Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
File: 1DdYFDRN8L9tAXczrNxIjwAmMbI.mft (raw, json)
Hash identifier: zLtFdSYgA5P80ARea5nswXzlFJ5dZOr1BlPcsVmdqw4=
Subject key identifier: 36:9C:D2:87:6A:53:40:8D:8E:75:F9:B7:9A:91:BE:38:8D:AB:16:1A
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0199FD6B3EA0447D5A3CF626CBD4B605252C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
Manifest number: 1700
Signing time: Sun 19 Oct 2025 17:01:27 +0000
Manifest this update: Sun 19 Oct 2025 17:01:27 +0000
Manifest next update: Mon 20 Oct 2025 17:01:27 +0000
Files and hashes: 1: 1DdYFDRN8L9tAXczrNxIjwAmMbI.crl (hash: NwAniN3RgIlh496UOfbYDkgUNnUy+vIZsOpDnr777OE=)
2: kB9cAhV9F3NlODRT7TjrXEPyRnA.roa (hash: F03Hqfl3wd5NxqjFi4e8XEepN0xlDsOdLzMn6Oyc4yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:3e:a0:44:7d:5a:3c:f6:26:cb:d4:b6:05:25:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Oct 19 17:01:27 2025 GMT
Not After : Oct 20 17:01:27 2025 GMT
Subject: CN=369cd2876a53408d8e75f9b79a91be388dab161a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7a:54:e3:ec:b3:1b:7e:05:c2:e3:45:45:26:
cc:c1:75:3f:b1:11:0e:a4:4b:67:0f:8a:93:a4:68:
2f:2d:e5:56:10:1f:0b:f4:ea:22:8b:8d:12:7e:f9:
55:d9:33:51:49:b2:00:c0:9e:bd:66:f8:19:dd:8c:
55:fc:e6:78:55:40:8f:92:ea:62:8d:8e:c1:cd:b6:
3d:d7:2a:a2:23:e9:d6:5b:80:52:4f:77:f0:fd:bf:
64:14:f9:98:f7:21:86:8a:41:0e:1a:2d:f8:e6:09:
d8:2c:4d:c1:86:55:e7:e6:ce:2f:19:aa:be:de:7f:
29:40:66:7c:64:d4:e2:f9:c9:61:d4:73:7a:84:bd:
fe:cc:2e:2d:60:d4:2d:7d:a9:84:0a:f2:6a:9e:69:
5a:06:ef:79:ce:3d:3e:85:e0:57:70:d9:f9:a8:ef:
66:07:dd:9c:6e:e1:c5:a7:5a:ec:ed:22:9d:a7:b4:
e9:03:10:8f:5e:66:18:6b:8a:f2:be:d0:ca:cb:d2:
30:12:74:e1:7e:75:b9:b4:c3:ec:40:89:3e:e5:3e:
22:3b:44:69:69:4e:2a:6b:f8:f7:ae:15:70:a2:d5:
8a:84:08:4b:f1:ce:c2:44:71:79:c2:81:72:72:16:
bc:4e:0d:bb:b0:1e:17:09:ea:64:7a:c1:62:2e:b7:
dd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9C:D2:87:6A:53:40:8D:8E:75:F9:B7:9A:91:BE:38:8D:AB:16:1A
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:82:ba:54:75:09:45:b0:39:1c:59:24:95:2e:bf:7d:0a:70:
88:21:19:ed:29:fa:f2:fb:68:b9:5c:00:12:5c:4b:62:7d:51:
77:bb:ac:a3:7c:66:72:67:e5:02:26:cd:04:97:8c:f3:20:66:
47:ff:f0:44:f0:1f:4d:5a:1e:2c:c8:fa:5c:d0:83:9e:60:ab:
98:c6:08:e0:83:f9:32:e9:18:8c:51:71:b4:d5:76:6c:57:28:
a6:f1:1e:42:6b:f4:37:36:f4:51:48:34:12:7c:b5:3c:2d:b0:
29:e4:0a:3f:23:fc:08:ba:f8:1e:d2:4c:9d:2d:f3:8d:5a:56:
50:80:f8:c7:10:39:d1:dc:f8:c0:b2:04:7d:a1:a8:ce:6e:e6:
c0:7e:d5:32:a5:40:f8:30:d0:e7:fe:6f:d3:c0:c0:81:e6:c6:
67:42:1e:58:90:d4:83:ce:30:b6:fa:6d:c9:9c:61:11:b9:3c:
d0:b8:8c:b0:c1:f5:90:69:64:b9:3f:7a:75:b8:29:91:f4:3b:
2b:ef:b1:e0:f2:99:0b:1e:27:c5:c4:b0:bd:2d:73:4a:17:27:
e1:19:93:33:ac:e9:cc:46:e0:e1:ef:39:48:cb:aa:15:c5:05:
ed:56:8f:48:df:96:7e:1a:91:46:ce:ac:0e:6c:b1:12:73:52:
93:1f:05:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:02 2025 by rpki-client