Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
File: 1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft (raw, json)
Hash identifier: 3u6NGlM7Thiyvpsoq7kBZR6al77onMS1lADZN5GwTrg=
Subject key identifier: 4D:5F:00:F1:A0:4F:2E:3F:CF:BB:84:B4:2D:44:7B:8E:59:15:59:35
Authority key identifier: F9:A0:3D:24:50:DC:E5:87:D5:37:55:A9:F6:B4:A4:65:6A:28:0B:4B
Certificate issuer: /CN=f9a03d2450dce587d53755a9f6b4a4656a280b4b
Certificate serial: 0199221F599A60B50613D824D1E4F2C4E35B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 03:01:43 +0000
Manifest this update: Sun 07 Sep 2025 03:01:43 +0000
Manifest next update: Mon 08 Sep 2025 03:01:43 +0000
Files and hashes: 1: 1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl (hash: g3QPkJo1tzkfCwMYI0e7chc4hXGIsKUIlPWK3PxQrUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:59:9a:60:b5:06:13:d8:24:d1:e4:f2:c4:e3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a03d2450dce587d53755a9f6b4a4656a280b4b
Validity
Not Before: Sep 7 03:01:43 2025 GMT
Not After : Sep 8 03:01:43 2025 GMT
Subject: CN=4d5f00f1a04f2e3fcfbb84b42d447b8e59155935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c1:1a:db:38:13:6a:c7:89:8b:18:93:8c:c2:
e7:20:32:a1:1f:b9:a7:c4:cb:c5:44:0e:b4:8d:86:
e7:f2:63:9b:fc:46:2c:61:1d:68:cc:e4:93:49:64:
1e:54:be:00:56:c6:3e:6a:8a:ea:62:a1:27:65:07:
b5:c9:86:0c:c2:52:f8:bb:1b:d6:8a:ea:b7:8e:f3:
ce:7f:cf:59:dc:5c:b0:ff:d0:6e:4d:69:0f:56:40:
01:70:68:22:67:7e:5a:03:c1:7c:be:4b:c8:8b:52:
15:06:26:d3:74:53:7c:78:eb:43:83:5b:34:47:92:
83:db:f3:ef:da:d0:e0:c5:ac:e1:fc:57:f5:5a:d9:
bf:c2:7f:d7:1f:8d:ab:a7:16:2c:b0:49:d9:56:aa:
dc:72:c5:51:bd:e0:ca:c3:0a:f7:17:ba:30:cb:48:
8c:f6:71:5b:c9:1d:df:e2:8c:16:24:d7:db:9c:71:
a5:77:42:e5:d5:c9:32:7a:ab:1c:3d:6c:57:b5:99:
a3:7c:2a:a9:9d:8a:92:ed:fc:79:93:2a:08:4e:6f:
2d:c5:b0:7c:ee:3f:2e:1d:7d:e3:52:fb:8a:f1:40:
fa:55:55:86:7b:d7:5c:da:f9:2f:3b:cc:d7:88:80:
e1:86:e7:f6:7c:d3:37:cc:82:15:65:5e:fd:12:f1:
79:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5F:00:F1:A0:4F:2E:3F:CF:BB:84:B4:2D:44:7B:8E:59:15:59:35
X509v3 Authority Key Identifier:
keyid:F9:A0:3D:24:50:DC:E5:87:D5:37:55:A9:F6:B4:A4:65:6A:28:0B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:53:b5:b2:5e:2e:9a:ec:66:f8:bc:ba:72:0e:7d:29:81:b7:
9b:3c:19:2d:f6:85:0e:1e:d2:ff:3c:3f:2a:d5:b8:18:6d:17:
ee:49:bc:1f:6f:3e:a6:3a:f7:46:da:70:c8:dd:cd:e4:bd:4a:
91:fc:d1:10:80:d4:26:65:e8:50:4e:6c:eb:98:10:3c:2f:1c:
98:83:43:65:06:fe:77:f0:03:8b:ec:f0:5b:bf:c7:2e:a8:19:
2b:8b:d1:20:19:0a:61:ee:ab:79:11:d7:14:5f:a7:d2:70:7c:
34:b8:da:62:1a:2a:98:e8:62:d7:52:f8:88:5f:e2:c0:0b:99:
cf:d5:6b:a1:f5:74:25:b7:a4:b2:32:d7:9a:54:f5:40:99:4c:
b8:6d:07:1a:f9:c6:70:e0:21:b1:df:7c:7b:31:36:69:3d:15:
2e:7d:b6:66:ea:b9:25:01:00:b2:b2:e3:13:e8:a8:f4:c6:ce:
8b:1b:f8:33:e3:fd:b5:8f:8d:23:ee:ee:e7:e0:1f:8f:f7:77:
76:45:eb:67:80:a7:55:c8:ec:66:dd:e7:a1:21:fb:f7:ef:60:
14:51:8e:a3:a9:8d:3c:76:a6:e2:ea:54:c9:ac:ee:e8:db:48:
06:8c:8b:e3:66:e3:f2:b8:0a:5c:7f:3a:10:42:40:d0:06:8b:
cc:fc:05:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:04 2025 by rpki-client