Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
File: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft (raw, json)
Hash identifier: Ka5v0EmGVRCZPNvoZ6cHG63AxV4B9P36/uwFKhqs/5A=
Subject key identifier: C0:CF:87:AB:B5:2C:84:D1:2B:05:19:3F:E2:53:15:3E:CF:3B:99:57
Authority key identifier: F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
Certificate issuer: /CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Certificate serial: 019938DE53AA8BFAC1B18B54DF73F69F0904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
Manifest number: 0628
Signing time: Thu 11 Sep 2025 13:01:58 +0000
Manifest this update: Thu 11 Sep 2025 13:01:58 +0000
Manifest next update: Fri 12 Sep 2025 13:01:58 +0000
Files and hashes: 1: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl (hash: at2Wnfbg26e7bHr055xI+VV7xj8iINZ3QGGuy+tWGY4=)
2: iAnZ5coAUkQIezSEoSc6B6_I7O4.roa (hash: 3KAUfgARN/Q5cvGPYfJlDhSfAV6Du1VfpKukfXJreCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:de:53:aa:8b:fa:c1:b1:8b:54:df:73:f6:9f:09:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Validity
Not Before: Sep 11 13:01:58 2025 GMT
Not After : Sep 12 13:01:58 2025 GMT
Subject: CN=c0cf87abb52c84d12b05193fe253153ecf3b9957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2c:4f:64:f3:7b:50:9e:64:3c:4b:ee:99:d4:
79:a4:7b:1d:e0:8e:85:92:8e:d1:ad:58:df:1e:76:
2b:ee:d3:d4:12:f1:9c:71:9f:26:0c:4d:15:cc:9f:
c6:c7:9d:63:f5:a6:f2:b1:99:35:30:0d:ad:f9:3b:
34:72:8c:9e:ca:31:b3:d0:25:74:a9:4b:05:8a:3c:
44:73:d4:ff:44:c4:22:7a:ec:b9:4a:04:b7:e8:17:
f3:54:9d:29:00:f7:86:ba:9f:d7:23:6a:c7:b3:19:
a1:ff:8b:09:e2:02:94:af:b8:5e:0d:0b:17:2d:69:
c4:79:1e:7a:30:dd:a7:2d:98:66:a6:5a:6c:54:8a:
dd:3f:ef:b7:56:da:0b:ad:ce:da:25:59:de:9a:1c:
22:1a:7b:41:92:66:bf:5e:2c:f4:73:55:a6:0e:f3:
e7:2e:4c:66:a1:71:21:db:43:ff:2e:4d:1d:9e:c5:
38:8f:3c:0a:6e:8c:b6:47:98:1e:42:86:a7:bb:b8:
1a:02:b9:70:8e:7d:5d:ab:2b:6f:69:fc:6a:55:57:
25:e0:62:56:73:5f:40:9f:c8:f9:3b:b6:f4:6a:71:
9b:0c:e6:ab:fe:a5:c9:33:e9:e7:bc:23:c2:12:4e:
d3:81:db:16:76:c2:ac:c0:ad:10:85:39:e5:00:5b:
74:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CF:87:AB:B5:2C:84:D1:2B:05:19:3F:E2:53:15:3E:CF:3B:99:57
X509v3 Authority Key Identifier:
keyid:F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2d:f6:0e:6c:60:c3:5e:35:bc:3c:cf:77:42:cb:a0:b0:03:
3d:f2:22:75:6a:13:4b:03:e5:8e:4d:f7:3c:a9:06:17:aa:57:
74:c2:7e:6a:8d:14:ff:0b:4f:1f:48:3c:55:ce:ab:f7:cf:90:
ec:22:d3:0a:bd:36:ad:5f:0a:17:1c:d6:cb:5d:37:e0:62:64:
50:5b:1c:37:30:21:a3:43:64:c3:1f:82:88:6c:5a:61:bb:fa:
54:0a:9b:fa:b7:8f:d8:3d:50:19:65:2f:ae:95:d8:f7:da:ca:
3d:35:cf:64:77:fb:09:2a:97:5b:29:5e:af:86:d4:2a:ef:bf:
36:22:3a:7a:dc:0b:cc:25:ed:87:ed:1e:db:b9:f2:d3:47:1f:
bd:7d:f1:29:6e:fb:30:4a:38:3a:df:9c:0b:c9:dd:a8:67:b3:
9c:35:3b:75:84:33:a6:6a:a0:f7:ab:c5:be:fc:97:68:b2:fc:
1e:20:0a:60:2b:d5:6c:3d:f5:79:a0:6d:fb:eb:ac:ae:7b:c5:
87:0e:7b:9c:f9:7e:d8:c6:70:50:2f:20:03:ea:fb:33:7c:c2:
0c:79:50:1d:e7:2e:fa:a8:ff:f8:ba:e9:7d:64:b4:33:1b:60:
44:f3:e8:26:07:1c:66:53:f3:d1:0b:02:e1:eb:84:dc:41:44:
dd:5f:df:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 16:34:38 2025 by rpki-client