Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
File: 1-545C9y9la-rSl_4xO2e_ENoe9E.mft (raw, json)
Hash identifier: GK/Wb8b8WiEKFZNni4jCP3TAZkooitjH75hnXuxbsSY=
Subject key identifier: DF:26:9F:AF:CD:92:47:C0:D8:D3:5D:F7:79:8B:68:52:4F:90:58:E9
Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
Certificate issuer: /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Certificate serial: 0198D515ED537896DD1201C853D1BCE178D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
Manifest number: 0F99
Signing time: Sat 23 Aug 2025 04:00:40 +0000
Manifest this update: Sat 23 Aug 2025 04:00:40 +0000
Manifest next update: Sun 24 Aug 2025 04:00:40 +0000
Files and hashes: 1: 1-545C9y9la-rSl_4xO2e_ENoe9E.crl (hash: djYOD8/XgMRbO9IcB7D7Xap+3gc1wIvxl/qABSG/y2w=)
2: AQyWHoTpIoD9YkmssqSGTmtU3kY.roa (hash: gQkpbE3OwjFrYUS2/tIcrYz4PZ/Z8nNnk27GBtk07kI=)
3: n9QbbxtHUjuRXoqW5WKf1TIqSDE.roa (hash: VlEMVs5cMOSULcZyXmypke2XQns+4ddKAif1EvT7d+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ed:53:78:96:dd:12:01:c8:53:d1:bc:e1:78:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Validity
Not Before: Aug 23 04:00:40 2025 GMT
Not After : Aug 24 04:00:40 2025 GMT
Subject: CN=df269fafcd9247c0d8d35df7798b68524f9058e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b0:80:33:92:6f:28:f2:06:cb:90:bc:51:f7:
f6:11:6c:f3:c1:e5:bd:ba:70:91:b2:16:d3:86:c9:
ff:b9:ab:ac:1a:bd:72:a4:70:d5:23:44:df:db:49:
1f:21:b3:80:5e:4f:58:23:d2:51:b1:70:31:8c:25:
fe:09:52:3c:ec:04:e4:58:b3:20:70:ae:70:10:65:
3a:2e:d2:69:2b:2c:30:eb:d9:fa:a0:e2:ad:b0:57:
d3:72:f1:a7:22:3d:d3:74:c9:16:51:c7:a3:74:5e:
c1:b5:76:5e:9c:69:ff:4b:11:ae:a3:ac:88:f9:ba:
3e:aa:84:93:fc:a3:6b:14:51:a3:07:b9:85:78:d3:
0d:bf:3b:f1:48:77:ba:0c:6c:ce:79:b8:59:b3:90:
9d:60:4e:b0:f7:4b:31:22:c4:3b:08:d6:f9:bc:0c:
ec:cc:f8:45:83:72:1d:f4:e5:a8:9c:e5:15:40:f2:
8e:77:5d:e2:3a:92:4e:24:df:03:ca:b0:16:08:e7:
16:22:f1:f5:7e:ea:78:cb:0c:13:8d:24:c8:8a:79:
b9:8d:1e:75:95:e9:a0:1d:f8:a9:f4:54:d1:ac:6a:
f4:f3:0f:17:6a:c3:29:0c:13:4a:65:62:08:4c:b2:
58:b3:f3:59:7a:7c:ab:42:2a:ca:e9:21:8b:4c:13:
f7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:26:9F:AF:CD:92:47:C0:D8:D3:5D:F7:79:8B:68:52:4F:90:58:E9
X509v3 Authority Key Identifier:
keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:87:12:49:91:4e:b8:12:21:d2:01:48:28:cd:24:d0:21:86:
b4:25:65:f5:0c:ce:ed:be:1e:a1:e6:0e:22:89:81:3f:76:b1:
32:9a:78:1c:a7:59:ed:cb:d1:08:42:55:b1:03:98:12:b1:0e:
86:8c:87:fc:4a:7f:7b:b6:b4:fd:4e:13:46:03:0f:31:18:e9:
7a:ab:b3:da:9f:19:36:78:7a:a0:23:43:19:c2:aa:c8:7e:2a:
1a:ae:40:f0:44:5f:c8:d2:87:c3:6c:30:17:de:f2:81:c7:29:
fe:a2:dc:c2:17:90:53:c9:6c:f0:0e:6b:6a:cf:05:f9:e0:a2:
98:96:de:f1:2e:5b:a5:e8:ce:b3:6a:4b:42:27:b4:61:12:58:
5d:69:33:ff:5f:e1:a2:bf:64:15:49:41:57:97:e3:ff:dd:9a:
dc:03:2d:4b:d6:4f:03:7d:21:7e:86:39:29:76:92:a5:9b:83:
03:18:d3:e6:ac:20:a5:67:68:06:81:3c:ea:06:90:90:ad:4f:
04:15:81:be:6c:e5:43:67:87:84:8c:e0:f8:f8:97:6f:33:69:
fd:f9:15:a0:08:95:a7:a9:10:02:d4:8c:ff:d5:e1:50:86:2d:
06:fd:dc:b1:5b:12:c8:39:ee:25:dd:8f:e2:dc:0b:a7:fd:9b:
79:9e:8a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:01 2025 by rpki-client