Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
File: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft (raw, json)
Hash identifier: FHrYOe3HpiRzP04xy5G2CueG1il6k3y5Bxf/ILYWY3k=
Subject key identifier: E6:B5:EC:C6:A9:3E:62:6B:8B:18:C8:8A:A5:0A:4F:64:4E:E5:2D:E2
Authority key identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
Certificate issuer: /CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Certificate serial: 0198D47245701719471B12E315985D5CD329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
Manifest number: 0D67
Signing time: Sat 23 Aug 2025 01:01:55 +0000
Manifest this update: Sat 23 Aug 2025 01:01:55 +0000
Manifest next update: Sun 24 Aug 2025 01:01:55 +0000
Files and hashes: 1: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl (hash: Up8KYKoZrY3vY3spfr3fXboud/I9G3IzKDeyjmowy1o=)
2: qWXcfiQuPBHMjlQKkWiAfKgYZzg.roa (hash: Wc2JW8a4VkUPRVVW0ORvuNA6sC5FJWmi5KtU2JoA5R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:45:70:17:19:47:1b:12:e3:15:98:5d:5c:d3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Validity
Not Before: Aug 23 01:01:55 2025 GMT
Not After : Aug 24 01:01:55 2025 GMT
Subject: CN=e6b5ecc6a93e626b8b18c88aa50a4f644ee52de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ab:e8:af:a9:ed:00:c0:52:cd:22:e3:08:b8:
f0:47:97:bc:0f:26:be:af:bc:94:7e:87:3b:a5:21:
c8:4c:08:1b:3f:e9:57:f9:2d:80:de:36:26:88:3a:
c8:19:ed:02:b4:a4:00:ed:0b:75:f2:0a:8e:11:70:
24:de:ae:3e:69:9e:42:f7:f6:13:de:97:83:a0:cc:
67:32:1b:01:21:99:78:6e:51:62:f4:e6:37:a3:66:
9f:c6:f6:01:bd:ab:cb:87:fa:4e:8a:38:f9:8d:17:
a7:47:8d:90:59:04:a4:d0:6f:7a:a0:7f:d3:d7:8f:
32:29:19:83:9b:94:ba:f6:72:27:45:96:41:ef:4c:
55:15:cf:2f:83:3c:d7:5d:64:e5:ee:f7:88:a8:e1:
20:90:64:25:00:6e:e4:e2:55:01:b1:34:16:0d:db:
9c:73:ac:a9:6c:06:8c:a3:b4:94:57:05:18:39:4a:
20:95:66:1f:2a:29:e4:7b:84:4a:99:4e:9d:73:e5:
55:9a:90:12:bd:3d:9b:1b:07:26:6e:ea:6a:fa:db:
e4:e6:1e:a0:25:9f:cf:0c:4e:dd:06:74:7f:69:8d:
b1:af:d3:d1:19:45:0f:fc:bb:ff:1a:4e:16:8d:12:
2e:3c:6e:40:5f:70:f0:5f:f9:c0:8b:26:df:d4:37:
9d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B5:EC:C6:A9:3E:62:6B:8B:18:C8:8A:A5:0A:4F:64:4E:E5:2D:E2
X509v3 Authority Key Identifier:
keyid:F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c6:92:e7:c3:2c:6d:eb:ff:af:fe:11:b2:39:48:c5:5f:e6:
20:5e:6d:9d:bc:8b:e8:e4:02:00:c1:27:c2:f3:f3:a4:81:51:
2a:ac:72:f3:7c:62:a5:ff:26:c8:d1:b1:60:cb:3e:ed:a6:64:
f9:19:26:ef:a5:de:83:7f:81:a2:64:3b:da:be:57:55:23:be:
1a:83:e1:b0:0d:e5:c4:93:61:bb:43:5d:c3:16:e5:11:1b:9a:
e2:09:33:e6:aa:ae:bc:c4:58:e6:b9:5d:18:54:61:de:f5:71:
97:a7:de:ee:33:96:c6:75:4a:1a:7e:be:36:69:c3:dc:af:82:
28:bc:88:46:1d:1e:61:65:4a:4c:86:a8:e7:3a:e9:06:13:40:
f1:82:e3:e7:0d:56:9d:7a:22:05:e5:8b:ea:b9:b5:d6:a3:67:
10:3d:e4:03:4c:c8:e0:33:64:99:a1:e6:05:27:42:5d:2b:bf:
37:80:9e:a2:6f:96:c1:b5:af:08:a7:26:fc:6f:17:01:db:6b:
79:ef:e7:73:bd:b8:f9:6f:be:6f:a1:26:54:cf:02:20:fd:fb:
cc:b5:29:cb:80:d3:3c:b8:c6:67:06:25:5e:43:13:e1:a9:a8:
c7:c0:85:a7:9e:79:64:d5:aa:5e:27:fb:40:5d:58:f5:87:70:
ae:f5:00:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:38 2025 by rpki-client