Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
File: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft (raw, json)
Hash identifier: treYKL1+SEpXf/cH0KVvxNgo8t21vpdGAmfaUx+Eozw=
Subject key identifier: F0:65:F4:3B:16:50:DB:33:3C:E4:DD:C6:07:AD:A8:C0:08:5B:AA:D4
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 0199326D112EBF8D5BEA5B109DFE005E7C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
Manifest number: 16A5
Signing time: Wed 10 Sep 2025 07:00:32 +0000
Manifest this update: Wed 10 Sep 2025 07:00:32 +0000
Manifest next update: Thu 11 Sep 2025 07:00:32 +0000
Files and hashes: 1: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl (hash: YAOubCP6mcTdivxdLw+R3cXf530tleBTY61xc86aqCU=)
2: 6bP2Hbq7B8FfgSpm-g0RjnRG09M.roa (hash: dhy3foa2kdGd9tWYMEzVZ1K79M1Cxv3oKtbrCE9/V7s=)
3: 9rPnc621PCZSzvwMRaLBWF8yQec.roa (hash: aB0fVKMxCD/z6BkZVG11TiYmDJy+6wMvki78RDMmYco=)
4: DdbBxkSpqv27jL5VCitevUUKtGo.roa (hash: W2qQ5Ka9ZbfjONO7pHLlOm1UmxsrTkoa9epsQmZhKZM=)
5: bE8Ho3jzn5ez3wNgEgsfXEX5CVE.roa (hash: eJjvEgOEH8QmE+x4otf72HZmDOo9rzbz4V41257+u/g=)
6: gpzNMZcwo35-oTXOI3kYk3hJ2t8.roa (hash: ngODPWQb3vvd7XrB/GBFFEdeU0LiXPVPYCwgvVTHlW8=)
7: nx9moqlHgSMsf9HgtOFQ0KmEqlE.roa (hash: WzE9rCGNMfQ+mIxm9E1YIp9r6V0lkGRucRNG6aY0mCs=)
8: rIf0kB8Rc3IRATRBayI1xPvP3QA.roa (hash: Rx69uj0bTYsl5V2DHt7vMOyICCeb975OsfQSSz+LlmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:11:2e:bf:8d:5b:ea:5b:10:9d:fe:00:5e:7c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Sep 10 07:00:32 2025 GMT
Not After : Sep 11 07:00:32 2025 GMT
Subject: CN=f065f43b1650db333ce4ddc607ada8c0085baad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ab:a1:20:a4:ea:11:00:70:34:96:5d:f8:8d:
b0:4f:e2:fd:61:e7:9a:5a:c7:e0:98:fb:39:73:9b:
a8:14:39:5e:f4:21:14:f0:27:13:34:1b:cf:6b:9d:
3d:41:31:df:99:e2:9b:51:70:00:cd:45:d3:1a:f0:
2d:b1:9f:bf:a3:94:56:c0:d6:c5:c7:1b:af:2a:84:
b8:46:5a:f8:53:31:43:79:07:d0:ee:28:b9:d3:d0:
58:12:4c:17:b9:b8:12:15:23:0e:99:c8:92:6a:1e:
20:ab:05:0f:52:d2:a7:3f:25:a8:63:87:30:15:d1:
17:60:fd:e9:79:15:d1:c4:8d:80:40:00:3d:df:38:
0c:a9:0e:a2:9b:29:4d:34:23:96:06:91:5a:c8:c2:
11:20:96:75:2a:66:79:8a:5f:fd:e6:a1:d3:d2:e0:
1a:b6:e4:4c:35:57:04:84:0e:2c:2d:2a:2d:e0:fe:
61:8e:22:ca:11:84:c2:49:65:86:3b:a8:ab:8f:59:
67:6f:61:86:6f:90:e1:f0:57:a1:0e:92:82:8e:0b:
e4:9e:ad:cd:80:76:04:99:a7:1d:c7:bb:03:dd:9a:
14:d3:98:9c:11:5c:b8:92:df:13:d0:e0:c3:56:1d:
29:b8:3d:ba:58:9d:56:82:3d:db:71:15:e1:b7:2f:
9f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:65:F4:3B:16:50:DB:33:3C:E4:DD:C6:07:AD:A8:C0:08:5B:AA:D4
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:2b:d3:54:9d:9f:18:e6:80:53:0f:9f:fc:03:2b:d1:01:33:
12:44:26:31:0e:65:e0:a0:70:aa:e3:b0:3f:12:a4:b2:ad:81:
d8:9c:b4:62:42:9e:f4:80:82:85:a0:8c:b2:60:89:20:5e:41:
aa:71:17:67:d5:1d:a9:c6:4a:25:6b:ed:e3:45:66:03:21:27:
aa:d8:fb:52:b2:3b:30:e7:60:d6:5f:a8:c8:5d:5f:34:ad:b2:
e6:7a:45:5a:6c:ea:53:9d:30:fd:d4:88:9d:47:57:66:30:10:
0c:b3:3b:40:e2:ab:fe:32:cb:1a:0a:eb:f5:e8:03:c3:92:e6:
ff:f1:70:17:72:04:a4:d3:be:d9:e0:53:7a:30:96:5e:8c:c9:
11:25:da:9c:79:02:f3:d1:51:c6:61:b2:33:bc:09:c2:7f:3b:
dd:cc:12:dd:1e:76:89:41:48:29:6a:cd:96:39:f8:48:11:d4:
32:83:9a:12:b1:65:6c:e3:03:0d:f9:b8:4f:00:95:b0:bc:f1:
8b:59:ab:b7:9b:26:76:8f:22:cb:e6:99:90:55:10:72:73:b6:
fe:38:04:79:fc:61:44:65:11:7f:3d:4c:6c:61:1c:06:83:12:
03:a4:eb:0b:e8:50:9c:f2:b3:b1:0a:ca:39:5f:ef:6c:41:7a:
c2:87:3a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:28:02 2025 by rpki-client