Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
File: 1-cJWdFvSc8kYauKWNoohF9PSytk.mft (raw, json)
Hash identifier: dUlHaLGGnvuO4Un0cQmcgrm4YnPFMjOyQ1AA6jbibec=
Subject key identifier: 9B:2A:1F:4C:D7:74:5B:4B:92:8E:B7:35:23:6B:2F:73:44:70:43:83
Authority key identifier: F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
Certificate issuer: /CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Certificate serial: 0198D5F1AF3F54895D43BD80121903A9CD9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
Manifest number: 0C1D
Signing time: Sat 23 Aug 2025 08:00:42 +0000
Manifest this update: Sat 23 Aug 2025 08:00:42 +0000
Manifest next update: Sun 24 Aug 2025 08:00:42 +0000
Files and hashes: 1: 1-cJWdFvSc8kYauKWNoohF9PSytk.crl (hash: 5y0js/+BpdL38CpfT6lwrurBEMg/0L57kFFHcyofStU=)
2: N0McjdXZl5TUnCSac35uIbLCfTQ.roa (hash: 3oYd1qltvihRo6bFoxlQSV7suemsf1IDfXlwXxFseIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:af:3f:54:89:5d:43:bd:80:12:19:03:a9:cd:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Validity
Not Before: Aug 23 08:00:42 2025 GMT
Not After : Aug 24 08:00:42 2025 GMT
Subject: CN=9b2a1f4cd7745b4b928eb735236b2f7344704383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:56:21:f9:a4:0a:22:42:9e:c3:2f:6b:b4:
06:5b:55:88:39:f5:4a:bd:9c:fe:c7:68:e6:ae:6c:
54:ff:0a:af:3d:f2:10:32:70:88:37:3c:ce:a2:15:
96:a5:b4:63:1f:97:05:fe:43:63:6b:c7:2b:d7:46:
97:91:31:6f:12:ff:09:00:3c:b4:e6:2b:10:2a:56:
88:4d:a6:5f:d9:9f:59:a2:19:e1:ab:8a:fc:df:e8:
f6:cf:10:69:52:e7:49:61:cd:ae:06:13:a5:f1:ad:
05:1c:28:5e:b4:0d:e9:e0:ab:5d:f1:f8:0a:ba:47:
48:a9:20:8f:e7:dd:5a:5b:aa:1c:92:d6:51:4c:d5:
81:0b:9d:a8:ae:82:55:37:24:4c:4b:2b:47:1e:12:
50:59:1c:e7:da:5c:68:4e:f3:84:e7:c4:2a:39:89:
9f:38:fa:81:81:3c:2d:be:5b:82:68:cb:19:8f:4a:
f8:c6:0c:83:cb:f6:bb:17:09:2d:a9:4a:e6:25:30:
2e:13:98:d8:fc:71:ed:6b:e3:52:fe:14:b4:1d:bf:
0f:aa:46:c5:44:c9:be:95:a4:df:23:d5:23:66:2f:
c9:d4:b4:86:75:59:c1:e7:da:b1:cd:01:0d:be:6f:
fc:b9:2a:8b:2d:63:91:f9:83:1a:15:8b:98:4c:ee:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2A:1F:4C:D7:74:5B:4B:92:8E:B7:35:23:6B:2F:73:44:70:43:83
X509v3 Authority Key Identifier:
keyid:F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c5:e7:5d:ed:47:25:6d:6e:a3:e9:98:59:b4:c9:ac:b0:f1:
9e:1f:b5:ad:e8:a1:76:ce:ea:bf:46:36:03:d2:77:4c:57:32:
9d:40:a4:df:fd:14:e5:f6:58:9f:01:dd:c4:04:90:f1:29:89:
e4:5c:ab:71:11:da:b3:32:0a:b0:f3:1d:db:20:be:c2:d3:84:
c4:30:9a:48:d5:47:bf:1e:bf:11:d5:10:73:b0:80:8f:18:d8:
59:64:24:c0:89:2c:1b:aa:6e:16:4d:58:d9:f8:cf:14:4c:de:
14:da:9c:18:9f:5d:3f:0a:4b:36:38:63:bd:8d:69:98:aa:ea:
77:a7:10:2b:63:49:88:7d:47:83:b1:89:4d:b6:90:8d:c2:bd:
5c:c4:84:c8:11:e3:9c:83:79:f2:5a:e4:15:b3:89:c9:7d:22:
67:73:8c:d3:07:3d:e8:b4:68:b6:75:fe:61:51:e8:76:ed:6e:
94:68:b9:30:da:d9:29:da:92:4e:ce:85:36:06:14:75:02:86:
5a:75:3b:24:9c:78:ae:fb:9f:7b:89:a1:0e:2f:83:9f:41:6d:
d2:ce:ba:b0:24:6e:8f:e4:10:61:06:13:84:a3:fc:c0:a1:ce:
f9:da:bf:3b:52:bc:6a:c4:88:56:2f:b1:00:f7:b6:a3:0e:34:
bd:a1:f8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:04 2025 by rpki-client