Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
File: 1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft (raw, json)
Hash identifier: 8kEfBD2GMJBvp5/4tA5dPkp1r3iqUFrLrypuZNP3uMs=
Subject key identifier: 3E:2E:33:F4:44:0C:31:9F:04:83:6C:99:5F:97:13:48:1A:16:D5:B4
Authority key identifier: FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA
Certificate issuer: /CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
Certificate serial: 019923A0090411BA7238152D2B5940ACE17B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 10:01:54 +0000
Manifest this update: Sun 07 Sep 2025 10:01:54 +0000
Manifest next update: Mon 08 Sep 2025 10:01:54 +0000
Files and hashes: 1: 1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl (hash: TqVp6jOTLLkY3lQC0QR1Dmc7nqJroPgCZYvwB9uEza4=)
2: ptFjcgajS63JCcLXGOq-ydjfdTY.roa (hash: PYlnAX532RPi2NIssqwdJJhvieut4a5rLSlCnoPYE14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:09:04:11:ba:72:38:15:2d:2b:59:40:ac:e1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
Validity
Not Before: Sep 7 10:01:54 2025 GMT
Not After : Sep 8 10:01:54 2025 GMT
Subject: CN=3e2e33f4440c319f04836c995f9713481a16d5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:da:77:fe:52:0a:24:05:39:07:39:bf:01:
5f:58:b8:9c:d0:c0:cc:a9:be:04:cc:e2:34:44:c6:
2f:8d:36:d4:ab:84:8f:81:7b:83:fa:f6:6f:24:06:
74:19:31:38:c1:e7:ce:14:e8:c9:87:65:cc:01:34:
3d:f4:be:d5:0f:50:59:13:00:e0:f8:c7:bc:c4:da:
64:15:1c:93:5e:2d:29:3b:ab:3c:b9:04:10:e5:f0:
7c:52:8b:59:11:e9:1f:84:5e:1c:d2:5e:c5:e0:e3:
7b:e5:2a:82:1e:be:5f:c0:e7:d3:22:90:6d:8a:5e:
6a:aa:4c:54:11:b3:5f:35:bf:21:f1:17:c0:6a:5d:
74:2c:ae:23:ba:a4:b9:ef:a2:d8:2f:e2:00:c5:6e:
96:84:e1:93:69:e8:67:44:49:59:9f:00:e6:79:64:
22:24:4c:4b:ca:23:0b:10:b3:6e:37:be:09:f1:6c:
8d:cb:dc:8d:b3:74:37:51:1e:49:a1:97:70:2f:fb:
c6:70:a1:bc:43:eb:be:6a:61:e3:60:d9:89:27:34:
67:91:ce:a1:ce:ac:99:b3:30:45:8a:e3:d9:20:e1:
da:f8:c0:02:87:04:96:5b:b8:b7:51:0b:c6:e8:10:
5a:dd:97:7a:b7:3d:f7:82:5d:5b:19:6a:5e:92:d3:
e6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2E:33:F4:44:0C:31:9F:04:83:6C:99:5F:97:13:48:1A:16:D5:B4
X509v3 Authority Key Identifier:
keyid:FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:34:c1:e4:5a:d9:9c:26:fc:7f:eb:32:15:3e:ee:01:a3:f8:
15:cc:43:ae:8e:08:df:e6:22:7f:46:3c:02:98:4e:fe:69:94:
47:a0:60:56:68:ac:61:87:75:dc:2d:63:c1:8f:72:d1:f9:ec:
71:cd:7e:2c:ba:70:c0:ff:39:de:18:52:64:9e:d4:a9:c1:70:
4e:52:a4:bf:9e:68:c7:96:3d:70:d1:55:e9:fe:1e:2d:1c:68:
df:6c:36:a5:fa:35:aa:21:2c:d9:5a:b6:39:51:43:71:6b:85:
7d:49:28:49:24:99:32:de:bd:b1:d0:26:70:c9:23:ca:78:31:
db:a0:c3:a6:92:bf:aa:a3:ef:c3:48:17:b8:cb:af:47:d0:5c:
7f:cb:4f:cc:ea:13:f2:5d:01:8c:17:3e:c1:1d:c3:6c:11:9c:
57:5a:39:22:0a:db:ce:25:c3:19:75:dc:a4:39:18:cb:d9:ae:
d2:31:04:66:28:9b:9b:e7:50:28:2a:31:55:6b:f3:88:ec:f5:
c8:cc:73:18:dd:f9:51:97:ba:e1:e6:1e:d1:65:db:d5:2b:13:
f8:52:d9:ae:42:bb:fe:c0:f8:d4:a1:f3:46:cb:bf:d3:de:60:
89:c8:b8:57:eb:51:37:e0:5d:87:49:48:31:a6:85:e6:fb:ea:
f2:7d:25:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:14 2025 by rpki-client