Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: TtQ59YRG2dZCfrKwsXfCpRWaOyyyYpt0GMk3PwU16YM=
Subject key identifier: 10:75:A6:B9:59:BA:6B:AA:A0:0F:98:63:22:CC:6F:B5:8A:10:9E:EB
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 01992BFD805C282206B2E6460512E2209E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 151D
Signing time: Tue 09 Sep 2025 01:00:57 +0000
Manifest this update: Tue 09 Sep 2025 01:00:57 +0000
Manifest next update: Wed 10 Sep 2025 01:00:57 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: IBr5KoZozQTIcIBzGskuB8qeOcBOQCgkWSwPePvZaY0=)
2: B1dTi0f_of0kmb1xPgeCM0wY_So.roa (hash: AUmVPkVAQPCmSbSqHlAfz6SLH5DutLJ3OBZdx5Ql8g8=)
3: g4GI57zRcwc78atAcKzvcX8O_Jg.roa (hash: I42VDUXmjO3wztnHcn35mdQWvB1AtZN/AkJrcxSWDOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:fd:80:5c:28:22:06:b2:e6:46:05:12:e2:20:9e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Sep 9 01:00:57 2025 GMT
Not After : Sep 10 01:00:57 2025 GMT
Subject: CN=1075a6b959ba6baaa00f986322cc6fb58a109eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:ef:fa:b3:96:da:44:61:0a:f8:7d:ab:e8:
03:21:e6:72:18:d5:eb:4f:55:94:ff:7f:c9:21:ca:
d5:e4:11:ca:aa:c0:64:ca:42:cc:9d:83:94:4e:97:
83:15:25:7b:19:a4:f1:a6:40:be:31:5b:f7:c3:d7:
88:db:cd:30:2c:1f:a4:0d:9f:09:29:21:4d:5a:a1:
0c:3b:16:05:92:ae:a2:f2:cb:dd:12:33:b5:18:d2:
4f:15:f5:74:f4:03:e9:57:42:b4:c4:d9:3d:28:a2:
ae:21:61:18:43:af:c4:cf:bd:2f:3c:1f:e3:fb:48:
c2:da:09:65:32:e9:3a:00:0e:06:7d:e8:31:c9:50:
a4:4b:e4:f5:9b:de:6f:b5:e3:c7:2c:95:3d:29:17:
60:8c:ae:3d:62:c6:ee:c5:22:f4:15:79:76:d6:4a:
af:4b:ad:44:42:40:5a:cc:ff:9c:50:50:3b:86:95:
53:84:34:96:36:cb:ad:33:bf:ee:a5:84:22:12:67:
ed:15:f5:8d:9e:3c:f0:d2:c3:bd:48:d7:d5:99:8c:
38:17:8f:b0:f3:0b:fb:89:73:0a:db:d4:c0:ff:ef:
3e:6a:a0:71:1b:1e:e8:c3:e5:2e:ef:15:20:0e:3d:
ef:9a:cd:19:ca:36:4b:44:ba:fe:bd:44:2d:7b:7c:
30:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:75:A6:B9:59:BA:6B:AA:A0:0F:98:63:22:CC:6F:B5:8A:10:9E:EB
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:40:64:7e:50:84:66:9b:0f:3e:3e:cf:3c:05:80:4c:99:23:
54:d0:e3:92:09:bc:8b:2a:cb:c2:b3:ad:6e:e5:92:5b:3b:a5:
a9:74:2b:4b:cc:aa:ba:51:d1:e8:35:af:71:7d:bf:30:42:0d:
29:71:a3:8f:41:31:76:b6:80:54:8e:0a:1b:a1:af:29:3c:d4:
b5:29:3d:9c:dc:12:b0:00:8e:8b:ef:9c:8d:68:7f:5a:32:1c:
0b:bc:dd:f5:49:a3:68:c3:48:26:fa:fe:10:31:f4:40:25:9e:
60:1e:8a:f5:41:2c:99:59:96:5d:bb:74:26:e6:cf:66:46:d3:
00:52:24:9a:1a:e5:a8:45:ad:a2:90:f0:bc:85:0e:be:f2:9d:
72:85:84:ca:00:41:a2:32:51:e5:63:44:0a:de:eb:32:87:33:
2a:5f:86:e6:ed:bc:d5:66:cc:4f:5d:86:83:a4:3f:2c:cd:0f:
9a:e1:13:65:2e:e7:52:7c:14:61:9c:e6:29:bd:0d:83:2d:4b:
f1:3e:c4:c3:ac:62:97:d8:7b:7d:f9:69:ec:e6:b3:40:0c:49:
73:0b:8b:ae:d8:7c:a6:99:89:26:5e:12:bd:4e:de:a6:c2:d2:
1c:f6:90:c3:a2:24:d7:08:82:3f:5b:ad:df:fb:74:45:7c:99:
74:75:43:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:43:35 2025 by rpki-client