Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
File: 1-c9m7XQoo55j8NJzYDf0McQao08.mft (raw, json)
Hash identifier: zJSF2G/L5kTFGjnBmL85Wth35p92RYOuEzmYzODC6+E=
Subject key identifier: 1D:FA:2C:84:6E:2F:11:93:B1:B5:8F:C5:13:5F:48:60:C4:48:44:12
Authority key identifier: F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
Certificate issuer: /CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Certificate serial: 0198D5F126F8798A8B826EDF5139A9EC5A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:07 +0000
Manifest this update: Sat 23 Aug 2025 08:00:07 +0000
Manifest next update: Sun 24 Aug 2025 08:00:07 +0000
Files and hashes: 1: 1-c9m7XQoo55j8NJzYDf0McQao08.crl (hash: doWbbAadfwVvw2LZxrhApawdV18FEySS6URxn1+tsYU=)
2: rbOZFLBJLeiBgSg-ywSTHEPc89w.roa (hash: Wz1ZKiJOk56RIdFfsa2AALc0JqTjfQEXp/iXAbjA7+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:26:f8:79:8a:8b:82:6e:df:51:39:a9:ec:5a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Validity
Not Before: Aug 23 08:00:07 2025 GMT
Not After : Aug 24 08:00:07 2025 GMT
Subject: CN=1dfa2c846e2f1193b1b58fc5135f4860c4484412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:c1:88:1e:1b:5f:86:f0:38:e4:19:12:ed:
32:5d:d3:b8:fb:66:fc:b0:58:41:89:3d:75:2d:a2:
d8:27:b5:78:de:f5:2f:88:1b:e0:94:86:d8:d0:ef:
fb:ba:1c:05:d1:04:e5:8d:db:c1:3b:22:0b:55:cc:
6c:a9:1d:37:3d:6b:d9:d4:33:6d:5a:a5:d6:c8:3a:
37:b0:de:21:ca:bd:f5:19:ee:b0:b8:eb:4f:2b:7e:
06:f3:ca:51:28:40:9f:b2:8c:4b:dd:2c:ba:47:03:
50:69:f9:fa:42:2d:02:bb:6f:1c:a7:18:3e:8d:e9:
3e:ad:60:0a:4e:6e:f5:ce:8a:25:28:53:a0:5a:49:
86:a5:30:18:1b:74:e5:49:48:aa:5b:c6:1c:56:1d:
6a:a9:1b:90:52:a3:c0:d4:a6:80:82:43:f4:40:b6:
51:4b:ac:fd:5f:71:a1:cc:e5:3c:f7:96:f6:d5:e1:
4d:bd:85:a5:cd:a9:ea:c2:ad:17:3b:60:d3:7b:14:
34:a6:41:c4:3d:a4:ee:12:8b:d7:b5:f5:93:ae:78:
6d:b6:e9:17:50:39:66:cf:f3:81:cf:35:9e:b9:98:
5c:13:7e:b4:5d:9e:c4:be:8b:5c:51:26:d4:c7:20:
72:69:7c:56:82:52:2b:b7:79:a2:de:ee:f7:c4:fb:
a3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FA:2C:84:6E:2F:11:93:B1:B5:8F:C5:13:5F:48:60:C4:48:44:12
X509v3 Authority Key Identifier:
keyid:F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:18:a2:dd:e9:d7:03:59:70:ab:a0:96:c9:a1:81:ff:d9:78:
24:c9:9b:5a:35:6f:2f:5b:a7:d1:57:c7:7d:7f:4f:20:fd:a5:
a2:df:c6:73:c4:e5:e2:37:db:d5:80:4a:b7:a1:4a:0b:e1:a1:
8f:49:82:e6:bb:7f:0a:d5:2d:1d:06:74:ed:38:e8:5f:57:a8:
0c:1c:a4:53:4e:06:89:6c:9a:99:0c:14:28:9b:d6:61:9e:4a:
9b:ec:05:e6:df:5e:f6:14:5b:7e:4a:e4:18:dc:6f:71:bd:50:
27:34:d3:90:aa:30:8e:ff:c1:37:63:2e:c6:06:43:75:59:29:
00:19:02:63:b6:fa:2a:96:f5:d8:38:0d:0a:11:d6:9c:74:42:
66:54:da:bf:30:ef:a2:0a:93:bd:7b:54:0a:62:df:15:6a:f4:
2e:be:c7:a0:69:dd:10:b6:43:f4:fd:9d:62:44:f0:f7:1d:6b:
2c:03:c7:f5:29:14:aa:2b:9f:c7:fc:68:f0:13:ba:85:39:1d:
1f:b2:34:21:10:cc:61:75:7c:ee:52:8b:9d:5f:8f:3e:be:66:
dc:6f:2c:09:4b:29:fd:81:79:fc:18:d3:30:e9:df:e3:06:28:
30:c9:53:e9:18:d7:34:76:a9:d0:5f:c4:69:3c:85:8d:eb:a4:
b2:7f:09:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:19 2025 by rpki-client