Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
File: 1FbufkhK4u8JINCVvK4mj6_Wlhk.mft (raw, json)
Hash identifier: eZtEXB0RFDFpXuzEjw3LXQiOIbz71Ivx4Aar2+1PPjE=
Subject key identifier: A0:70:4B:D7:A3:9D:55:E5:11:C7:05:18:AB:3B:F5:09:17:86:BB:37
Authority key identifier: D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
Certificate issuer: /CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Certificate serial: 019922FA6054E51E9EB8D6DAC1DBE604A949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 07:00:57 +0000
Manifest this update: Sun 07 Sep 2025 07:00:57 +0000
Manifest next update: Mon 08 Sep 2025 07:00:57 +0000
Files and hashes: 1: 1FbufkhK4u8JINCVvK4mj6_Wlhk.crl (hash: sMMlZ3nwCBXv+I4nvy517sAfVO/q9ihK1nTbN333OzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:60:54:e5:1e:9e:b8:d6:da:c1:db:e6:04:a9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Validity
Not Before: Sep 7 07:00:57 2025 GMT
Not After : Sep 8 07:00:57 2025 GMT
Subject: CN=a0704bd7a39d55e511c70518ab3bf5091786bb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:02:e3:ce:c6:43:c3:1d:2c:4f:dc:2b:3c:57:
06:8d:ba:3f:f2:ce:02:15:47:e5:66:0f:61:83:16:
cc:ba:17:c6:ee:71:45:a2:3d:80:d9:0e:5c:72:b6:
13:76:17:76:20:10:48:59:2f:d5:62:b9:e8:de:c2:
2e:91:52:f7:e7:ae:ba:4d:07:01:73:06:92:63:f2:
7d:b6:c4:be:d0:50:70:7e:1f:eb:97:18:6a:f8:e2:
b2:a5:4b:a0:8a:a7:07:51:e1:90:92:45:7c:bb:7c:
f2:fd:5e:ce:01:33:b7:27:50:32:82:f1:d9:80:7f:
13:50:97:11:eb:66:b7:91:6c:ba:5e:48:ea:12:dd:
34:e7:c7:39:e4:c1:ec:cd:75:09:42:ec:42:5b:fc:
0c:ff:08:b2:91:75:28:f5:ef:b9:ff:17:e8:a0:20:
63:d8:7c:15:28:49:9d:30:4e:eb:26:f4:17:c0:29:
5e:6e:fc:96:d3:37:ba:c3:03:d0:c3:19:04:a7:32:
da:82:bd:b0:e1:49:71:08:0a:3d:bb:2b:fc:47:b5:
20:82:b9:33:70:b5:4d:ed:67:3a:f0:4d:a8:fe:76:
c0:33:d8:dd:ea:e2:af:03:ec:89:ad:af:0c:13:43:
00:d2:6f:1f:43:3c:4e:b2:e6:6c:18:d7:2a:3e:95:
af:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:70:4B:D7:A3:9D:55:E5:11:C7:05:18:AB:3B:F5:09:17:86:BB:37
X509v3 Authority Key Identifier:
keyid:D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:29:ba:d5:9d:b5:f9:d1:61:69:d7:c1:12:92:db:a2:69:86:
66:40:d5:bb:15:6f:7a:1b:80:d9:3c:5e:15:8c:b0:93:22:45:
08:37:cc:43:0f:95:e8:49:13:52:21:7f:6c:18:6b:fc:b1:d1:
5c:e5:d0:a1:2b:12:5f:fc:7d:ed:8e:40:d7:dd:ed:54:f2:d9:
77:9a:13:a8:f4:96:33:10:68:72:50:5e:67:ce:21:cb:b6:25:
0f:6d:e4:fc:f1:ae:4e:66:60:3e:1a:c3:a6:95:0d:70:02:6b:
ed:2d:e3:e7:50:03:98:c6:24:70:4b:11:4a:6e:7f:59:8d:3b:
a5:8a:30:2e:45:38:22:b7:04:a6:a4:be:f4:e0:67:43:0d:93:
7a:db:ca:6e:11:46:7c:d2:c0:24:bf:0d:94:fe:b5:52:18:87:
50:55:4a:8a:55:40:8d:f5:2c:29:b7:4f:84:a2:81:56:27:04:
39:4d:1a:f8:93:5a:0f:65:90:3d:c5:5f:80:9a:57:05:0a:6d:
6c:8a:4e:2b:51:dc:6d:2e:30:f5:b6:f7:9d:68:ce:94:17:2b:
c1:3c:56:1f:2d:d0:e3:5f:ec:5f:9f:02:a4:b5:ab:c7:e3:dc:
6c:0a:72:58:e8:3d:73:45:f1:56:6c:81:7a:ae:99:92:61:f2:
c7:b2:56:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:42:28 2025 by rpki-client