Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
File: 1P97rGRNWVZyLl4YOiL7FFXnVUY.mft (raw, json)
Hash identifier: ZYFkJBhJi82US7566Vs3mv80TvOoYD40itrnOQNuKqE=
Subject key identifier: 05:63:8B:96:1D:67:C5:BD:7F:6C:18:F8:13:B8:7C:45:B0:2E:7E:3C
Authority key identifier: D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
Certificate issuer: /CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Certificate serial: 0199221E91CBBAE8D8EDB5D16FD8212DDCF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
Manifest number: 02FD
Signing time: Sun 07 Sep 2025 03:00:52 +0000
Manifest this update: Sun 07 Sep 2025 03:00:52 +0000
Manifest next update: Mon 08 Sep 2025 03:00:52 +0000
Files and hashes: 1: 1P97rGRNWVZyLl4YOiL7FFXnVUY.crl (hash: qTdi/Ud/pP3btlfbBNDy8QDJX/X3rncy+jyKSsePJxQ=)
2: BBrcZolorsy-tffprBkzb6kzxjw.roa (hash: LubTLYd6O/FVL7Y6tbf5xWEWtjZWCQG4GmiGhTzuDxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:91:cb:ba:e8:d8:ed:b5:d1:6f:d8:21:2d:dc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Validity
Not Before: Sep 7 03:00:52 2025 GMT
Not After : Sep 8 03:00:52 2025 GMT
Subject: CN=05638b961d67c5bd7f6c18f813b87c45b02e7e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3c:17:bd:b6:77:4e:64:cf:13:11:72:e3:2c:
9f:f5:72:aa:0f:e3:ab:c9:3a:f3:ec:4a:d0:36:e8:
d9:36:cb:c0:cc:95:a4:e2:cb:72:94:9d:ab:4b:b4:
c8:91:18:64:5a:0a:4e:da:55:a0:46:a2:be:cc:e8:
16:70:eb:b2:4b:e9:d9:23:fe:05:7a:c8:28:71:83:
0e:3d:96:50:38:91:ba:de:af:48:a6:18:7c:b0:c3:
13:0e:c1:b2:d7:d1:f1:34:b6:31:ca:ab:e4:ff:74:
07:06:67:5c:4f:66:99:45:66:28:0f:c2:a4:b5:7d:
ac:e3:bc:57:9a:d4:02:27:f1:7d:90:9f:58:35:f9:
8a:f0:9a:4d:e0:42:a1:4d:a3:1c:a1:57:e5:0f:22:
b2:7d:90:74:1d:a7:81:3e:87:a7:4f:47:98:69:1c:
c0:06:32:7b:76:7e:5f:0b:1e:7e:23:94:a6:06:1b:
cb:23:71:f3:c1:af:27:d9:e0:7e:5d:94:51:f2:e2:
02:bd:40:23:0f:43:8f:c3:60:09:9d:0b:3d:a4:a2:
e7:3a:61:c0:3e:e2:f0:8f:7f:0e:51:52:f9:f6:08:
22:cb:08:15:3b:aa:fd:22:b4:1c:99:7c:69:66:f8:
8b:19:0a:81:7d:9e:91:92:c0:5f:d5:d9:a2:53:0e:
8a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:63:8B:96:1D:67:C5:BD:7F:6C:18:F8:13:B8:7C:45:B0:2E:7E:3C
X509v3 Authority Key Identifier:
keyid:D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:70:ad:be:2c:cd:ea:c3:17:c3:7e:23:45:19:ef:68:f6:fb:
de:79:c7:50:e5:e6:c5:cd:a3:70:53:fc:99:ac:a2:a7:fd:7d:
ce:e2:3d:8d:86:8b:be:ea:fb:a7:0e:e9:de:4e:86:f0:b4:db:
eb:06:37:79:65:81:26:5d:3b:3e:e0:06:a8:5d:5a:1e:94:8e:
d9:0c:4c:35:51:e8:90:ec:1e:a2:e8:fa:68:b2:09:49:0a:dc:
61:26:ac:cc:9e:15:84:aa:4b:f4:df:df:b8:cb:4a:12:52:ed:
dc:34:71:49:be:59:92:ed:87:c6:bd:7d:87:31:53:59:eb:f1:
c0:e6:33:33:d2:e3:9a:fd:25:85:fb:b4:01:f2:58:9f:8f:4c:
80:64:35:58:43:f8:cb:a2:94:61:b5:94:8d:d8:39:7f:4d:24:
ef:3d:a3:55:8f:9e:2c:b5:54:67:62:c3:7b:2c:30:f9:01:0a:
b9:b3:97:cd:2f:50:0f:38:2d:18:af:03:76:8b:6a:0a:65:65:
73:e0:5d:d3:4e:da:98:60:76:d6:0f:2a:7a:7b:64:29:3e:b2:
93:1a:9d:65:b7:a5:b3:45:0d:4c:43:f7:56:b9:5a:f5:10:fe:
8a:61:34:8d:31:8f:52:9d:59:3c:22:cf:2b:ff:15:82:7d:67:
64:21:56:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:17:36 2025 by rpki-client