Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
File: 1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft (raw, json)
Hash identifier: GuAUzQfBpddsVJ38PYjWlno888BDJodZ9EEmRQWESOI=
Subject key identifier: EC:61:B3:2E:3B:ED:95:73:23:3B:50:5A:44:25:E1:26:14:3A:57:54
Authority key identifier: F9:A0:3D:24:50:DC:E5:87:D5:37:55:A9:F6:B4:A4:65:6A:28:0B:4B
Certificate issuer: /CN=f9a03d2450dce587d53755a9f6b4a4656a280b4b
Certificate serial: 0198D4E08460D20C0912836EB4FF5349E10A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 03:02:20 +0000
Manifest this update: Sat 23 Aug 2025 03:02:20 +0000
Manifest next update: Sun 24 Aug 2025 03:02:20 +0000
Files and hashes: 1: 1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl (hash: GzmVqAvXsk+HsoB+QUFm9M9vlJ9tdtSPeqPal3Gi+TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:84:60:d2:0c:09:12:83:6e:b4:ff:53:49:e1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a03d2450dce587d53755a9f6b4a4656a280b4b
Validity
Not Before: Aug 23 03:02:20 2025 GMT
Not After : Aug 24 03:02:20 2025 GMT
Subject: CN=ec61b32e3bed9573233b505a4425e126143a5754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cf:9f:b2:b2:0f:e3:2d:c8:80:12:9c:7e:ab:
47:a4:2e:a0:11:7e:83:7a:df:49:41:cd:ee:a7:5c:
bc:aa:f6:78:8f:93:69:db:b1:34:26:dc:d3:37:be:
41:80:17:00:40:6c:7b:e6:9c:5d:26:07:b2:69:58:
df:8a:83:e0:03:6c:c6:55:9d:47:ff:f9:25:05:9d:
0c:67:da:f6:b5:d3:e7:1e:c7:6f:93:0e:82:33:61:
92:e3:1d:1f:19:fc:9d:54:26:57:20:49:a6:80:d6:
03:83:d0:95:93:b7:fd:45:ae:c6:05:36:d3:c9:8f:
d1:6d:ec:9c:a3:80:61:7d:75:03:1e:4b:a2:a1:57:
72:3f:da:1f:ce:7f:9a:ab:55:d0:15:dc:38:d6:b6:
bb:e0:7e:6a:2f:5a:e2:da:58:e6:cd:9c:c3:da:a5:
50:14:e7:90:9a:99:93:35:86:42:5d:b6:dd:a8:34:
f2:cb:cd:36:41:be:ba:65:cb:64:ce:a7:84:df:01:
5c:ae:6e:37:82:87:1c:67:ef:7d:d3:a8:3d:77:69:
16:af:76:51:ec:b5:1e:7c:a3:f3:1a:ab:81:7b:8b:
74:ee:26:14:b1:cd:47:64:0d:4a:31:b9:16:78:09:
12:fb:80:23:01:b1:cd:18:b8:b0:89:29:51:b9:28:
45:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:61:B3:2E:3B:ED:95:73:23:3B:50:5A:44:25:E1:26:14:3A:57:54
X509v3 Authority Key Identifier:
keyid:F9:A0:3D:24:50:DC:E5:87:D5:37:55:A9:F6:B4:A4:65:6A:28:0B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:25:a0:72:f4:50:f8:c5:3b:78:8b:99:9d:b1:77:82:da:82:
5b:3d:36:c3:14:b3:97:80:60:22:90:63:63:43:07:33:53:4c:
6b:fa:03:4e:b5:fe:8c:d3:f9:84:5a:ec:a7:48:81:53:7c:ae:
34:75:cd:60:19:40:90:22:c3:ee:b5:d0:47:9c:79:7a:c0:96:
a0:73:5b:d2:19:2d:4b:a2:a1:d4:ef:cd:89:ed:b0:a9:35:1e:
0d:37:3d:96:27:c0:7a:04:7d:30:33:cc:70:f1:3a:4b:be:29:
58:da:1e:0b:6f:ba:46:6e:cc:0e:a9:0e:47:ad:8b:69:1b:b8:
9c:d4:15:51:af:16:3c:d3:89:db:6a:b1:cc:a0:67:5c:32:0c:
ec:2b:52:2b:e4:e2:c3:47:b6:21:41:9c:b4:03:26:fc:e3:7c:
41:9e:c0:97:df:f7:0e:55:b8:95:7f:cf:f5:58:59:d7:a7:41:
ba:45:48:79:28:68:6e:da:5b:2c:5d:b6:d3:48:6b:50:62:9e:
8b:ca:aa:47:96:5e:71:22:47:f7:1d:56:b8:7f:35:52:15:62:
08:b5:8e:ed:6d:aa:78:ca:6d:b2:0c:bc:b6:73:9f:7d:e4:69:
15:6b:5c:d6:ab:36:f2:8c:d1:37:30:af:df:59:35:99:65:36:
7a:18:f7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:10 2025 by rpki-client