Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
File: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft (raw, json)
Hash identifier: k5H1Ch/DSdVOF54HxZzLVxQtgW5DTStvDXWtCW+5YKU=
Subject key identifier: 6A:3B:9E:5E:01:09:8A:10:5D:27:24:4C:DE:D7:9C:C6:2A:41:BB:E5
Authority key identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
Certificate issuer: /CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Certificate serial: 019896DBD8FDA05A541C327A66F514F2FAAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
Manifest number: 162B
Signing time: Mon 11 Aug 2025 02:00:46 +0000
Manifest this update: Mon 11 Aug 2025 02:00:46 +0000
Manifest next update: Tue 12 Aug 2025 02:00:46 +0000
Files and hashes: 1: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl (hash: WaGjPeE+lCITCFjgCbjMLGXpD7NVfqJgPra+3kbGVnA=)
2: xCeuCdpHeZXyZn91vNpEgouKwNY.roa (hash: YgdYQ7c1msQKXeGAh4ZCZBOnjKpRZTljQq9qhsHOdSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:db:d8:fd:a0:5a:54:1c:32:7a:66:f5:14:f2:fa:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Validity
Not Before: Aug 11 02:00:46 2025 GMT
Not After : Aug 12 02:00:46 2025 GMT
Subject: CN=6a3b9e5e01098a105d27244cded79cc62a41bbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:69:2b:8f:27:b4:53:57:6e:11:ff:53:91:
e3:d2:e1:77:92:61:58:39:d6:7c:a4:78:ee:c9:cd:
db:ff:f2:b2:e0:cf:9d:b1:6f:57:5b:3e:26:b6:3c:
f1:74:37:16:54:d8:27:d1:10:95:9f:98:02:21:01:
38:55:c5:56:c1:f6:05:e1:f3:33:b8:b3:40:0c:98:
e6:98:c8:e7:0f:31:59:4b:43:5a:9f:b7:ca:65:40:
2c:40:72:b0:d1:49:a8:ff:61:2c:6f:96:ae:65:e0:
f5:29:54:66:0e:b8:79:39:0a:f6:4e:a8:d2:4f:a5:
08:dc:d4:ce:7d:8e:43:ef:ff:60:4c:64:9f:f8:93:
c9:e2:7b:3c:fa:81:db:13:aa:cf:dc:45:65:f7:39:
4d:77:2b:ac:8d:26:c2:24:23:70:ff:26:a4:1f:36:
5c:4e:6d:91:2d:82:a8:c8:0c:76:eb:ce:1f:de:11:
12:be:aa:e8:86:8a:c7:55:57:e6:58:b7:d7:b3:b4:
92:a9:07:de:15:50:57:2c:78:d8:15:e1:1a:9b:fa:
c1:47:b1:fe:e8:6b:28:8b:e1:21:2a:08:81:bb:93:
a4:ae:86:ef:ba:7d:06:cd:4c:bd:63:d6:df:0a:80:
f7:92:01:4d:93:fd:0d:21:5b:16:5d:36:30:b7:04:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3B:9E:5E:01:09:8A:10:5D:27:24:4C:DE:D7:9C:C6:2A:41:BB:E5
X509v3 Authority Key Identifier:
keyid:F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2a:b6:e9:07:6a:da:5c:db:7d:67:66:4b:75:15:44:6a:79:
f4:5d:16:4b:70:4c:54:7b:e8:ac:cd:eb:0b:35:08:8c:44:a3:
14:ff:c7:50:6b:a1:7a:a2:12:79:92:b0:36:1f:4b:e1:77:71:
c6:41:df:46:16:10:94:12:f5:cf:7a:db:08:ef:c8:05:76:f3:
32:16:0a:f1:75:52:f6:97:be:76:69:0f:a2:d9:e4:d9:d1:00:
ba:85:ae:92:5c:0a:10:7e:62:56:0f:bb:fc:81:34:d6:ff:0d:
64:09:3b:c8:86:e6:86:04:ed:5f:aa:1d:d7:1f:38:76:fb:2c:
77:6b:d2:32:7e:11:22:1e:e6:6e:2a:ec:b9:09:07:28:a7:d1:
2c:b7:ac:e8:fd:a2:a1:6d:67:5d:2f:fa:d8:61:28:7b:3c:4b:
8d:94:f7:eb:ec:b8:0e:4e:3b:5b:a4:5a:ea:b4:eb:5a:7f:11:
9d:da:f7:de:10:8f:11:7c:55:ac:e9:56:76:f1:18:e1:d9:b7:
52:34:49:a3:c9:cd:94:09:d8:34:53:14:58:f0:13:fc:ad:01:
da:2b:1a:c1:b1:64:33:13:4b:8b:ad:85:a3:ba:b1:ae:8c:a5:
e3:d0:7c:7f:18:dd:4e:44:b5:59:cc:21:9f:58:57:8d:be:27:
b2:27:92:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:50:33 2025 by rpki-client