Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
File: 1-J31Ykj5d3-iLV2mwEtfszKks1A.mft (raw, json)
Hash identifier: kb/xlrVP5ExOMUkb4GYOcsnBJrJ+hL4btTQr6EEWBfE=
Subject key identifier: 56:41:DF:27:4D:62:11:D0:9F:B5:0A:C6:6F:F7:95:81:BC:EC:D7:AD
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial: 01991AD362037DCCF8BA90786B1F380EE0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
Manifest number: 166E
Signing time: Fri 05 Sep 2025 17:01:24 +0000
Manifest this update: Fri 05 Sep 2025 17:01:24 +0000
Manifest next update: Sat 06 Sep 2025 17:01:24 +0000
Files and hashes: 1: 1-J31Ykj5d3-iLV2mwEtfszKks1A.crl (hash: DGCTOymynyfuCGZO/ROgMVXoISYwUEZ47Qd+pCe1Wmc=)
2: abknUv3T7rts3ssSLjO_9zGCj5A.roa (hash: ZduEHW/sDPXFbLZot8EAZU2ihlH8afniaTCGOengHk4=)
3: mP8GRv_PEh-gTNQakjVb0KSi0yk.roa (hash: lWbTaNbVD/rMCUMDyYuELByYeBZBnfrpjytIyODTMiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1a:d3:62:03:7d:cc:f8:ba:90:78:6b:1f:38:0e:e0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Validity
Not Before: Sep 5 17:01:24 2025 GMT
Not After : Sep 6 17:01:24 2025 GMT
Subject: CN=5641df274d6211d09fb50ac66ff79581bcecd7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c1:a7:97:ca:5e:5d:6e:fe:da:50:a2:2a:9f:
ae:00:34:1e:db:81:04:1a:96:f8:2d:e5:74:a0:40:
0c:db:66:da:73:37:e0:2c:b0:65:e2:bd:af:06:76:
60:3e:9f:0e:b9:75:5d:e7:af:ad:69:30:8f:c3:bf:
43:2d:64:7a:a5:f3:7d:77:0a:05:b0:ae:6b:c9:e3:
0e:85:5f:ec:2c:8f:f5:a4:3a:e6:a1:3d:e4:b5:bb:
0c:8d:c4:b2:00:d3:59:f9:04:ac:1a:4f:5a:13:ab:
17:ab:fb:52:9a:49:a9:c6:3e:7c:d7:96:cf:f1:6e:
45:0c:89:c6:0f:4c:ea:7e:0a:9e:30:5e:5d:44:a5:
0a:0e:ca:54:f4:7c:4c:93:61:f1:99:88:ef:77:3e:
39:8b:91:8a:62:3d:0c:3f:a2:36:58:62:db:a2:84:
32:1d:59:1b:ee:b4:89:33:b9:e4:5b:45:af:bb:d0:
a1:ba:e5:27:c0:47:56:10:b5:4c:91:39:39:5e:d1:
d7:7b:e8:03:26:3e:ec:ad:83:f6:02:ee:cd:cf:b1:
9f:c0:a6:5d:b4:b6:08:d0:46:c0:0d:68:c3:42:c6:
34:48:d8:67:55:d9:59:94:96:97:66:74:19:58:c7:
d1:ef:b5:6f:f6:fa:c8:c3:db:2c:c5:42:26:e9:46:
1b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:41:DF:27:4D:62:11:D0:9F:B5:0A:C6:6F:F7:95:81:BC:EC:D7:AD
X509v3 Authority Key Identifier:
keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d2:0d:bb:e1:f6:06:f7:df:db:ee:ae:4b:aa:29:3b:ec:f8:
b7:fc:07:50:2c:8a:29:d8:ae:bd:a4:15:9d:4f:c4:7d:ec:d4:
48:35:25:64:d1:d5:cd:29:80:2b:62:c6:2c:25:75:8c:04:38:
8f:b6:82:c0:8a:6d:0d:2e:2b:07:69:01:be:b4:53:1f:84:33:
6d:c5:94:4b:71:24:e6:f7:ac:f4:82:15:25:71:dd:a2:c3:96:
52:fd:73:36:38:ff:72:8b:ce:da:9a:f6:7f:b2:93:76:a0:89:
c8:ac:95:9a:0d:00:a5:f2:1a:55:5d:15:d7:39:13:85:26:65:
c8:08:a5:49:72:9c:f5:e5:6d:0a:50:54:38:7e:8a:07:11:7d:
9c:57:f9:8b:fb:40:a8:37:ad:fb:e4:6a:5e:2f:5c:1e:6d:1a:
89:86:b1:ed:6a:bc:9a:17:9d:fd:10:03:1f:86:83:c5:e5:d7:
e6:ea:56:5d:80:51:08:92:df:e3:3a:db:14:3a:db:13:bb:8d:
6d:f2:f7:57:2f:52:e2:12:d5:5e:f6:89:f8:1c:e0:e8:cc:bc:
da:8c:fa:c3:24:62:da:17:d5:15:f4:33:a8:ef:84:2e:5d:21:
28:e4:ba:b7:50:35:e5:15:0f:41:d3:06:2e:9f:59:c2:ac:ec:
e4:72:e7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 19:35:50 2025 by rpki-client