
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
File: 1-9W1c_sNJpmSp5qea0XN1iDezBE.mft (raw, json)
Hash identifier: 41H7hTYkBHuiV4dfzfgAal59EWOWZ17bG2Fonz+iz/Y=
Subject key identifier: 8A:E1:B4:F5:B1:54:03:1D:8F:B9:78:C2:E0:AF:A1:91:77:C3:00:4E
Authority key identifier: FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
Certificate issuer: /CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Certificate serial: 0198D5BBA9CF1CC7065B3CF391F7D035E819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
Manifest number: 06D4
Signing time: Sat 23 Aug 2025 07:01:42 +0000
Manifest this update: Sat 23 Aug 2025 07:01:42 +0000
Manifest next update: Sun 24 Aug 2025 07:01:42 +0000
Files and hashes: 1: 1-9W1c_sNJpmSp5qea0XN1iDezBE.crl (hash: 9xYuL6wck2nn/uc87SjfZOjPKXsu2qNjDqH+69bR0Gs=)
2: xxpwWq99h2UC8fGaA57WvXmJQIY.roa (hash: hB0aBJhUko4vLE69LgJZtcXWGS9cGGQQvN4ZagAecyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a9:cf:1c:c7:06:5b:3c:f3:91:f7:d0:35:e8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Validity
Not Before: Aug 23 07:01:42 2025 GMT
Not After : Aug 24 07:01:42 2025 GMT
Subject: CN=8ae1b4f5b154031d8fb978c2e0afa19177c3004e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:64:90:fc:c2:56:01:76:d9:36:46:80:56:
61:f8:69:d0:72:86:a5:3d:08:a6:8d:9f:6f:a2:a2:
48:f9:65:9e:bf:9b:d4:04:cf:17:35:86:0f:73:f5:
3b:af:da:e2:5e:a3:f2:0b:65:7c:c0:07:7f:af:c7:
92:78:9e:0a:58:2a:f8:7b:3e:fb:a9:af:66:8d:d6:
f8:31:06:10:30:6d:8a:fd:0d:67:12:03:6a:49:66:
09:3e:40:63:65:8a:92:81:95:04:c8:c1:e8:f3:54:
c5:59:0f:9c:78:d4:03:19:ff:1b:96:ef:ba:28:b2:
08:7c:c2:7e:e8:cf:3c:2b:24:05:1a:fa:db:01:0b:
78:71:7c:1d:e1:fd:2e:dc:29:f6:d6:18:c3:36:15:
d7:ae:1a:9c:a0:9c:6d:52:ea:2e:df:76:5c:18:7c:
98:5b:3b:0a:23:ef:d5:f2:f6:39:fe:71:a8:1c:31:
ac:01:c5:d8:8e:d4:a3:4f:68:9f:21:fa:80:59:76:
7d:96:5a:73:f5:ff:49:cb:34:e6:58:78:4e:5a:10:
ac:40:0b:6c:2b:9c:7e:c4:26:f8:b1:e0:f9:eb:a1:
99:dd:37:6f:ce:6d:d1:d4:82:f2:ca:ff:2a:34:29:
68:9f:71:35:e6:4e:fd:1f:47:95:ed:80:2b:3a:65:
e8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E1:B4:F5:B1:54:03:1D:8F:B9:78:C2:E0:AF:A1:91:77:C3:00:4E
X509v3 Authority Key Identifier:
keyid:FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e9:38:a2:68:02:65:db:1d:e0:d8:95:6a:cb:07:91:bd:67:
b8:b5:77:0f:dc:3b:a4:cc:cf:c4:38:32:ae:e9:61:c8:01:68:
a6:ff:09:31:98:ab:bb:c8:5b:1e:79:0d:2f:a5:e3:ab:9f:32:
9d:7d:9a:9b:17:b0:a4:cc:8a:13:30:3b:5f:80:f6:e7:f1:86:
74:6d:68:6c:b4:45:e5:61:e5:22:3b:5d:b3:3a:d4:89:48:04:
74:1b:69:f1:29:14:f5:ef:70:12:82:a3:2d:b7:28:f6:1f:33:
99:6c:9b:45:64:58:9e:2a:19:2f:a1:1f:bc:2c:fd:fa:85:8e:
b4:70:20:ff:90:e7:02:65:f9:4f:0f:6d:a4:c2:91:89:9a:05:
bf:6a:71:cf:6d:6a:53:ba:f1:7b:60:af:db:c1:80:ed:2d:83:
1f:6f:c0:9c:a8:f8:9d:3d:79:65:f4:9f:cb:b2:88:8c:47:3b:
7c:df:d0:fc:05:5c:04:80:72:16:a7:05:80:3b:82:4f:f7:67:
d8:f1:0b:af:5c:4c:47:6f:d7:e2:57:2b:9c:d6:e9:ee:37:04:
69:1a:c5:8a:ec:fb:fd:e0:fe:fc:e7:1c:66:7a:65:e4:43:30:
d6:62:42:bf:e1:33:19:4e:11:b2:cb:d1:c8:cb:2b:a1:a3:cd:
d8:98:ae:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:59 2025 by rpki-client