Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
File: v1M926H4p23i70lx_NUvlEHOCYk.mft (raw, json)
Hash identifier: 9hecDSNlgApx3xQ4eqDPgmH9CwokqQcXg30kFFQOGzE=
Subject key identifier: D0:EF:21:4A:C0:37:14:30:1B:64:14:6C:37:14:57:0D:A2:9C:D0:3B
Authority key identifier: BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
Certificate issuer: /CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Certificate serial: 019921B10C72009393288D7E77A66E5FB69F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
Manifest number: 10AC
Signing time: Sun 07 Sep 2025 01:01:15 +0000
Manifest this update: Sun 07 Sep 2025 01:01:15 +0000
Manifest next update: Mon 08 Sep 2025 01:01:15 +0000
Files and hashes: 1: v1M926H4p23i70lx_NUvlEHOCYk.crl (hash: +0exceQDAhxELdAtVyGdHD3kZDXaOwtH1r4FUZSbnpA=)
2: wIL-REFz4DYY-rRWvHtgF8VAa9w.roa (hash: 0FFPo6/uMpZSHo3dFvbnUBqikS2pyiKoisgVQpgN98I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:0c:72:00:93:93:28:8d:7e:77:a6:6e:5f:b6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Validity
Not Before: Sep 7 01:01:15 2025 GMT
Not After : Sep 8 01:01:15 2025 GMT
Subject: CN=d0ef214ac03714301b64146c3714570da29cd03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:db:da:15:fd:a1:b3:a1:5c:0f:c8:7d:50:56:
33:cc:17:db:88:2d:32:3a:15:65:48:90:e9:8a:e3:
20:8d:50:af:6c:3e:93:1e:68:75:5e:e3:01:10:b5:
e0:13:ba:2c:d9:34:99:ff:a0:5b:a4:b8:da:dd:e4:
95:29:cb:83:64:d8:e6:d9:7c:6c:c9:8f:ff:7c:d4:
42:29:da:c9:45:17:8c:de:3e:d9:2d:5c:d8:69:43:
dd:ba:57:d1:61:a1:29:71:f9:54:80:0b:18:31:b7:
7e:47:08:1a:51:cb:6b:50:30:1a:01:e2:fb:54:63:
b2:fa:53:8a:de:6d:65:b0:6c:39:0e:56:14:93:ba:
47:88:bb:df:05:71:65:89:41:6e:5e:d0:dc:ba:2e:
bd:fb:c0:e3:d3:89:2d:87:21:9b:78:b4:a5:4c:35:
f2:46:24:ed:16:4a:65:37:5c:56:95:f7:32:40:3c:
3e:90:34:4f:8b:77:22:97:c2:cc:d6:9a:fa:0a:2e:
85:c3:e6:03:ae:f3:ba:ce:93:40:88:8f:e7:b2:ab:
94:69:1b:29:0d:59:f7:fe:b1:3a:b9:4d:2e:56:01:
65:e8:20:f7:de:97:c7:87:85:27:16:0c:0d:1e:00:
3f:33:61:35:cc:56:a1:b7:44:d5:ac:e4:c6:11:0d:
b8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EF:21:4A:C0:37:14:30:1B:64:14:6C:37:14:57:0D:A2:9C:D0:3B
X509v3 Authority Key Identifier:
keyid:BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:41:24:8b:71:a5:dd:f4:83:3b:8e:22:d8:a6:53:49:b4:8e:
d2:5a:b7:cc:f1:9f:ca:00:5e:cb:e9:2c:32:eb:34:26:3b:64:
4b:6d:7b:fc:cd:4c:d9:85:a1:82:27:4f:88:22:a0:cc:0b:87:
94:3c:6c:d9:ef:a9:96:4a:4a:90:22:13:3e:39:3a:05:62:63:
0e:45:1e:9b:6e:d6:c9:55:ed:b9:a4:5f:d2:6b:a3:5b:84:43:
60:c9:bd:b4:7f:10:58:80:36:c3:e6:ad:2d:6c:0d:5b:49:99:
bc:88:db:a9:49:9e:0c:83:81:bb:8f:47:18:95:f8:3e:d1:2a:
50:87:11:e2:e0:8d:3d:9c:04:d9:30:f8:8e:b9:87:76:c9:76:
16:ce:a6:78:45:35:2a:1f:74:b6:66:85:f5:7e:4d:04:54:a2:
8a:4e:08:c4:15:66:92:07:dd:81:84:24:9e:55:c5:37:ec:2a:
cc:da:8e:88:4e:99:05:70:1c:fa:c4:90:6b:e2:dd:6e:9c:78:
cf:d0:5f:8f:7f:1f:d2:69:39:94:45:f2:d7:43:cb:0e:f8:2a:
a7:9d:be:fc:b7:4e:57:ba:97:bf:ad:2f:7f:9b:dc:c3:80:0e:
6c:48:a7:52:60:72:21:c8:bd:2d:52:5a:39:a5:a4:23:7b:bb:
a2:1d:d3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:42 2025 by rpki-client