Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
File: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft (raw, json)
Hash identifier: p/7P9kekGAeNIyCZkkOITHI7tKvyvXlr4NwkAF+U+dI=
Subject key identifier: 12:E0:9B:EF:1B:74:D8:5B:5C:A8:0F:E9:D0:CE:1A:C0:C8:6E:DE:F9
Authority key identifier: D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
Certificate issuer: /CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Certificate serial: 0199247B2A15160B0468A466914AE18959C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
Manifest number: 026B
Signing time: Sun 07 Sep 2025 14:01:15 +0000
Manifest this update: Sun 07 Sep 2025 14:01:15 +0000
Manifest next update: Mon 08 Sep 2025 14:01:15 +0000
Files and hashes: 1: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl (hash: xHZb/dzSp0B+DMy2ZPLkmfwdD5U/uB2DTu/YMI/3qOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:7b:2a:15:16:0b:04:68:a4:66:91:4a:e1:89:59:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Validity
Not Before: Sep 7 14:01:15 2025 GMT
Not After : Sep 8 14:01:15 2025 GMT
Subject: CN=12e09bef1b74d85b5ca80fe9d0ce1ac0c86edef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:22:a7:0f:25:5a:26:b9:8b:49:65:2f:12:2a:
9f:50:17:62:a9:45:c7:39:73:7a:ba:02:71:27:97:
e9:f9:ac:38:fa:56:cd:5f:dd:47:fa:f5:c6:1c:0e:
4f:9e:99:79:07:7c:fd:97:e0:41:eb:51:3f:14:e2:
75:63:7c:e4:9b:ad:62:48:3b:76:e9:e4:a8:6f:38:
b5:f1:f1:cb:51:e0:c8:29:72:61:33:63:d7:6d:0b:
67:bb:07:36:f9:ad:37:8b:00:84:e8:1e:70:cd:4d:
fc:18:90:16:90:28:28:f3:bb:a3:ea:95:fb:bb:38:
8a:fb:64:5d:4e:06:ec:30:58:ea:69:b3:bb:e6:8d:
56:e0:62:65:7b:b5:f3:70:ea:0a:9e:14:b0:97:b3:
8d:f3:e8:9b:ec:86:20:82:5c:bb:4a:c4:c7:cc:ec:
5e:1b:e2:52:37:a8:c9:1d:41:0c:04:a9:0b:57:c1:
72:f4:a4:13:98:e9:82:27:08:66:0f:fe:13:4a:e6:
45:82:a4:38:e3:44:1f:67:42:f6:30:8f:0e:13:2c:
d7:6e:c0:7e:99:47:50:0c:bc:73:88:1b:7f:2d:ec:
f0:90:2e:c0:1c:d6:a0:31:c6:e6:61:b1:3f:b3:8a:
5a:e1:04:39:6b:93:c5:e6:34:b8:e2:79:66:f6:e1:
06:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E0:9B:EF:1B:74:D8:5B:5C:A8:0F:E9:D0:CE:1A:C0:C8:6E:DE:F9
X509v3 Authority Key Identifier:
keyid:D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1c:ee:0b:d3:c5:72:44:1a:32:13:52:e9:a8:d0:1d:4d:2c:
97:39:af:63:0d:a7:3f:f6:8c:5a:b5:24:de:d6:70:93:0a:87:
11:1b:c5:11:6e:d6:c8:f6:ee:4d:f1:59:6e:e7:63:7d:6f:9c:
8f:1a:0c:6a:e5:d7:16:d4:cf:bb:3c:41:23:65:8f:b2:54:d8:
b4:b7:6c:19:b6:55:3d:ee:b1:51:76:d0:6c:84:74:97:11:d3:
c5:8a:d1:ec:a6:fd:99:3e:dc:63:e6:df:b8:28:1f:73:3f:d8:
85:b4:7c:a9:4c:b4:1f:64:0b:fb:93:35:6b:fa:f4:56:e2:90:
32:56:88:f3:1b:a4:e5:1b:19:3a:d5:c5:eb:ae:d1:eb:1f:e4:
fc:89:f4:af:7c:93:02:8c:db:8a:1b:6f:c6:de:d3:4d:af:6d:
2a:a7:2a:31:ba:79:a3:72:43:8c:cc:bc:ee:24:90:de:4f:09:
e8:15:2d:e2:b6:31:c1:c2:26:3a:6f:61:aa:4f:d9:f7:07:e6:
cf:d2:99:8b:db:52:38:46:ef:3d:fe:95:1f:aa:89:55:fc:37:
e5:39:9e:a5:f1:00:c7:7d:8c:13:a3:12:0e:67:c0:a2:a0:54:
73:f8:d2:ae:cb:64:c6:68:e7:1d:63:18:1e:32:14:53:c4:13:
71:d2:89:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:00 2025 by rpki-client