Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
File: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft (raw, json)
Hash identifier: 8Vk4RVaqtnm2JUcQOxNdN4H+yosl2SEqnsv1EDAG+Gg=
Subject key identifier: 43:6C:14:EA:71:6C:F0:76:5F:4E:2C:3A:CF:85:AD:43:A6:42:34:0C
Authority key identifier: FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
Certificate issuer: /CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Certificate serial: 01993613414E0BA11C35C77C14174DE80F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
Manifest number: 0402
Signing time: Thu 11 Sep 2025 00:00:55 +0000
Manifest this update: Thu 11 Sep 2025 00:00:55 +0000
Manifest next update: Fri 12 Sep 2025 00:00:55 +0000
Files and hashes: 1: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl (hash: sYX4Oaw/omfU1Az6tQn9cWqAmJWYw4N6dVZX6QRDJtE=)
2: _Hfi64A6Hl1aWvf9UFKs9bEjNC0.roa (hash: nJS1uo48whuK1gGV1XTB4odY1z3nztNhEHWCw4wMlx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:13:41:4e:0b:a1:1c:35:c7:7c:14:17:4d:e8:0f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Validity
Not Before: Sep 11 00:00:55 2025 GMT
Not After : Sep 12 00:00:55 2025 GMT
Subject: CN=436c14ea716cf0765f4e2c3acf85ad43a642340c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:49:75:de:11:e6:7b:64:ae:f6:df:c8:04:ee:
8c:92:3a:c9:1b:00:84:bf:18:27:dd:79:c2:3b:52:
5d:b3:11:c5:a1:19:b6:72:f6:79:35:01:4b:1f:96:
c3:b3:c8:07:de:9b:e0:71:16:e5:6d:bb:51:42:4d:
7d:e6:98:3d:df:37:68:a3:5e:8a:34:7c:3b:a7:e6:
4b:13:20:f0:c3:95:a4:31:0a:e5:f2:d1:7d:64:f5:
a7:d6:9f:79:2d:91:bb:ec:60:5c:9e:81:d6:49:e4:
b6:00:04:79:cc:7e:5b:ce:b0:f8:69:ca:fd:fe:7e:
2f:8f:1c:38:d8:47:03:12:50:1c:37:31:a9:30:80:
3b:22:6f:63:dc:e4:54:be:58:f7:64:8b:50:93:f9:
90:e5:da:f6:43:12:4e:f5:dd:c1:c9:ce:cc:4f:72:
97:55:a7:a8:49:85:2b:59:80:82:45:59:19:af:f8:
74:90:bc:1f:d4:4c:4b:8f:a9:5c:d8:4c:28:6d:b3:
03:38:c8:9b:c7:c4:f6:ee:51:00:16:59:3c:29:1d:
21:e5:d9:bd:51:8c:9d:ba:17:da:d0:cb:35:1c:0a:
3a:3b:cb:be:a0:59:74:bd:80:8d:7a:34:f7:9d:5d:
bf:ee:4a:b8:f8:fb:5b:17:84:03:a7:47:6a:54:06:
3a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6C:14:EA:71:6C:F0:76:5F:4E:2C:3A:CF:85:AD:43:A6:42:34:0C
X509v3 Authority Key Identifier:
keyid:FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:98:c7:31:b9:d5:9a:85:26:4b:99:85:45:bc:f1:5f:a3:1b:
dd:43:6e:42:ef:6a:3d:75:fa:c5:6e:03:3c:28:40:47:b8:5e:
b0:4a:71:53:7b:fa:c6:9f:71:cf:f2:15:fd:a0:ab:3d:cf:ae:
cc:0b:0d:2d:23:75:81:fc:98:3f:90:51:0f:4a:2e:67:10:1b:
19:96:93:a4:b5:90:a8:54:3f:2e:2d:57:3a:05:0c:2b:6b:86:
8b:9c:cb:3e:c3:84:6e:da:ed:0a:fe:9b:11:b3:c4:a3:77:6c:
88:21:08:5d:e7:40:a7:55:7f:74:a4:ff:09:38:6e:52:48:72:
8c:d7:1b:f8:40:c8:ef:5c:75:98:12:11:ee:de:be:ed:47:91:
16:7a:4d:0b:9f:68:89:4f:1e:68:28:89:52:99:d1:f8:66:9a:
5c:c2:c7:4f:63:e9:a3:12:94:90:82:72:7b:19:14:de:9f:e4:
9d:9d:ea:d8:b0:d3:90:c5:1d:f3:b4:51:3c:c6:f3:13:52:42:
7c:63:b8:b9:ad:06:bf:74:aa:b8:70:e8:4a:fa:cc:a2:df:e5:
8c:47:70:32:58:0e:e4:59:5a:12:b0:f5:55:e9:39:07:34:d1:
03:4b:fc:88:50:2a:ba:3f:88:00:7e:3b:29:31:cb:02:ad:49:
26:21:1d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:19:06 2025 by rpki-client