Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
File: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft (raw, json)
Hash identifier: pNqIdYsV1d+NOFjDYnJQy9ZfHeLGnXullYetYVle1uk=
Subject key identifier: DD:6A:EF:94:E6:04:8A:A0:2E:4E:0C:A5:A3:03:B4:23:1E:B7:83:60
Authority key identifier: FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
Certificate issuer: /CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Certificate serial: 0198D884C6C522FBCAA462FDC423D7A8EAB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 20:00:36 +0000
Manifest this update: Sat 23 Aug 2025 20:00:36 +0000
Manifest next update: Sun 24 Aug 2025 20:00:36 +0000
Files and hashes: 1: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl (hash: hFr2GrvlfRliTyHVSdB/biwykA+KIVvE17xFoQ1KQjo=)
2: b1EekpPHczR9SbF16iWNQ3damig.roa (hash: Fw8tFU/rOTZrNv9R1o3/Px5yWIdWmaPwzJuJsuMKmH0=)
3: eADzDJE6P-qH0r5TYUNn_ncYKzA.roa (hash: PxBgbfMtKG6Jth9+kbRfrbslcA+mMm5JhYaaugK0nGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:c6:c5:22:fb:ca:a4:62:fd:c4:23:d7:a8:ea:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Validity
Not Before: Aug 23 20:00:36 2025 GMT
Not After : Aug 24 20:00:36 2025 GMT
Subject: CN=dd6aef94e6048aa02e4e0ca5a303b4231eb78360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:ce:73:00:25:05:66:5c:82:4a:af:03:33:
9f:ee:4d:5a:e4:71:51:e0:f9:d7:e4:30:a5:19:59:
fa:e4:4d:13:82:94:77:ba:40:3e:da:83:2b:d7:28:
21:13:60:43:c4:fc:24:28:13:68:42:85:ad:50:29:
52:d8:08:cc:c8:9f:37:17:13:0c:ca:d6:54:37:6d:
9f:8a:d4:c1:1d:9c:d3:4c:bf:0e:c4:be:bf:76:98:
96:e9:e7:ec:24:ea:69:f2:e6:ae:83:68:16:81:7c:
af:6b:00:05:5e:b5:2b:4b:e4:9e:7c:87:e8:55:66:
3e:23:64:93:ff:e4:63:76:bd:b7:3c:1d:8d:45:0e:
a5:11:aa:37:f1:c1:78:f5:9b:43:eb:f6:13:a4:4a:
3d:20:34:9b:67:d6:69:4e:16:ee:3e:ef:ed:74:f5:
33:21:90:cc:37:d5:ef:47:04:4d:04:7e:a9:ce:9c:
16:4d:ae:ea:23:b5:9b:56:d0:66:60:6f:7a:fe:6c:
a4:dd:66:36:24:35:ce:5d:cf:21:65:a4:c6:76:6c:
b7:ec:3c:ea:ac:a3:c2:09:b7:74:9f:2a:4d:b6:b5:
13:17:8d:67:e3:32:f1:55:be:55:46:1c:17:90:f6:
11:89:01:54:b5:11:d6:89:7e:9b:b6:30:69:2f:62:
86:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6A:EF:94:E6:04:8A:A0:2E:4E:0C:A5:A3:03:B4:23:1E:B7:83:60
X509v3 Authority Key Identifier:
keyid:FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e1:67:c7:e7:08:d3:62:23:c0:c7:a4:e0:00:c4:53:1d:7f:
4e:0d:ba:c8:69:2d:85:3f:6f:e9:b7:ed:0d:e4:b7:db:af:7f:
61:30:26:9f:4e:20:db:4d:c4:7a:90:ce:ae:89:c2:39:ce:84:
25:ac:ae:a7:2d:4a:02:19:a9:a7:59:17:45:a5:9f:69:bf:bc:
f3:74:a2:45:d6:72:06:c5:0f:3f:06:09:f4:30:f0:17:51:7e:
34:1f:a0:e7:18:36:22:58:a4:e2:34:50:0f:d7:d9:f0:c8:42:
a3:e9:f9:eb:03:08:59:64:2f:f7:5b:b5:05:c0:90:b2:54:fa:
b7:02:9c:22:79:c9:26:47:bb:da:12:8a:cc:dc:35:ff:01:2c:
88:ba:4e:cf:0d:89:86:25:40:e1:4b:74:bf:17:bb:b3:56:0f:
95:2e:60:0c:20:48:65:15:be:85:d0:2f:0a:11:ed:2c:a3:2e:
ad:b3:48:77:08:54:c8:ff:72:52:47:90:f4:6a:78:87:c5:01:
c3:78:96:1a:55:46:ce:26:f5:97:60:7d:89:12:2e:42:1b:24:
86:78:6e:34:9a:3b:46:16:e6:15:98:40:e2:7c:0e:5d:9a:2f:
09:be:7c:86:fb:bc:99:f8:2c:60:91:7b:a8:ca:d4:2a:eb:f2:
b2:5a:83:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:06:09 2025 by rpki-client