Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
File: 1cH3vxvczjWLoL_c-_aWTzvqI2I.mft (raw, json)
Hash identifier: DMtNxpJ47FXt8TgPF4MB7GjS0uovsHQEPMNYcpgvpks=
Subject key identifier: 2B:C9:A9:33:BB:DE:28:19:4F:A9:70:D1:3D:C2:DB:44:38:4F:4A:D3
Authority key identifier: D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62
Certificate issuer: /CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362
Certificate serial: 0199FF22F29E3B636E1C5EB07E1468C3F271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
Manifest number: 9D
Signing time: Mon 20 Oct 2025 01:01:44 +0000
Manifest this update: Mon 20 Oct 2025 01:01:44 +0000
Manifest next update: Tue 21 Oct 2025 01:01:44 +0000
Files and hashes: 1: 1cH3vxvczjWLoL_c-_aWTzvqI2I.crl (hash: e8w1A9fSLkWByQk/oOnn2jYjE29TRHZGLXcDSAz5nbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:f2:9e:3b:63:6e:1c:5e:b0:7e:14:68:c3:f2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362
Validity
Not Before: Oct 20 01:01:44 2025 GMT
Not After : Oct 21 01:01:44 2025 GMT
Subject: CN=2bc9a933bbde28194fa970d13dc2db44384f4ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:31:fe:fa:53:d0:9b:85:ee:f6:a0:10:89:66:
a0:e2:56:69:83:00:a5:f9:04:21:0b:6f:03:1c:86:
47:31:f9:36:b5:a1:b5:0d:12:09:e2:70:7d:14:78:
b5:bd:9b:0f:3d:08:dc:df:84:45:ba:33:e1:48:b5:
ae:9a:55:89:25:d6:6d:8a:d9:38:1e:40:03:10:0d:
16:64:fd:ca:5d:f3:00:ab:63:77:73:4c:27:91:d1:
d9:9e:15:fb:cc:59:f7:b7:ba:f5:42:8a:3a:76:4f:
3b:4f:0e:78:8f:07:bf:68:6e:09:5a:e4:4a:85:44:
1b:ff:22:15:9e:71:d6:d6:52:30:66:4d:56:5e:26:
8d:ef:7b:af:34:91:86:bf:e9:3a:f6:31:38:c1:8c:
72:71:0e:32:04:5f:c6:13:8c:07:08:14:cc:46:f8:
0c:bd:99:4a:74:cc:d0:e6:88:3a:ea:14:76:0c:26:
28:8d:26:ca:c7:9e:aa:e7:cb:28:41:cc:50:c3:47:
d6:50:f6:f1:02:56:1a:7d:17:fd:87:e7:71:1a:83:
69:50:f1:bf:2f:c7:68:a5:f4:75:88:0e:93:8f:1a:
ed:cb:cf:a6:d5:a2:e3:c0:2f:cf:dc:17:58:de:41:
21:78:76:27:68:83:4f:8f:7c:c3:45:c8:f4:00:9b:
25:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C9:A9:33:BB:DE:28:19:4F:A9:70:D1:3D:C2:DB:44:38:4F:4A:D3
X509v3 Authority Key Identifier:
keyid:D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1e:b7:ae:71:2b:45:96:2d:62:d8:fc:07:44:d8:cc:a6:45:
19:68:0e:4f:00:7c:b9:9f:86:3f:29:e7:00:13:f0:77:5c:1f:
26:b9:73:fc:13:d1:e2:94:12:84:b6:4b:3b:68:1e:bd:cd:52:
3e:2f:c4:ba:c7:3a:8c:45:cf:1f:c2:fa:6b:12:36:4e:2d:0f:
96:b9:cb:fe:ce:f1:01:4f:d0:ac:9c:68:16:43:af:86:a4:f4:
70:04:20:b6:07:c4:d8:26:1c:38:5c:84:7b:cf:26:bf:7e:73:
7a:f2:bf:ca:60:87:09:9f:5a:b2:c9:25:a0:75:5b:51:e4:ec:
06:a5:ab:c7:d3:3c:69:39:4f:a6:96:09:ef:6b:0f:74:3c:8c:
a5:b8:b6:c1:63:8e:11:94:aa:d9:a4:5f:af:80:34:4b:4e:5e:
4a:fe:6a:ce:60:21:29:05:56:89:c2:c8:e1:97:17:fd:4b:cd:
8f:61:01:76:e0:3e:9b:26:65:1f:59:a1:57:2d:b9:ca:d7:f3:
94:5d:c5:54:f3:4c:d3:21:d1:1f:10:fd:2d:f9:be:1f:63:ae:
ff:2d:30:17:28:32:85:56:98:d2:71:a9:ae:c2:f9:5f:af:8b:
0c:cf:ca:95:c5:3b:cb:9e:06:29:cf:ba:16:b4:26:f1:34:49:
c0:e7:f9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:25 2025 by rpki-client