Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File: 9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier: AfDR/hFyuYwDNz1EuJYDm2ne5iidSD3bBNsTSNNoWjQ=
Subject key identifier: A5:CC:62:DB:94:BE:AF:B0:7F:3E:1C:68:5C:FB:03:63:17:AE:EF:CC
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer: /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial: 01995BD78404AA6EB6FE614E664632AB51AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number: 1622
Signing time: Thu 18 Sep 2025 08:01:14 +0000
Manifest this update: Thu 18 Sep 2025 08:01:14 +0000
Manifest next update: Fri 19 Sep 2025 08:01:14 +0000
Files and hashes: 1: 6wW68rpEYT5imOHdAJC8iqYgH-8.roa (hash: 2OyXhc87+DnhsUi/Ak2VDrIMxn2fa0IaWGuzCLcLykQ=)
2: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: j1rsd0gDvVn68BcvWkkZ60Uqlxw0xvVeia14PlaxaBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5b:d7:84:04:aa:6e:b6:fe:61:4e:66:46:32:ab:51:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
Validity
Not Before: Sep 18 08:01:14 2025 GMT
Not After : Sep 19 08:01:14 2025 GMT
Subject: CN=a5cc62db94beafb07f3e1c685cfb036317aeefcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:3e:3a:c3:dc:2c:a4:be:a9:e9:0e:37:61:
57:dd:2d:f1:69:01:3e:7d:f4:5a:47:de:e8:11:52:
4c:59:20:f1:c2:2c:f4:b0:23:1f:90:3f:c5:d4:77:
87:1d:19:9d:17:68:8a:8d:a6:db:88:18:b3:f3:f6:
8e:cd:6c:9b:fc:01:6d:66:51:fe:d0:8a:24:ef:e6:
e4:d9:f6:de:b4:5f:4b:bc:b9:5f:89:92:89:4c:51:
3f:5f:d0:76:85:fc:49:15:3d:28:00:4b:56:e8:23:
f8:dc:01:81:dc:6a:74:17:00:0c:ef:5b:34:b1:65:
4d:34:de:e0:f5:58:d9:18:b4:96:76:44:f0:b8:3b:
28:61:cc:b0:42:2b:25:38:17:3b:e9:96:9e:7b:32:
47:bd:6d:d3:ba:9f:1e:d8:61:1c:47:fa:b9:84:42:
2f:18:61:32:80:92:fa:26:a9:e5:d1:f8:70:f9:5e:
94:9c:ba:03:d7:35:a8:7a:0c:90:11:27:0f:75:7e:
dc:74:0c:3d:ef:30:33:83:d1:c6:5d:f3:14:b1:d2:
68:ae:38:99:f0:bb:ba:6c:80:72:d7:c1:2f:4f:7d:
79:28:34:de:c7:2a:78:9d:d9:20:88:2c:30:dc:30:
f8:ef:09:66:90:d9:ad:a8:d1:05:92:cc:4f:5d:09:
26:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CC:62:DB:94:BE:AF:B0:7F:3E:1C:68:5C:FB:03:63:17:AE:EF:CC
X509v3 Authority Key Identifier:
keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a4:85:cb:62:a5:a7:47:72:78:db:90:14:1a:91:d2:95:90:
5b:6c:1c:da:a9:70:a6:e3:97:bf:a3:ae:1a:f0:97:05:e7:b0:
05:18:93:ba:53:19:62:6f:5f:f4:01:2f:3e:0a:c1:da:56:3e:
bd:a5:c7:40:b3:ec:ee:4e:10:d5:b9:d1:33:8a:c7:50:27:3c:
45:4f:43:f5:ab:ef:78:90:ea:55:47:1d:a2:f8:6e:f6:a0:7c:
ee:65:ab:91:d6:24:ea:de:1c:9c:1f:fa:b1:a3:2b:10:47:f6:
c8:45:6e:02:dc:68:27:2b:da:2f:15:15:53:47:51:5d:51:f8:
c5:31:19:64:48:45:bd:51:be:a1:a0:0b:3d:ea:e9:10:97:95:
42:85:b4:4f:06:f2:6f:d2:64:83:33:fa:d6:f4:c8:b6:bd:30:
7f:d5:de:6f:df:76:d9:46:d1:87:bf:29:b9:81:48:4d:6a:f8:
ba:20:26:2e:b0:f5:5a:cc:fa:85:23:2f:a2:11:15:42:33:c3:
85:1b:23:07:ed:fb:d4:47:af:88:d9:e3:d5:58:0a:7e:fc:b3:
09:d7:80:03:c4:0e:3c:99:de:df:80:6d:1c:b8:e8:9e:8e:cc:
eb:56:d6:2f:35:fb:19:a9:3d:f3:2f:12:5c:d1:76:18:37:81:
85:0e:28:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 12:04:21 2025 by rpki-client