Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
File: 1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft (raw, json)
Hash identifier: tNDwqF0wX0iOymBGd1eKxN9051OUBtHruLYSwVKaSxc=
Subject key identifier: DA:6E:07:23:C6:F5:2F:27:92:8F:F5:66:12:19:6F:64:94:34:1E:CC
Authority key identifier: FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
Certificate issuer: /CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Certificate serial: 019922C39AD460904F7794CA303ED1F87F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
Manifest number: 0404
Signing time: Sun 07 Sep 2025 06:01:08 +0000
Manifest this update: Sun 07 Sep 2025 06:01:08 +0000
Manifest next update: Mon 08 Sep 2025 06:01:08 +0000
Files and hashes: 1: 1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl (hash: +GD93QNQBBNxOG7He8EE46DrGTAZFEC1C4AmAURwHDA=)
2: 8aAYV7l49GD-ZGSs5sQoL9HgMkI.roa (hash: D9xl0kFJAWKH2xA+S2m21lyse1ulC1gNGZHY3WDEYOY=)
3: KI3V-Dqox_RP-IrhT4OI-uI43p8.roa (hash: orZRl+1ZfvhmNjNIuH/XpcJiUoUbYgZ+2tdOL/2fIOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:9a:d4:60:90:4f:77:94:ca:30:3e:d1:f8:7f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Validity
Not Before: Sep 7 06:01:08 2025 GMT
Not After : Sep 8 06:01:08 2025 GMT
Subject: CN=da6e0723c6f52f27928ff56612196f6494341ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:a5:05:3f:80:cf:e8:5c:01:4d:70:42:8c:
41:ae:77:47:6c:bb:36:5c:e7:94:07:15:ce:a5:d4:
79:6e:03:ee:f3:32:3e:02:62:b7:75:ea:7f:2e:66:
42:4f:9e:5c:45:29:03:3b:54:d2:c6:93:c0:96:27:
f8:79:ee:6d:73:3c:77:55:81:32:61:91:27:fa:f5:
91:7b:b6:61:da:d9:5f:af:91:08:49:0b:8e:82:50:
84:74:3a:8d:c9:f6:df:e3:78:68:9c:5f:a2:83:e0:
d2:a2:76:ec:60:a3:a4:66:11:6a:d0:bc:1d:dc:c7:
ff:0b:8c:c7:59:c6:40:0f:8c:68:e0:6e:00:f0:d0:
da:ec:bc:fb:7d:e8:9d:52:d2:ba:0b:75:95:07:81:
cf:ac:f6:1c:dc:06:7a:bd:75:dd:31:45:5c:d6:03:
af:df:3a:1d:37:5d:1a:65:20:24:ee:0b:52:db:32:
76:b0:23:b5:c1:7c:15:10:31:bb:ea:ae:37:88:a7:
4a:98:77:4a:2e:dc:3b:89:17:65:8e:db:85:c9:5c:
45:69:66:a1:64:1b:39:5f:c1:8a:48:ca:4d:75:3d:
1b:97:42:06:e6:d9:2d:af:ff:4f:43:7b:d2:ff:c1:
78:31:1c:27:44:22:a8:2d:a0:c3:e5:e6:af:f2:2f:
ed:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6E:07:23:C6:F5:2F:27:92:8F:F5:66:12:19:6F:64:94:34:1E:CC
X509v3 Authority Key Identifier:
keyid:FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:92:52:5e:ca:83:8c:05:fb:1b:de:a9:8a:ee:78:0f:ef:cb:
9b:f3:ac:84:c6:75:1d:4a:a7:6d:63:cc:59:d6:71:9e:76:16:
09:db:ec:e9:cb:8c:47:c5:1c:a9:3f:12:dd:1c:20:bc:77:0e:
dc:33:67:b7:be:d6:59:6a:1e:0a:12:f6:34:94:85:9f:16:48:
b1:31:65:b8:b3:93:89:5c:14:8e:c6:da:09:30:f2:ae:6d:00:
89:6b:6b:47:dc:2f:76:c6:b2:9b:6f:cf:24:27:e1:db:68:cd:
09:db:10:06:b3:89:d3:69:52:27:b7:51:86:b1:50:3d:1d:2d:
a5:16:7e:35:f5:3a:11:56:08:e1:57:98:ab:32:3c:5a:d2:15:
f2:da:60:1f:a2:94:68:87:e2:25:4a:d4:1b:99:80:eb:a8:89:
8e:83:9b:11:d9:de:ff:e2:98:10:85:58:71:df:57:5e:ac:bc:
e8:41:ec:73:eb:1f:47:af:34:1e:90:6a:b3:ae:f1:d8:09:79:
e2:3d:0b:85:9c:d1:99:65:87:18:e0:3c:ef:f6:09:df:1b:28:
46:d8:de:1f:21:70:79:4b:55:26:cf:5a:db:f3:79:33:af:fa:
cf:9f:f3:3a:b8:d3:aa:d1:da:7a:6c:65:4d:e8:57:e4:ef:07:
e1:0b:3d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:47 2025 by rpki-client