Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft
File: 1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft (raw, json)
Hash identifier: 0JUIdcwNUnya3Ltf2rcYFQpblJ/naaJVbgDNwn663F8=
Subject key identifier: 23:20:0B:57:D5:26:5A:C7:B1:AD:12:14:43:82:41:7C:06:36:7E:6A
Authority key identifier: FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB
Certificate issuer: /CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb
Certificate serial: 019931C8AC1AB921FABDAB7CA6793C9A226F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft
Manifest number: 0989
Signing time: Wed 10 Sep 2025 04:00:58 +0000
Manifest this update: Wed 10 Sep 2025 04:00:58 +0000
Manifest next update: Thu 11 Sep 2025 04:00:58 +0000
Files and hashes: 1: 1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl (hash: pzEdreUvRmELziU/Bq5Hqn1mgSxW/hguUl8g73lL1Hs=)
2: 8lqYFrGrNOkRZZeWUQj06Qu37Rs.roa (hash: ffxrtsFLmlsEwmAGCn/uwuGnyvYGEI5eYJBSJExNWs0=)
3: goJ06I4X-EH8W30V7EVn5y0FKWk.roa (hash: 3tlp0UONPTSFHKc2l1cIXSXdpnGW/o8EYSwZkHrH5Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:c8:ac:1a:b9:21:fa:bd:ab:7c:a6:79:3c:9a:22:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb
Validity
Not Before: Sep 10 04:00:58 2025 GMT
Not After : Sep 11 04:00:58 2025 GMT
Subject: CN=23200b57d5265ac7b1ad12144382417c06367e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:ce:50:6c:ca:67:2f:9f:e4:20:58:5f:d8:
53:50:a9:4b:1d:ec:43:39:66:36:50:be:2c:db:4c:
fc:47:51:b2:e6:58:7d:53:38:34:f8:95:66:4e:b9:
12:d7:32:6e:d8:6c:10:3f:cc:02:6f:4a:a4:31:9d:
ae:c1:6d:6a:e4:3e:48:35:e4:42:54:2f:64:53:40:
c2:69:81:08:5b:1f:0b:3f:95:30:31:c9:2e:04:73:
96:62:a1:34:d5:7d:d2:54:67:d9:09:26:3a:52:dd:
ef:09:f1:eb:4d:4f:42:7d:ef:96:9a:11:3e:0f:11:
76:c5:71:57:a3:b7:eb:30:b2:53:26:c8:04:79:b4:
d1:1e:e0:75:be:23:28:03:1d:d4:8d:28:d3:0f:4c:
cd:fd:7b:36:bb:ac:fd:cc:30:06:a5:76:a1:2f:d4:
bc:72:f1:42:3a:e2:83:5f:d7:d1:fc:d2:a3:7d:94:
9c:a2:c7:c9:ae:2c:c8:c9:29:f3:97:3b:1c:b2:f3:
4d:81:12:6c:ab:77:ba:58:ba:98:7f:8c:73:ee:e5:
d5:48:74:f3:df:e7:15:79:1d:f3:b7:bc:1d:e9:39:
b6:27:ab:87:21:d7:a4:61:b4:2b:3e:50:7e:6b:8e:
7d:15:72:2c:0e:4b:28:6c:f5:c6:6f:c0:63:eb:d4:
c2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:20:0B:57:D5:26:5A:C7:B1:AD:12:14:43:82:41:7C:06:36:7E:6A
X509v3 Authority Key Identifier:
keyid:FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:42:87:71:9c:94:8e:a1:f8:e4:6d:0c:12:e7:38:6d:bf:21:
c6:f9:5d:b8:f4:8e:ca:bb:0a:3b:c1:49:04:ed:e8:f9:6c:2d:
32:e2:ec:c0:88:73:8a:7e:e5:25:70:6d:50:ba:4b:9f:e0:b2:
cf:f3:91:9d:4b:a1:be:24:85:73:ea:f2:75:49:fe:b9:23:f7:
a3:b3:a1:fe:8a:b0:f6:a6:33:3e:ab:e0:1a:e3:f8:64:ef:5a:
37:02:f4:96:fd:6f:ff:ca:4a:5f:c0:52:c1:1b:0d:68:db:13:
ef:0c:34:31:48:2f:57:1c:f9:17:92:51:9b:78:e2:8a:8a:f9:
55:7b:23:14:86:b6:19:27:35:78:32:28:64:7c:64:3c:96:6f:
7c:7c:f6:5b:a8:fa:56:c7:75:80:2a:33:06:b8:b7:00:af:c5:
1a:3b:b6:bb:c7:a0:53:ad:80:d0:4d:52:57:7c:bf:5c:fd:f0:
a5:1d:37:1a:f9:d1:fd:61:8f:e5:a5:74:ad:c7:05:62:12:72:
07:62:b5:a0:90:2a:7f:96:9a:13:13:cc:f2:73:7a:d1:dd:af:
50:fd:a2:22:13:6f:f9:bc:03:fd:0f:8f:60:1e:9a:8a:7a:3f:
72:cf:d4:40:b0:13:f2:ae:0d:05:d6:32:c8:77:06:2f:6e:27:
fa:3e:5e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:01:05 2025 by rpki-client