Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
File: 1-cSsxnpLABNVenTs5mQfT5R1_y0.mft (raw, json)
Hash identifier: y58tSOYUmq0JfXsPHBFs3HyJ+J3v4lF9NgWVix2InVI=
Subject key identifier: 5D:F6:5D:07:8A:9E:AC:6E:89:A3:AD:7C:C1:63:11:C6:5B:7E:89:DC
Authority key identifier: F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
Certificate issuer: /CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
Certificate serial: 0198D8BD1315E1AFE65D43DC1FEC2DF6E96C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 21:02:06 +0000
Manifest this update: Sat 23 Aug 2025 21:02:06 +0000
Manifest next update: Sun 24 Aug 2025 21:02:06 +0000
Files and hashes: 1: 1-cSsxnpLABNVenTs5mQfT5R1_y0.crl (hash: sxqptRpfYLTFnvcBgtkmWGguOx1WUt/i9ZlE5o/hNDI=)
2: 9KxQR6j2axabNDMZ1-8dgcNiaM8.roa (hash: 2rUs2SoRDiW7TeHLXoH00fOWIiSClvCYzvEbW1LWNms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 21:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:13:15:e1:af:e6:5d:43:dc:1f:ec:2d:f6:e9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
Validity
Not Before: Aug 23 21:02:06 2025 GMT
Not After : Aug 24 21:02:06 2025 GMT
Subject: CN=5df65d078a9eac6e89a3ad7cc16311c65b7e89dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:6a:11:b3:90:56:6c:25:cc:74:eb:a5:8e:
e9:30:a4:c4:77:dd:29:30:ba:2f:02:6c:5f:75:6a:
35:dd:65:8c:3a:ef:5b:b9:4c:2e:84:c7:9b:51:4d:
24:b5:9a:09:21:7e:2e:83:05:4f:7a:71:cf:8d:15:
45:00:c8:03:0e:df:2f:00:20:87:db:32:d1:3b:63:
d6:95:b3:a2:2a:45:13:fe:91:da:4b:b9:a0:cc:fa:
bc:12:59:0f:64:99:28:34:60:50:69:a2:84:83:9b:
5c:32:f4:8a:60:5f:93:d6:18:e3:1e:69:18:2f:a6:
49:02:17:12:65:88:20:70:e5:15:39:6a:9c:a3:66:
0e:19:a9:b5:b1:ff:e0:5d:e1:3e:26:a1:fa:7c:1a:
c2:60:fa:80:30:89:22:b6:23:cb:26:11:6a:25:bf:
5f:8b:e3:4a:c0:ee:c3:6f:49:52:e3:9d:f0:fa:85:
cd:db:7b:0c:8d:dd:b7:f0:00:73:9a:af:5d:2a:7b:
3d:c9:3d:e2:6a:6f:d1:7c:21:96:c9:25:7e:17:de:
bd:3b:56:cc:8e:c1:a6:05:36:35:21:f8:ee:a6:05:
a0:dc:31:0c:8d:fb:11:00:85:cb:e7:bd:5a:65:88:
be:d5:a4:38:56:91:f9:6d:41:45:70:bf:67:6d:ae:
1c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F6:5D:07:8A:9E:AC:6E:89:A3:AD:7C:C1:63:11:C6:5B:7E:89:DC
X509v3 Authority Key Identifier:
keyid:F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:cd:0e:f8:59:55:3f:9f:f8:9e:ba:cd:60:cb:a4:9c:b1:62:
e6:b1:c8:15:ac:db:f1:ee:ac:d9:01:bc:43:b9:e1:a0:b3:f5:
b5:a6:a4:81:19:a2:1c:ab:6b:4c:a4:cd:b6:5c:28:ae:be:50:
7b:e2:a2:7b:2c:5d:d1:a8:96:20:28:bc:7a:a1:84:b0:ee:a4:
64:8b:cc:7b:c1:ad:90:1d:7a:e4:76:35:af:ef:d3:b9:03:99:
bf:05:37:8b:a8:0b:81:c9:24:83:f5:e0:4a:d1:17:20:a7:8d:
b3:e7:4d:ef:77:8c:c6:a1:a6:d8:d7:00:2b:ff:09:73:11:ed:
2a:a0:e8:82:2c:ac:e3:96:a4:85:fa:1a:9f:e0:56:40:e7:c7:
47:eb:90:c9:07:17:5a:bc:35:e8:f8:39:e5:4f:cc:e9:19:6d:
5b:c3:88:cf:9f:03:21:8d:33:f4:c8:c0:ea:25:eb:b8:07:54:
52:80:71:e9:c7:d3:ec:05:30:b5:a1:ce:90:2e:d9:79:58:a4:
35:2a:7e:a2:8d:c5:0f:65:9c:62:3f:80:83:a9:5a:51:64:53:
de:55:1d:df:2a:ea:95:bc:77:78:95:39:fa:cd:1d:1e:d9:28:
83:99:a3:33:26:5a:ce:9a:1f:91:f8:85:08:4a:29:a4:a7:16:
7d:9d:79:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:08:42 2025 by rpki-client