Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
File: 1-TVqludOotcrZUXIfHnSEtcqe94.mft (raw, json)
Hash identifier: FJbWWzQWg2RCG2UjPzaXDfUlVCDyOpjHAh35SXcMIJw=
Subject key identifier: 64:80:85:E9:1A:B9:C0:2E:3C:CF:A4:D4:1A:C3:A4:FC:5C:0C:F5:83
Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
Certificate issuer: /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Certificate serial: 01993424B432F6DED8B2E022BAD0AB516E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
Manifest number: 154D
Signing time: Wed 10 Sep 2025 15:00:44 +0000
Manifest this update: Wed 10 Sep 2025 15:00:44 +0000
Manifest next update: Thu 11 Sep 2025 15:00:44 +0000
Files and hashes: 1: 1-TVqludOotcrZUXIfHnSEtcqe94.crl (hash: s4I0iiKL94xQTNv946WwHDTtA1ZngPJlTQXXwG/XM7g=)
2: 40BuKq_ENsetJ0coeTja2uim-XM.roa (hash: jFKs1Nj/rGuvWwuXC1CAsi/+KiI87gmidC/b6O4pmJ4=)
3: Ozsn4JoKAsG2v5UbV7B2BGsrTbM.roa (hash: 3pxKTq3sMKN1NqkN5QM+NnGuUJMn7eGHWu6Nl0xki4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:b4:32:f6:de:d8:b2:e0:22:ba:d0:ab:51:6e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Validity
Not Before: Sep 10 15:00:44 2025 GMT
Not After : Sep 11 15:00:44 2025 GMT
Subject: CN=648085e91ab9c02e3ccfa4d41ac3a4fc5c0cf583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:07:f4:f5:99:66:2c:c8:b2:86:6e:84:97:0b:
7a:89:30:a8:e2:5c:f5:25:1f:90:b3:df:ed:10:7a:
59:ab:1b:a0:86:4e:04:82:a6:c5:f0:54:4c:43:41:
28:a2:71:a6:99:1b:0f:21:d1:b4:a2:74:a7:a8:99:
0d:ca:d8:8e:7a:b7:89:2b:51:81:31:ec:84:7a:59:
2e:6d:90:ad:52:40:db:48:0a:4a:b0:0e:f3:ce:03:
11:cc:46:1b:dc:19:c3:42:eb:55:a2:39:f6:17:43:
4e:c0:e3:a1:4c:2e:b0:f2:dc:6f:6f:79:86:cb:8e:
36:0f:d4:23:b1:6f:f0:76:84:91:68:aa:2d:6a:35:
d9:02:cc:d9:20:1a:d2:fd:d5:3d:08:34:88:88:77:
ce:29:85:74:b5:1d:6f:e1:ad:c3:13:b6:20:8f:fc:
6f:b6:34:7c:88:c3:2c:22:3f:db:7d:9c:c6:45:06:
58:25:85:76:34:b1:24:da:a0:3f:99:f0:1d:90:84:
84:17:7b:0e:45:24:5f:38:e4:f1:8c:fd:2a:67:18:
14:ec:5e:9d:c8:e2:4e:5e:bb:05:09:8f:80:6a:fe:
1f:fe:b5:72:f2:e3:d6:70:d1:b6:76:36:52:a0:b4:
d5:07:93:73:16:cb:61:ee:07:27:1a:a7:b9:34:bc:
1c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:80:85:E9:1A:B9:C0:2E:3C:CF:A4:D4:1A:C3:A4:FC:5C:0C:F5:83
X509v3 Authority Key Identifier:
keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:68:8f:c0:9c:72:97:bc:cd:14:d0:38:12:66:30:51:b3:3b:
71:7e:44:5b:36:ea:84:b1:f2:d1:cf:19:a7:7d:ee:65:0e:29:
9a:f4:dd:41:2a:92:7b:14:63:70:13:38:5b:e3:92:33:8b:23:
4c:ad:5c:cc:d7:00:cd:60:63:54:8c:21:a9:1c:93:f1:3f:89:
fc:7b:4b:de:aa:01:d9:61:04:02:df:b6:f7:48:59:3f:e7:51:
18:4b:e1:d1:7d:ae:3c:9e:9d:bf:53:12:fd:34:79:9b:e8:c4:
63:2a:1e:a2:ab:b8:fb:8c:bb:c2:35:32:cd:e8:07:af:3b:6e:
ed:4d:ea:17:10:67:40:cb:44:1d:60:d2:80:9b:11:9e:40:95:
c2:62:dc:0a:92:48:14:ec:a1:bd:2d:8f:93:ec:98:53:ce:9e:
16:f7:0e:0d:1a:69:5e:41:be:a8:3d:9e:b0:6c:65:b5:db:36:
f7:58:94:be:24:a5:57:12:57:e7:42:69:6b:f0:70:f9:68:7e:
1b:c4:df:fd:12:90:3b:ad:c3:1e:6a:9e:40:86:69:a1:e0:22:
cb:30:c5:31:bd:4a:09:df:03:b8:32:7c:98:07:03:05:a0:68:
14:ee:26:37:dd:26:06:ac:fc:d9:d2:82:c0:27:23:86:92:72:
67:05:b7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:54:31 2025 by rpki-client