Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
File: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft (raw, json)
Hash identifier: xw+0P3ystNIMX/QKKmqYbNszB0FJPKfKO2HXJo5VP6w=
Subject key identifier: 3B:00:63:5E:6C:27:9B:2F:09:5B:96:AE:FE:98:4C:CD:4C:C5:6A:B0
Authority key identifier: D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
Certificate issuer: /CN=d54b82d719144002051da0f88c768de440ac20bd
Certificate serial: 0199240C9E2281F7A2B4FAE7040D3CC2A081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 12:00:30 +0000
Manifest this update: Sun 07 Sep 2025 12:00:30 +0000
Manifest next update: Mon 08 Sep 2025 12:00:30 +0000
Files and hashes: 1: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl (hash: /jhoikSou2AQhHKrQk1IPzz0/16HnkZ9k7vp3mlhz1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:9e:22:81:f7:a2:b4:fa:e7:04:0d:3c:c2:a0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d54b82d719144002051da0f88c768de440ac20bd
Validity
Not Before: Sep 7 12:00:30 2025 GMT
Not After : Sep 8 12:00:30 2025 GMT
Subject: CN=3b00635e6c279b2f095b96aefe984ccd4cc56ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:22:68:04:e4:ff:40:4d:37:e0:03:a7:f5:de:
3c:82:80:c8:c9:d9:1a:ee:c2:d0:f2:a1:d3:60:1d:
a1:23:93:35:0d:a4:1e:1f:d2:25:b2:40:7e:df:c0:
82:41:56:43:ce:57:5c:6b:46:e6:5b:f8:bf:d2:19:
1c:8e:8b:b6:79:4e:20:cc:43:05:b4:13:16:4f:11:
06:39:1c:05:73:1b:e0:28:6a:e6:54:07:68:c6:88:
93:da:db:6b:3d:0c:e3:bf:27:f5:6a:bf:c8:91:b5:
42:ea:85:f0:ed:46:0c:fc:99:04:f8:41:39:3b:3e:
49:50:87:5f:e9:6c:37:b0:89:8a:7f:d6:15:ca:65:
cf:73:5b:72:70:cf:bf:f4:fb:5f:27:20:9c:96:8e:
c6:dc:a7:b1:a6:73:20:76:eb:10:58:4d:fe:d8:09:
a0:2f:bb:7b:89:0e:32:88:6d:27:80:58:ba:c0:a4:
71:af:c3:2e:55:e1:14:b3:58:13:73:d2:9a:8c:42:
9a:2b:3a:90:88:a6:75:b8:77:4f:92:c4:b2:aa:6e:
4d:db:03:12:d0:9f:27:fc:b0:d8:a2:cc:1e:61:ec:
f3:27:59:1f:5e:a2:7a:ba:df:b8:ad:fb:41:db:cc:
4c:e7:bc:19:78:7d:0d:c5:21:95:78:c7:e4:76:e4:
37:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:00:63:5E:6C:27:9B:2F:09:5B:96:AE:FE:98:4C:CD:4C:C5:6A:B0
X509v3 Authority Key Identifier:
keyid:D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:dd:eb:9f:34:b2:05:5a:81:16:53:cb:89:fc:f0:09:52:87:
90:cd:d2:30:a4:c8:53:c2:34:6f:f2:d5:5a:71:30:70:04:63:
8e:c3:94:16:7f:65:12:e0:47:12:cf:01:ed:96:dd:1a:50:16:
f0:aa:75:82:f9:45:71:d1:77:0d:01:ba:7a:ee:91:54:58:9e:
76:b9:a7:87:11:f7:20:f9:11:74:be:aa:55:91:83:c0:5f:c6:
31:ca:48:5f:8f:ae:49:83:62:be:e4:65:b5:21:7c:82:41:79:
2b:33:0d:e8:2b:ec:96:0a:92:79:b3:8e:06:43:fa:20:08:19:
17:07:3d:d7:39:5c:cf:17:a8:b7:09:37:03:86:49:2d:7d:96:
3d:0c:cb:05:91:f2:71:2f:ae:91:a6:22:e9:37:9f:3c:63:17:
38:d0:ab:f2:21:a8:fa:c9:90:7d:a6:9a:07:cc:fa:6a:4b:b4:
1b:4d:b6:89:11:e4:4b:7b:0d:85:bf:89:38:3a:b2:63:ca:42:
18:9e:78:4e:b5:c2:b8:ef:2c:b8:6a:92:a4:b4:21:93:f5:42:
db:93:d5:c5:83:e4:d1:b9:7d:d0:e9:ca:f3:cf:42:cf:2d:bc:
18:d5:aa:8d:e0:51:75:39:bd:3a:3a:14:50:39:4a:17:f3:f2:
44:58:e0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:47 2025 by rpki-client