f:71:04:79:42:93:06:67:a6:0c:3f:7b:e0:5a:
18:ca:57:31:68:e2:01:31:e0:b6:45:c9:6f:1a:f0:5f:d6:41:
e9:fa:81:5b:2c:ef:64:9f:25:9f:88:ea:06:fb:a1:44:f8:72:
ff:0b:fc:0c:d9:a0:19:82:30:45:cd:47:fd:44:6b:d2:fb:96:
c6:00:86:78:1f:45:7c:a9:e9:35:54:18:62:44:3e:e7:e8:18:
8e:fc:83:37:46:50:00:8e:47:14:fb:12:5c:ed:84:5d:c9:e2:
1d:a9:08:62:56:ad:81:1b:e4:43:77:ae:95:7f:46:72:e3:0e:
d8:7c:dc:4e:a1:1f:fe:41:d3:c5:57:9a:91:52:21:2d:19:18:
30:da:79:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:07:38 2025 by rpki-client