Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
File: 1F35i-yCdrgrqC2TdgRHukTRoZs.mft (raw, json)
Hash identifier: nQoxOWcQgItHcijsWu5RF6giLNpoPhDmaxbR/Jax8hQ=
Subject key identifier: DA:19:49:30:44:2D:61:B6:7B:4E:D7:E9:88:74:A9:6D:7D:E4:1D:F9
Authority key identifier: D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
Certificate issuer: /CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Certificate serial: 019923316FF7A4C6C99BCEA683C75BCC1A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
Manifest number: 0EEF
Signing time: Sun 07 Sep 2025 08:01:06 +0000
Manifest this update: Sun 07 Sep 2025 08:01:06 +0000
Manifest next update: Mon 08 Sep 2025 08:01:06 +0000
Files and hashes: 1: 1F35i-yCdrgrqC2TdgRHukTRoZs.crl (hash: fAj/uVKxZ48sX3ZtkMgONcVnKyRzW1jr8a1gvbOQCjE=)
2: g5vLvMzyY6iocE2krG0Z0SJdXKE.roa (hash: 7Uftt+pkf4JmzzrynHDiN+y0M7EXwi7l54WuFyKgcgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:6f:f7:a4:c6:c9:9b:ce:a6:83:c7:5b:cc:1a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Validity
Not Before: Sep 7 08:01:06 2025 GMT
Not After : Sep 8 08:01:06 2025 GMT
Subject: CN=da194930442d61b67b4ed7e98874a96d7de41df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:be:19:4d:a2:fd:86:d7:e6:24:51:b2:c0:
41:8b:de:fd:f8:b0:41:ec:03:31:9c:55:42:b5:58:
d8:77:d6:25:fd:4b:fa:c1:21:27:91:c2:a7:05:41:
7a:a9:35:28:47:42:af:05:6c:ba:cb:2b:cb:b3:e4:
02:ba:eb:81:b4:f7:ae:c4:7f:b0:80:2d:29:5f:83:
e8:07:74:9c:a5:5a:98:07:4d:7b:ff:95:3f:f5:d3:
1d:ce:cf:ce:a6:f3:55:18:58:35:23:95:cd:71:e3:
14:94:e3:c4:07:55:5c:4b:2e:5a:07:e5:5c:28:59:
d4:bf:ea:ab:85:f9:e1:e8:54:67:82:1d:23:07:9b:
97:f9:38:48:df:d2:80:b6:a1:2e:c0:b8:7c:a2:10:
0b:bf:03:1b:25:83:72:6b:a6:66:ed:b7:f6:e5:20:
61:45:2b:ce:b8:83:52:ff:e4:e2:9a:73:c3:32:73:
93:60:14:e8:1e:27:00:d0:fe:15:ac:28:71:42:24:
6c:44:8c:f7:f6:ab:72:87:47:a7:bd:87:53:6a:64:
74:67:7b:70:23:3d:14:fd:9b:0d:1d:b9:e0:89:31:
3e:d9:37:df:51:7d:4e:05:45:ab:4a:e9:92:51:b9:
bd:61:65:d9:6b:da:31:f3:30:80:c7:09:40:4e:0f:
bc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:19:49:30:44:2D:61:B6:7B:4E:D7:E9:88:74:A9:6D:7D:E4:1D:F9
X509v3 Authority Key Identifier:
keyid:D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:56:ad:77:7d:86:91:0d:8b:f8:1b:78:7c:59:24:d2:f8:02:
89:db:82:9d:3f:4f:b2:bf:c6:cf:f2:73:f7:2c:dd:e0:23:5d:
d2:86:2e:7d:ba:a0:95:e8:92:bf:2c:b0:f3:94:4f:ba:5c:03:
40:ec:55:88:35:68:15:fd:1f:8b:95:80:05:f7:de:87:a7:b4:
21:ab:aa:1b:46:d8:01:f5:ff:ee:e9:66:c6:f2:54:b9:a8:14:
bb:2f:b7:72:cb:db:c3:4f:4e:a7:4f:97:56:85:f3:8a:ff:fc:
c6:e5:8d:37:92:19:a6:e1:15:92:a3:f0:2f:2b:9e:6f:76:22:
4c:03:3d:9b:4b:f2:21:f5:f9:0b:76:ac:4d:8e:d1:74:c9:42:
d3:00:d6:03:f1:41:b2:d9:cd:0a:a6:ed:fa:29:e9:0d:98:92:
c0:42:23:71:46:16:e6:1e:76:09:e4:c4:e3:ab:64:1b:41:d4:
c8:97:fb:91:d0:e2:94:44:8b:34:26:9b:50:25:98:db:d6:79:
f2:21:c1:f2:3d:92:2d:07:04:fe:0d:2a:e8:9b:f7:0e:7c:37:
90:1a:71:50:09:8f:dc:19:19:f8:7f:fe:1d:d9:e4:d1:b2:97:
f1:1a:67:0a:83:0e:b0:2f:75:34:18:33:82:1a:95:fe:06:95:
81:57:99:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:20 2025 by rpki-client