Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
File: 1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json)
Hash identifier: U0wPeASHObwRnFTP4A/kmMj5qX8f/L5neH/ZeUvIWio=
Subject key identifier: 31:DE:C3:B5:7B:C1:36:83:7F:F6:D3:16:E1:44:AF:7E:9B:2C:AD:C3
Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097
Certificate serial: 0199FFC7BF426E979F48FEF6828E53F18267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
Manifest number: 036F
Signing time: Mon 20 Oct 2025 04:01:44 +0000
Manifest this update: Mon 20 Oct 2025 04:01:44 +0000
Manifest next update: Tue 21 Oct 2025 04:01:44 +0000
Files and hashes: 1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: VpMjpj3q0G2e1gfBL2XlxvohVeupKodF0X5jGj17mkw=)
2: EoE17t8PTfrUuXfL9C5ZkqxDhJ8.roa (hash: sAVxmU6pnEn88UNK22PTFUDf8gXcyDueVttcLFRxFqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:bf:42:6e:97:9f:48:fe:f6:82:8e:53:f1:82:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097
Validity
Not Before: Oct 20 04:01:44 2025 GMT
Not After : Oct 21 04:01:44 2025 GMT
Subject: CN=31dec3b57bc136837ff6d316e144af7e9b2cadc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:fd:d7:1f:c4:c7:b3:2a:40:fa:da:3b:3c:
8a:e4:84:2e:52:e9:45:0d:8c:e8:9f:e1:eb:bd:32:
be:6a:92:79:4f:fd:2b:cd:ca:b6:1c:5e:7b:eb:f7:
59:09:92:7d:f6:34:ae:9f:a8:62:76:84:12:33:cc:
e6:93:3b:82:d8:92:09:1d:33:ec:c8:98:5d:bf:10:
9b:0e:b4:38:ff:76:da:92:6c:16:09:ea:ea:3f:fb:
4f:4b:2a:4d:45:99:16:e7:6a:9c:ef:e3:33:34:26:
58:0a:dd:53:8e:b6:fa:a3:47:93:5d:d4:4d:61:1e:
ba:12:5f:fe:39:03:d7:7a:5f:f7:4e:ed:87:85:37:
a0:bb:81:32:14:dd:5a:d1:03:07:bd:09:b2:37:1e:
6d:83:9e:ac:95:89:6f:3c:8b:51:01:b6:2d:3e:1f:
f0:e0:bb:68:8e:93:23:c5:3e:73:02:bb:a8:bc:db:
c9:91:71:ff:24:18:ac:39:4e:56:e2:e2:34:28:5c:
2c:04:d8:7b:06:8f:63:46:49:5b:38:f0:16:47:f3:
3b:3f:c2:b2:9f:df:a5:ce:9d:b5:c2:48:56:c4:d3:
ec:cd:c4:df:3f:c4:52:e5:f0:c3:c6:46:b2:8b:85:
e8:7f:72:e1:55:69:78:44:79:23:66:24:36:05:fa:
44:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DE:C3:B5:7B:C1:36:83:7F:F6:D3:16:E1:44:AF:7E:9B:2C:AD:C3
X509v3 Authority Key Identifier:
keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:14:65:10:39:21:0a:70:fd:59:9a:f6:9c:24:2b:a4:69:8f:
fa:5b:72:60:3d:8f:a6:ba:b1:9b:b8:b6:e0:e5:55:98:f8:d8:
0f:b2:5c:81:1b:24:52:bf:ee:b6:a1:eb:cd:bb:af:02:20:ad:
b5:c1:10:7c:e5:f3:46:e4:24:b2:9f:f9:34:53:0a:fd:7c:58:
ea:8e:b1:8a:ec:b3:58:63:b7:d7:65:3b:33:bd:18:72:54:84:
f6:97:a9:d7:54:6b:75:8e:27:3a:f6:1f:9f:57:0b:4b:7c:c1:
7e:b9:c2:17:83:86:83:76:51:16:a7:c5:c6:86:f2:3d:8e:7c:
a8:53:7c:68:b0:48:7e:b3:06:17:8c:ce:18:36:11:f2:86:54:
57:a9:1a:31:07:0a:82:ef:45:8c:55:cf:9a:38:a5:43:9e:74:
10:04:e5:07:c9:b0:22:cc:94:4f:2f:85:9c:f0:04:ba:92:20:
81:ec:41:6e:f0:73:1a:38:33:14:bd:85:34:42:22:12:42:48:
33:e2:95:3f:fe:d1:8b:b4:68:4f:4e:d4:f9:6e:83:9a:e0:19:
e2:bc:12:24:28:0b:18:69:0e:ad:57:18:76:8e:32:56:c4:11:
bf:de:95:78:aa:18:2d:43:bc:8f:4c:b6:4c:64:de:01:71:59:
19:b8:c0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:37:10 2025 by rpki-client