Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
File: _IJp9C5GRBqx7ZlMifdHuqVU4yA.mft (raw, json)
Hash identifier: auIr/8dQqknp1KHR9q+5AnvwiZOpmWlyYHGioosXzPY=
Subject key identifier: A9:0C:B1:4B:CB:14:E2:9E:11:21:82:B9:00:4C:DE:BE:BE:9D:DC:BE
Authority key identifier: FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
Certificate issuer: /CN=fc8269f42e46441ab1ed994c89f747baa554e320
Certificate serial: 019923A0BED20AB81D5D39ECE54DA53730E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 10:02:41 +0000
Manifest this update: Sun 07 Sep 2025 10:02:41 +0000
Manifest next update: Mon 08 Sep 2025 10:02:41 +0000
Files and hashes: 1: _IJp9C5GRBqx7ZlMifdHuqVU4yA.crl (hash: Ccd3ems8T2YMm21Sfr3h2WRamnyKxyFplvvFoyf2rcQ=)
2: eJpm7vOqN0K6_-N5ZvgNj0bJa14.roa (hash: ZjNNKQofgKq/YUnavRCCV2cjVOzm2yU0UKdAMKHM4p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:be:d2:0a:b8:1d:5d:39:ec:e5:4d:a5:37:30:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8269f42e46441ab1ed994c89f747baa554e320
Validity
Not Before: Sep 7 10:02:41 2025 GMT
Not After : Sep 8 10:02:41 2025 GMT
Subject: CN=a90cb14bcb14e29e112182b9004cdebebe9ddcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:5e:b5:f2:27:a8:d1:d7:a5:6b:96:c4:be:
53:31:42:7c:24:24:52:34:5a:80:27:e5:1c:fb:fe:
5c:61:bf:56:d3:ae:ee:8b:6b:f8:a7:de:a5:07:c3:
12:4e:02:ac:f2:1e:3b:0a:03:3c:68:94:d3:36:ea:
5e:89:97:4e:e4:42:9d:1c:e1:c0:bf:82:56:8c:06:
c6:3d:fc:66:92:57:8d:57:e4:70:26:c8:6a:46:9b:
94:e0:b4:9d:ae:bf:82:79:94:d6:c5:3f:a4:23:84:
b8:ca:5e:9e:58:3a:19:4b:11:63:88:96:2b:4b:67:
80:20:d5:be:92:82:aa:d8:69:58:9a:23:5f:56:cf:
5e:8e:e5:cd:33:70:77:a4:64:a6:70:3f:f8:97:94:
95:31:86:a8:d9:2a:30:da:ab:32:c5:d1:b1:94:d1:
40:2b:ef:8f:c9:26:53:78:f4:f0:d5:cf:bd:ca:0c:
3b:e6:b4:ac:9f:7b:96:a5:ea:b1:85:0e:39:b0:b0:
60:d5:a3:56:14:68:da:85:7f:07:2f:ef:be:94:0b:
e4:2f:c4:a5:17:bb:bd:f0:f3:a1:47:5a:bd:a2:09:
40:0f:36:e2:55:fe:eb:86:20:9d:6f:4c:78:10:90:
e5:17:3b:46:ac:bb:b1:d9:41:a5:de:06:8c:f1:5f:
f1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0C:B1:4B:CB:14:E2:9E:11:21:82:B9:00:4C:DE:BE:BE:9D:DC:BE
X509v3 Authority Key Identifier:
keyid:FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:13:17:cd:e3:d9:e3:19:0e:2a:d6:2b:68:ad:a0:92:f2:45:
00:4f:81:a5:ad:de:76:05:9a:50:69:ea:77:ea:78:e3:90:06:
05:8f:5d:f6:44:e0:17:e8:a2:09:8f:a4:b6:3a:49:06:d8:9d:
72:63:32:2a:c5:62:7f:17:ef:79:c7:4a:23:ff:82:31:aa:49:
b0:5a:cd:68:e4:a8:c8:e4:15:82:7a:b6:d0:d4:4d:7e:ef:3d:
f3:59:3f:f4:4b:93:cf:ac:10:cd:a7:3e:10:c7:b8:08:ab:a1:
de:0a:29:7d:79:ea:f8:55:31:b2:8d:7c:6b:59:46:be:90:02:
06:34:38:ae:6e:e4:e3:dc:6e:84:c6:a5:cf:0b:dc:26:e5:85:
b1:46:94:7b:d0:05:6d:80:6e:b1:49:eb:87:ff:10:ab:41:3f:
bb:85:8c:e9:be:22:56:b4:ca:6f:a0:ee:82:a7:5f:38:88:f7:
e4:81:29:17:9d:70:d2:a3:24:dc:2b:6a:07:29:13:46:fd:e2:
86:47:2d:cd:59:49:e1:8a:75:92:68:b1:e7:44:06:3a:36:66:
b0:84:4b:9b:f0:fa:4e:c1:05:f4:8c:fe:ab:18:4b:b2:a7:f4:
69:34:3d:85:a9:52:62:a1:24:cf:2b:6f:ab:3e:39:97:cc:c3:
b9:3e:77:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:05 2025 by rpki-client