Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
File: 1hCKSF368GqTH1Q8CFoAnGrqLZw.mft (raw, json)
Hash identifier: H47jD9Es5Vy5DjzS0a0/TXxF1gn9C6ogR0vyGIZLsIY=
Subject key identifier: 67:FE:8B:B7:2A:06:4C:76:2E:95:00:FE:71:17:CF:CA:66:A2:38:71
Authority key identifier: D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
Certificate issuer: /CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Certificate serial: 0199FC8F4B9B75A8C28408A3F22DB15D85DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
Manifest number: 09EC
Signing time: Sun 19 Oct 2025 13:01:13 +0000
Manifest this update: Sun 19 Oct 2025 13:01:13 +0000
Manifest next update: Mon 20 Oct 2025 13:01:13 +0000
Files and hashes: 1: 1hCKSF368GqTH1Q8CFoAnGrqLZw.crl (hash: j8E9TwCOgbqxUrDrl23pNB1QiHjls+sMAPbbeEQw70s=)
2: XYlDbmNEweM6LqFALkkvUh2W9lE.roa (hash: 9gP6l/HCX+2ev9Uk9YYU1pfiHW7Ig/5Pk5coTY/utmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:4b:9b:75:a8:c2:84:08:a3:f2:2d:b1:5d:85:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Validity
Not Before: Oct 19 13:01:13 2025 GMT
Not After : Oct 20 13:01:13 2025 GMT
Subject: CN=67fe8bb72a064c762e9500fe7117cfca66a23871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:a1:a7:56:d2:ad:8a:3e:29:9c:0e:57:aa:
eb:ba:5f:60:f0:eb:e4:2a:03:d5:b9:46:58:a0:d3:
d4:ca:d5:9f:08:83:c0:98:91:d9:88:a7:51:42:43:
fd:4a:15:4e:a6:89:30:41:ef:53:85:b9:d3:dc:bc:
c0:05:ab:56:89:37:01:45:71:3f:b1:ef:7b:8b:9f:
23:84:ea:85:22:0e:f5:11:60:80:24:de:50:69:d6:
01:c6:b8:43:aa:11:3c:31:c6:f0:42:67:8d:fa:8f:
2d:71:d7:09:01:26:1e:ff:50:1f:2a:65:76:75:8f:
71:f4:c3:0d:20:17:24:b9:08:bf:03:9c:d2:87:3d:
fd:04:42:0d:f9:67:29:a5:1f:d4:2d:13:1d:37:76:
47:e7:c6:db:dd:90:b8:6b:af:23:e8:2f:31:cd:17:
6a:e6:b2:7e:dc:06:d4:41:16:34:f8:d2:64:10:86:
8f:ec:fc:ae:d3:d5:3c:98:7f:4e:1a:b5:fe:6a:cb:
0b:c9:d2:b3:38:2e:f4:ae:f4:11:d9:85:4f:b1:1e:
84:19:b2:e4:a1:d3:21:d7:53:5e:f9:89:01:73:b5:
d0:9d:3c:46:b7:d1:eb:fe:c5:4b:69:6d:db:c8:a0:
ff:8c:b5:e2:ab:4b:a6:2b:3f:aa:bc:fb:e8:ee:45:
24:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FE:8B:B7:2A:06:4C:76:2E:95:00:FE:71:17:CF:CA:66:A2:38:71
X509v3 Authority Key Identifier:
keyid:D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0f:57:3e:02:60:f1:c8:21:d8:44:08:8c:4b:25:ff:66:ed:
67:96:d8:94:76:6e:fd:d3:39:0b:d9:4d:fe:bf:a0:94:d4:5c:
3e:76:52:5c:c5:83:98:28:83:31:ba:b4:66:89:ae:1e:d3:99:
3d:a8:92:64:c2:6f:dc:b9:69:46:45:b0:1c:c1:78:d0:7d:3a:
9d:6e:bd:c3:db:0b:5a:90:52:e5:fc:10:99:27:b2:92:4d:5e:
81:b4:a3:20:63:9c:e7:f7:a2:bd:27:aa:65:23:4e:5e:ee:ea:
40:cf:7b:92:df:8e:ba:92:8e:47:78:16:00:b9:76:64:59:ab:
50:b3:de:f6:ad:1c:d1:41:c4:02:38:39:5f:e6:5f:11:0d:84:
e8:a1:b5:f5:8d:05:60:26:29:09:eb:7c:60:01:00:86:a8:93:
cf:24:41:25:e1:86:65:13:1b:26:dc:b1:2a:47:15:63:f5:8a:
ee:37:bc:6d:b5:a9:d7:17:99:8a:5f:e8:53:4c:8a:f6:e7:6f:
ca:13:9b:20:8c:c0:28:a1:1b:29:22:d1:2b:28:c8:38:b6:f7:
cf:92:82:b1:37:69:c7:1a:b9:c9:db:b4:5e:02:0a:aa:59:e3:
0b:8b:05:01:91:19:b6:67:f4:5f:73:20:f3:37:19:66:ea:24:
2a:13:5c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:09 2025 by rpki-client