Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
File: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft (raw, json)
Hash identifier: gOCkB0ofGnP8iIsjDGPY4btW//DCCeJ9s1UrlLWpsy4=
Subject key identifier: A2:50:90:97:77:76:D8:4C:69:DD:20:63:BB:26:F0:04:A1:6C:E8:02
Authority key identifier: FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
Certificate issuer: /CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Certificate serial: 0199221EE84779D5FC7DF57411DC8757009C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 03:01:14 +0000
Manifest this update: Sun 07 Sep 2025 03:01:14 +0000
Manifest next update: Mon 08 Sep 2025 03:01:14 +0000
Files and hashes: 1: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl (hash: Ce8dVKaCbh5ePATITtMhNrb0C/ZVpPTCyMfEnIpTtcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:e8:47:79:d5:fc:7d:f5:74:11:dc:87:57:00:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Validity
Not Before: Sep 7 03:01:14 2025 GMT
Not After : Sep 8 03:01:14 2025 GMT
Subject: CN=a25090977776d84c69dd2063bb26f004a16ce802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:62:94:a9:87:d2:c8:cf:cc:d2:2a:9e:0b:c2:
19:5d:01:1a:a2:d8:12:3b:33:68:69:64:71:90:08:
e5:57:f9:5b:74:d3:d6:0a:c3:d8:a7:a2:75:61:c1:
cc:8d:28:42:49:0e:08:51:a7:28:36:23:d2:5b:d6:
a2:e1:ce:77:b8:cb:14:04:80:18:6e:ad:07:8a:e4:
2c:62:b5:c6:2d:6e:ac:a5:79:a6:ab:c6:de:59:f6:
23:99:8b:1f:0d:2e:5a:da:90:31:af:4c:10:51:66:
3a:ed:53:df:08:86:86:58:92:95:21:55:47:c6:24:
15:33:7d:d9:f4:74:fe:24:66:04:d3:1d:d4:89:60:
e3:f0:85:ab:c9:88:df:b0:6d:c5:80:b1:37:66:e0:
4c:41:95:f8:51:2b:85:ce:00:86:9f:11:15:52:e4:
64:c6:ef:50:b3:0d:73:a6:cb:1c:be:b8:b9:ef:7e:
e0:b1:a2:73:36:31:6e:a4:0c:d2:0f:dc:58:c1:1e:
94:96:ab:2a:42:7b:0e:d8:58:4e:d6:67:62:1b:1c:
57:c2:72:74:88:32:af:1e:72:a5:c1:a2:9e:0a:84:
66:49:51:18:c4:2b:0d:b4:2d:ba:d8:f6:b0:7f:03:
2a:cc:98:0a:0b:8e:5e:52:d9:c2:6c:06:48:9a:9d:
98:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:50:90:97:77:76:D8:4C:69:DD:20:63:BB:26:F0:04:A1:6C:E8:02
X509v3 Authority Key Identifier:
keyid:FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:7b:ff:1d:04:bb:57:cf:99:d5:72:62:60:12:d7:c9:ad:a2:
7a:07:fa:2f:dc:12:e0:e8:b1:74:f1:43:e3:83:a8:3f:17:e4:
08:a9:a9:3b:ce:d2:a6:99:1f:8c:a1:70:3d:84:c6:5a:b2:e7:
1e:3c:2e:45:6d:d0:3a:cc:ba:56:d4:11:bf:6e:dd:02:a1:af:
cd:76:6e:b2:1a:11:7f:4e:94:94:aa:a6:37:03:63:eb:71:3f:
62:94:f2:64:d2:47:6d:96:37:d5:3f:3a:86:07:88:9f:b7:50:
d1:9d:bb:4d:bf:4d:ed:26:f9:c0:e5:2e:23:fd:9f:b6:4e:3d:
94:c7:05:8d:ba:12:e6:e3:79:cb:de:64:ab:16:ac:80:d0:7c:
38:65:9e:16:08:a6:e0:86:59:ec:cf:6c:ea:51:83:a1:58:1d:
70:21:3a:f5:6c:18:35:58:e3:b3:c8:44:2e:e2:d1:22:8c:a1:
eb:7e:66:b1:44:90:a1:2f:4a:bb:b2:11:03:33:e9:05:0f:d7:
e9:6a:87:02:e5:dd:5a:f6:79:ec:67:fb:74:0c:84:24:0d:18:
5b:8c:f7:45:73:64:cb:55:70:d2:48:ad:3e:0d:7c:63:26:0c:
06:29:1f:40:8e:56:73:c4:4c:61:60:26:24:08:ec:6b:6e:87:
a2:a9:5e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:51 2025 by rpki-client