Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
File: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft (raw, json)
Hash identifier: uruSSEZ15FnxRnTAwAXWFQunLyCwnPPrFcuA8t2P6+k=
Subject key identifier: D9:FE:56:B2:04:8D:E1:3E:F9:94:82:AD:E6:60:18:CD:75:BD:1D:CB
Authority key identifier: F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
Certificate issuer: /CN=f83faec93d403f3713823fa39c7d27c62e921471
Certificate serial: 0199240D24DAE2EAD3F0B9A2FBF9B4766EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 12:01:05 +0000
Manifest this update: Sun 07 Sep 2025 12:01:05 +0000
Manifest next update: Mon 08 Sep 2025 12:01:05 +0000
Files and hashes: 1: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl (hash: +7cewlQRambzR6BeBHhSoeEUZjSBwrY7m2Vf9xm7fCo=)
2: 72LdJQQ_XzgvUHseE2sST5RXq_4.roa (hash: kR5iFtf9EPBMZTsPkYiIRyrCHP6r5lMPF7yM/ECFgng=)
3: lput6Z6vJPdy08jemWLG6WZi0oE.roa (hash: muWWXK/VbX5K0RlIXjBqeo4nzxA9w0OVj29rsOGgE/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:24:da:e2:ea:d3:f0:b9:a2:fb:f9:b4:76:6e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83faec93d403f3713823fa39c7d27c62e921471
Validity
Not Before: Sep 7 12:01:05 2025 GMT
Not After : Sep 8 12:01:05 2025 GMT
Subject: CN=d9fe56b2048de13ef99482ade66018cd75bd1dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1c:15:84:79:79:5d:17:f1:c1:ae:6b:f9:7e:
1a:9d:c9:62:c7:86:b4:4b:50:9f:10:de:ff:8f:01:
17:a8:f6:d5:12:55:71:d5:0d:cb:2e:21:c1:5f:ec:
6e:5c:ca:c5:1c:50:e6:32:0d:e4:fc:4c:ac:4a:b5:
61:99:07:bb:60:c3:3d:c5:20:32:a2:29:04:83:5b:
16:13:3f:99:ed:e6:7d:e2:42:bb:f8:bb:2e:8b:11:
16:56:12:82:7b:e6:13:79:d5:e7:be:f7:ab:5b:ea:
7c:94:16:09:39:80:7c:93:97:8f:48:b7:07:91:8b:
89:74:29:c7:0a:33:99:fa:a7:b8:df:04:56:0e:7d:
81:69:61:00:e1:21:8f:4a:0a:e8:26:ab:02:0d:0b:
73:c6:99:91:8b:49:0a:e3:40:ba:6a:e4:c2:d6:fa:
06:d8:74:5f:00:93:75:8a:a6:07:49:95:9e:ac:89:
94:8a:9d:a1:8e:8e:cc:91:69:cc:bb:e8:37:95:5c:
07:3e:dd:91:ab:48:84:33:26:b0:25:6c:cc:8e:06:
3a:01:fb:24:15:d5:41:1f:78:10:40:43:1f:f8:f4:
0b:36:f8:26:e0:6f:2b:23:8f:5e:3e:4a:48:a7:00:
f3:a4:33:a0:77:42:e7:66:9f:32:93:0d:d2:b1:db:
b6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FE:56:B2:04:8D:E1:3E:F9:94:82:AD:E6:60:18:CD:75:BD:1D:CB
X509v3 Authority Key Identifier:
keyid:F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f4:78:6c:82:db:18:2b:19:c4:79:db:c3:d8:69:f9:a9:22:0d:
aa:b9:07:ae:66:98:de:bf:0e:0c:df:80:4d:d1:ba:32:d6:9f:
76:09:b0:82:6c:1e:f0:8c:3a:08:2b:a3:fb:9e:b3:21:a9:be:
34:55:0b:2b:7b:f5:28:7e:68:e8:e2:c6:86:72:ea:5d:d8:08:
18:59:99:8b:01:c2:af:18:dc:d7:ac:80:27:e8:9f:91:1f:3a:
c6:e2:06:30:fa:e5:89:99:8c:44:02:15:79:5e:64:06:c6:1f:
3c:de:3c:54:3e:a1:c1:6a:f5:31:04:12:c1:0b:29:c4:85:56:
65:36:04:09:0f:7f:3b:74:96:b1:8f:57:a9:36:e0:04:f8:d3:
ee:4f:1d:0f:ef:32:56:9b:4c:a4:49:d0:88:a7:fb:37:58:21:
26:04:f8:63:55:2b:6e:06:73:5b:7d:9b:32:c9:c8:fc:5f:25:
f2:9d:e8:a1:1a:2b:44:25:12:43:f3:bd:6b:a8:bc:82:69:95:
79:1c:bd:e8:cc:7e:b9:df:2e:55:0c:d5:b1:6d:58:72:28:6c:
84:35:21:c5:41:20:0c:c2:5e:bf:89:d4:f1:5b:21:63:5d:18:
10:ee:a6:92:4c:73:a9:8c:1f:20:3b:da:39:bb:56:b1:93:ef:
05:87:0d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:53:36 2025 by rpki-client