Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
File: 1-V9aNXOMMini9DlFAMMiyCdal6I.mft (raw, json)
Hash identifier: F4v0Etw/wT8EJx5NlinPgnQVLarkBeAA0PrW1dIrYks=
Subject key identifier: 64:32:DB:A6:E3:33:0A:5A:B7:07:C5:47:7F:7B:0D:62:D6:A6:78:C8
Authority key identifier: F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
Certificate issuer: /CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Certificate serial: 0198D4DFE5E9D03F33A20357FED2FD467B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
Manifest number: 137E
Signing time: Sat 23 Aug 2025 03:01:39 +0000
Manifest this update: Sat 23 Aug 2025 03:01:39 +0000
Manifest next update: Sun 24 Aug 2025 03:01:39 +0000
Files and hashes: 1: 1-V9aNXOMMini9DlFAMMiyCdal6I.crl (hash: IAd0nbWlRZqtkhGki8hgAvpURUkCl+cEwvQlAfSxYpo=)
2: k_l8rtQi2P6fa9dQhkQ5j5jaCYE.roa (hash: sMo/6l6OJgyWFVqU8cFbnDYPktbERaDpmId+0GVplIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:e5:e9:d0:3f:33:a2:03:57:fe:d2:fd:46:7b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Validity
Not Before: Aug 23 03:01:39 2025 GMT
Not After : Aug 24 03:01:39 2025 GMT
Subject: CN=6432dba6e3330a5ab707c5477f7b0d62d6a678c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7c:8f:0e:3a:e3:1a:71:4f:7b:e9:c7:0d:16:
93:8c:e7:21:46:95:c0:22:5e:9f:b4:36:2c:a0:94:
67:42:20:4b:1a:05:07:59:19:c9:02:ba:58:d0:8e:
42:f8:dc:bd:8a:c7:24:d7:1c:a9:e7:0e:db:6e:90:
b9:2c:ac:0f:43:05:f2:97:e1:85:b8:fe:72:fe:9a:
d0:dc:a6:61:05:d4:dd:76:24:09:1d:40:6b:dc:4d:
9f:9d:07:6b:c3:b1:e5:5f:f9:f3:ab:57:d6:f4:4b:
11:f4:b1:ae:4f:08:9f:4f:09:3b:ee:5f:66:6a:d8:
54:48:d0:a7:7d:d8:e2:c9:77:b1:b0:bf:1b:66:b6:
14:fe:35:8f:0b:b7:75:a4:c4:96:b0:7f:67:df:49:
26:0e:cb:96:e8:f2:1d:45:f3:5b:8f:cf:d7:0e:e7:
65:1d:2a:5a:2f:66:b9:d6:3c:aa:7f:1c:91:60:72:
bb:78:e0:e0:b8:4e:a5:19:b5:a9:25:70:aa:2c:0c:
f3:47:21:ac:cd:37:94:1e:07:67:2a:90:48:2c:0b:
29:d2:43:73:f8:86:86:5c:d8:7a:65:dc:77:62:d5:
44:b5:0a:9d:42:c7:c4:15:5e:3d:d8:b2:df:79:e7:
03:f8:0c:cb:57:1a:56:18:03:6d:79:fb:80:a3:76:
ad:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:32:DB:A6:E3:33:0A:5A:B7:07:C5:47:7F:7B:0D:62:D6:A6:78:C8
X509v3 Authority Key Identifier:
keyid:F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:cd:36:8c:3c:ad:5b:dc:37:1a:0a:9d:40:2a:15:5f:c0:74:
70:df:30:86:3a:da:17:fe:6c:67:91:2f:12:d9:27:36:83:16:
3f:c1:ad:eb:30:0a:4a:79:60:14:d8:47:e2:ae:be:15:b4:7b:
3c:ac:39:3a:53:73:75:9a:55:8c:a6:ee:51:df:39:ee:97:50:
2d:47:5f:9a:c5:da:94:e5:e4:b4:a5:c3:6c:38:f4:27:b6:90:
a5:79:8f:88:54:21:fd:e5:aa:f1:dc:33:0e:99:a4:18:11:71:
33:a4:e1:4c:35:e7:73:4a:f8:8f:96:44:85:cd:1a:51:64:56:
aa:4a:7c:0f:7e:56:26:40:ac:94:01:b3:f3:ac:c5:26:b5:71:
8c:63:f9:fe:21:be:cd:9a:70:28:d2:7f:80:32:29:5d:7d:e2:
61:6e:ae:0d:6c:30:44:33:08:f3:cf:42:59:e6:27:a1:9a:c3:
1d:14:90:15:43:5f:48:12:72:2a:97:12:fb:00:ce:12:79:ce:
21:bb:dc:a9:ab:3f:f9:b2:c7:2e:62:81:e3:a5:75:dd:6c:d4:
fa:89:3c:81:7b:79:c6:a6:12:e5:0b:8f:e7:4b:3f:af:a2:b8:
08:a6:7d:71:47:7e:ed:18:e4:dc:5f:f6:2b:3a:2b:f3:42:6c:
9e:8c:bd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:42 2025 by rpki-client