Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
File: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft (raw, json)
Hash identifier: l0ckATMmHMC8lEFjKIf38Pvyc2LoqrAaciAZhXbMINA=
Subject key identifier: B4:3E:CE:71:75:E4:C1:2F:40:3D:15:0D:24:39:B9:3D:CF:53:C6:68
Authority key identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
Certificate issuer: /CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Certificate serial: 019921B0889F9958BCE38C88DA6474016DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
Manifest number: 0D8F
Signing time: Sun 07 Sep 2025 01:00:41 +0000
Manifest this update: Sun 07 Sep 2025 01:00:41 +0000
Manifest next update: Mon 08 Sep 2025 01:00:41 +0000
Files and hashes: 1: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl (hash: Z0BLV5NYLzRxrZfLrQH8VmxVFhb8Lu5JdYvFGZkf5ss=)
2: qWXcfiQuPBHMjlQKkWiAfKgYZzg.roa (hash: Wc2JW8a4VkUPRVVW0ORvuNA6sC5FJWmi5KtU2JoA5R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:88:9f:99:58:bc:e3:8c:88:da:64:74:01:6d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Validity
Not Before: Sep 7 01:00:41 2025 GMT
Not After : Sep 8 01:00:41 2025 GMT
Subject: CN=b43ece7175e4c12f403d150d2439b93dcf53c668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:1c:fd:ac:c5:2c:1c:c9:34:df:ca:c9:6f:
08:d6:31:92:9d:a6:5e:28:64:77:43:e8:ba:e2:16:
8e:cf:93:75:67:c2:2f:86:46:6d:c8:21:75:54:5b:
68:0e:44:2e:5b:57:b8:34:b5:73:df:55:a0:f5:51:
6c:81:0d:9f:18:2e:a7:09:b5:e7:ef:25:65:e2:c8:
e0:36:bd:7c:b3:76:e7:a8:f2:0e:8b:5d:89:df:d1:
78:d8:47:0d:37:05:30:7a:5d:bb:38:10:08:95:6a:
3f:9b:64:25:ea:fa:a8:5d:26:60:4a:90:91:43:8a:
fb:0f:01:f6:4b:87:47:95:b7:af:b2:b2:4e:01:f1:
0f:4b:3f:bd:78:96:f5:44:e4:9a:32:cc:81:f8:03:
7d:c0:1b:80:d1:f3:a8:8c:12:89:fd:cb:a7:7c:d6:
b5:ad:cf:ec:ec:ab:fb:ff:3e:62:3d:bd:fc:9f:77:
00:e0:7e:32:eb:d7:61:62:97:f7:98:81:a3:d9:68:
4d:39:ae:26:b6:7a:7c:6f:e8:72:e2:2f:0a:d4:c4:
76:03:d3:b6:dc:b7:c9:2f:d8:3b:8a:b7:a9:89:36:
74:8d:d6:2b:e6:d1:97:9f:6a:3c:c0:71:43:f7:01:
89:b6:40:a8:92:b7:8e:66:3b:2a:78:8b:8e:b4:74:
ed:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3E:CE:71:75:E4:C1:2F:40:3D:15:0D:24:39:B9:3D:CF:53:C6:68
X509v3 Authority Key Identifier:
keyid:F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:7d:f9:0b:b1:c4:1f:8f:7e:ef:0e:0d:5b:b5:e2:cf:43:1d:
f3:bf:e0:75:cc:73:81:09:4e:ce:49:11:36:f7:de:9d:39:a2:
74:e8:62:d1:31:ad:0c:6d:32:db:71:0b:24:d2:f5:2c:c2:7b:
64:e9:de:e3:1d:3b:ea:01:91:ae:0e:94:34:92:e1:e8:d0:78:
61:df:96:64:27:fe:d0:f5:62:e8:05:df:26:ea:25:fb:75:ad:
4f:f2:01:8d:d7:63:3e:e4:5f:cb:59:3b:1a:f0:0c:57:84:a1:
00:9b:68:19:fe:54:7b:df:62:b1:be:6e:ea:ba:8e:03:27:ce:
e3:1b:dc:f4:6c:13:cf:23:03:68:bd:d2:d8:23:4f:60:0b:bc:
a5:8b:b2:7c:51:5d:87:7f:72:15:06:aa:42:1e:3b:41:23:df:
b1:97:1c:e1:78:bf:37:2e:d8:4f:28:c0:e9:43:94:72:ed:3c:
03:2d:b2:6c:97:6b:cc:40:05:6a:d1:d1:95:6f:f8:59:b8:bf:
02:fc:d2:10:ef:45:a2:4d:fc:91:2b:56:ff:ff:e8:a1:28:95:
fe:50:8b:50:2b:e2:62:e5:af:ff:ee:92:28:3c:c6:db:3d:91:
02:28:62:e4:f1:28:8b:4e:7d:7f:ab:75:6a:dd:5f:3b:d1:2d:
c5:69:f3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:17 2025 by rpki-client