Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier: NTvpU0FDv09KfVN1kCuH/LG//eAfvMiuEIX74AN3UAE=
Subject key identifier: 44:CD:BD:4E:66:40:68:7C:55:08:5A:DF:1B:3B:11:93:A0:5F:56:2A
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial: 01994F2E59DB31918C6CC824D75B1093F366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number: 1401
Signing time: Mon 15 Sep 2025 21:01:01 +0000
Manifest this update: Mon 15 Sep 2025 21:01:01 +0000
Manifest next update: Tue 16 Sep 2025 21:01:01 +0000
Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: xo1QH/QCJxh4rpgbj6j4yc6Z3MREEHaFQKTG69gNFes=)
2: wiMZyenwx3I7xwOHgp4nhnMI51s.roa (hash: Qx/P/QV7oNsKOLP9lE01kMvoM8G9Aq9IlKHXWkjW/bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4f:2e:59:db:31:91:8c:6c:c8:24:d7:5b:10:93:f3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Validity
Not Before: Sep 15 21:01:01 2025 GMT
Not After : Sep 16 21:01:01 2025 GMT
Subject: CN=44cdbd4e6640687c55085adf1b3b1193a05f562a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:32:63:87:d8:1f:c1:01:a4:f8:3b:9c:30:25:
5b:30:6a:2e:ac:58:b0:92:3a:f5:54:7d:a3:2c:5f:
a3:b3:86:d5:a5:fd:5f:14:a5:2a:c4:d2:ab:5f:07:
fd:a0:73:e8:08:ec:60:dd:99:61:43:53:bc:81:0c:
7d:60:de:17:a1:93:a1:86:86:0d:44:6d:8d:d0:2b:
c8:0a:2c:22:ef:e7:a7:40:a1:fe:72:74:86:4c:70:
42:14:bd:6d:2c:b3:e3:b7:90:93:db:73:56:46:55:
2c:a7:9b:4d:94:83:26:62:75:09:04:3d:13:e6:f9:
55:a1:c9:d8:7b:2d:d5:6f:3f:7d:10:93:1e:c0:af:
b3:55:73:d6:f2:2a:ff:9f:9b:04:ad:1c:f1:11:65:
43:69:ea:c8:00:3d:67:e3:6a:e2:d7:be:8d:12:80:
c3:73:3d:b3:26:37:55:38:51:a5:d8:0d:62:24:6a:
f4:bc:3a:2c:98:c9:93:8b:53:6c:ec:9a:df:6f:cb:
44:b4:6f:4b:a0:34:2a:71:f2:82:77:b0:76:e0:8f:
83:e9:de:34:ea:90:3b:49:d3:da:d9:b2:c7:a8:0c:
79:9e:a9:30:d5:66:58:bd:a9:42:d4:d7:89:31:cf:
82:df:2f:b9:f9:c6:d2:b1:77:f2:d4:69:29:74:a6:
c5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CD:BD:4E:66:40:68:7C:55:08:5A:DF:1B:3B:11:93:A0:5F:56:2A
X509v3 Authority Key Identifier:
keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ec:17:38:48:b1:b7:29:1c:b4:a6:49:ba:36:6e:95:e5:65:
e8:2c:89:98:8e:41:f9:c1:99:13:84:43:22:b0:71:a3:93:b5:
fc:43:78:bc:c3:29:54:0b:c7:af:78:8e:2f:1d:98:71:fa:0e:
08:ef:85:76:de:88:ce:79:40:be:e0:f7:9c:6a:f6:33:61:9e:
d8:d1:62:81:e0:ad:ec:60:1c:e2:59:9c:54:a9:68:b5:4d:e6:
18:77:a1:24:be:f7:32:ba:89:cf:9d:9d:68:0a:8b:66:7a:41:
31:28:fb:d9:67:a6:43:40:81:00:45:cc:e5:ba:f8:b3:9f:00:
23:b4:02:20:94:67:ec:31:91:1e:3e:ba:fa:74:ce:c5:d7:b4:
38:90:1d:92:20:1f:d1:ab:6c:31:72:77:72:89:de:4e:3d:b8:
1e:a7:58:f4:d2:98:57:ef:81:b9:ca:01:17:48:81:32:94:9c:
7f:77:9d:63:f5:82:70:b4:59:2f:3c:a2:8b:0d:c2:df:91:6f:
1e:11:5d:37:2b:51:fb:0b:64:31:2f:e8:76:b7:24:82:a8:7d:
21:44:5e:91:88:53:b0:f9:44:85:b4:38:9a:92:f5:df:77:09:
88:64:c7:16:21:a6:b3:b0:20:3c:d6:25:3a:88:d2:1b:1b:ec:
12:cd:30:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 05:44:31 2025 by rpki-client