Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
File: 1-V9aNXOMMini9DlFAMMiyCdal6I.mft (raw, json)
Hash identifier: 9RJq5S9P2PnLbIzQh+q0W3JXgwR1Ka/G3EsvdVCdWZ0=
Subject key identifier: 6B:91:D8:A0:3D:22:2A:22:B3:26:6C:74:8E:05:1C:A0:D9:1E:AA:3E
Authority key identifier: F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
Certificate issuer: /CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Certificate serial: 019849D2D61420F96B0260D7449875D85AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
Manifest number: 1336
Signing time: Sun 27 Jul 2025 03:00:10 +0000
Manifest this update: Sun 27 Jul 2025 03:00:10 +0000
Manifest next update: Mon 28 Jul 2025 03:00:10 +0000
Files and hashes: 1: 1-V9aNXOMMini9DlFAMMiyCdal6I.crl (hash: T/LYqsJxnG9hEdrY66xWpZeuGB4Js3VNHoxK6IR1/jU=)
2: k_l8rtQi2P6fa9dQhkQ5j5jaCYE.roa (hash: sMo/6l6OJgyWFVqU8cFbnDYPktbERaDpmId+0GVplIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:d6:14:20:f9:6b:02:60:d7:44:98:75:d8:5a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Validity
Not Before: Jul 27 03:00:10 2025 GMT
Not After : Jul 28 03:00:10 2025 GMT
Subject: CN=6b91d8a03d222a22b3266c748e051ca0d91eaa3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:b4:dd:3d:28:df:82:c1:82:66:07:67:09:
1b:7d:08:e7:0a:ea:03:9d:a3:f9:f2:31:11:e6:ca:
d6:50:14:e0:ba:ad:5f:23:a6:5b:0e:2d:3e:d3:df:
59:8a:92:32:31:31:2e:96:1a:35:4f:c7:73:37:78:
57:f5:cc:e7:bd:18:4b:cd:30:15:be:5a:24:fb:1d:
54:9b:f9:63:23:8e:1b:77:d8:2d:f3:81:04:d9:e5:
a4:d7:2f:16:13:bf:7d:55:93:4e:07:74:3b:ca:af:
80:00:5f:66:29:fd:74:be:47:02:d7:a8:97:82:0e:
a7:19:6f:eb:9b:31:3e:dd:2d:f5:36:ba:11:68:30:
b6:73:58:2c:b1:0c:5a:56:ef:cc:51:6a:44:f7:12:
fe:88:66:28:45:f2:58:76:65:c9:18:4e:92:33:f9:
a4:8b:5e:3c:e9:11:84:1e:68:48:2c:31:87:eb:cf:
62:12:b4:05:05:16:07:87:9b:98:34:ce:8e:c5:f2:
c0:c8:5a:b6:55:0d:da:bd:ee:05:b1:f4:93:e0:a0:
ac:e5:fe:13:1f:5d:65:d5:c7:71:14:30:2b:56:bc:
58:76:b0:d2:2e:77:07:59:76:48:0f:28:5f:ee:87:
54:f9:13:2f:f3:a4:b3:38:8f:0f:fe:e6:69:95:25:
bd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:91:D8:A0:3D:22:2A:22:B3:26:6C:74:8E:05:1C:A0:D9:1E:AA:3E
X509v3 Authority Key Identifier:
keyid:F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:10:32:64:70:f5:bb:8e:40:bd:f5:89:e2:58:a9:49:d1:af:
e6:7a:4a:48:4c:ea:0b:b9:df:64:f4:17:1b:53:f4:55:34:95:
f3:69:0a:b3:65:bb:8e:64:37:d0:49:f3:e9:e9:be:5d:74:30:
5c:bd:b8:02:99:5e:99:13:f7:86:93:4c:8f:d7:a5:16:2f:98:
70:d3:33:62:69:64:f1:15:39:74:aa:8f:8b:d4:03:67:ee:aa:
cd:6e:5f:3d:45:b1:d9:31:36:02:c9:94:2d:d4:11:3a:db:70:
79:85:c4:4c:46:10:1d:c0:53:3e:9f:0a:2d:a3:c9:bb:3f:34:
87:ea:b7:34:71:25:22:e3:a6:18:40:d6:f1:5d:3a:b3:f4:33:
56:64:75:8d:1c:75:92:b2:81:c3:cb:fe:d1:0b:af:f6:8d:98:
60:5c:4d:23:5c:2c:ac:f3:45:81:5c:de:a6:8d:5b:d4:6e:0c:
b5:e4:2a:80:a6:8a:4b:7b:b9:50:7b:8c:7b:24:35:cd:df:2b:
02:a8:d9:fd:b7:4a:70:9e:21:a8:9d:32:67:5a:96:63:1d:d9:
e0:0e:d3:33:2d:26:64:17:c9:a0:c8:5f:3d:fa:94:01:5d:e2:
66:7b:be:73:6b:f7:ce:35:2e:eb:b1:14:51:56:ee:c7:b0:e7:
08:58:81:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:55:32 2025 by rpki-client