Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
File: 1-6DtkuyUMh3LIZ03842QfhgyRL0.mft (raw, json)
Hash identifier: GIz9FYpcS8VsWEDFVZk+wcwQrW9OIlb3CyG2DPmr6PE=
Subject key identifier: 75:D8:2F:76:35:53:5F:56:BF:3C:69:D2:98:F9:B3:80:04:79:31:73
Authority key identifier: FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
Certificate issuer: /CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Certificate serial: 01988D6A8ACCEB7415E0A8D9EFF04C3FD459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
Manifest number: 09E4
Signing time: Sat 09 Aug 2025 06:00:26 +0000
Manifest this update: Sat 09 Aug 2025 06:00:26 +0000
Manifest next update: Sun 10 Aug 2025 06:00:26 +0000
Files and hashes: 1: 1-6DtkuyUMh3LIZ03842QfhgyRL0.crl (hash: LsWUs9v1XDUwLjnAtz8eXjmUWtH6xp8HHt6saGzsHmg=)
2: 1s70h6r87L-IulVsz6h8zyFXb_Q.roa (hash: 5H/5j8LaoLq/mqGaGFCi4+VAwjIOpu8grnJTKJtYod4=)
3: sEXfZ_frVlYD_mxkBMmTSShT4Aw.roa (hash: q9q1zeZ/+pc1h+hiJuULLx4217R4jnkBQRFKylMHrZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:8a:cc:eb:74:15:e0:a8:d9:ef:f0:4c:3f:d4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Validity
Not Before: Aug 9 06:00:26 2025 GMT
Not After : Aug 10 06:00:26 2025 GMT
Subject: CN=75d82f7635535f56bf3c69d298f9b38004793173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:c3:89:6e:9e:fb:62:6a:ff:5f:70:0e:de:
ab:1c:2c:0c:f3:dc:08:96:37:14:ee:75:1d:40:a4:
9b:66:5a:81:81:98:d2:83:f8:d0:a9:44:a6:57:38:
f2:3b:50:41:dd:96:77:68:25:bb:dc:59:c8:84:b5:
97:53:f4:f7:31:67:79:e4:c7:05:aa:69:ec:67:c6:
5a:64:72:06:8c:e1:f5:15:66:3a:27:6e:36:67:42:
13:7c:2b:11:c1:67:ce:a9:6e:bc:08:e4:c4:5d:0d:
c6:5e:84:29:9c:b6:4e:de:84:3e:24:0b:ec:ee:58:
f5:6d:a9:e0:8b:57:31:bc:00:8b:64:ae:f9:fe:aa:
a7:19:59:65:5c:60:97:be:5b:e8:ae:04:20:84:db:
9f:72:ad:53:ee:9a:d2:15:a3:ea:a8:29:9a:2f:98:
0e:80:32:3c:90:ac:5c:e8:08:82:8b:d2:15:43:9a:
cc:f4:3d:d3:3b:06:4b:a6:1c:39:44:f3:0a:b6:09:
db:07:ab:b6:ff:56:15:e6:c5:10:0c:6a:5d:ba:96:
d0:e4:fa:b2:7c:91:ab:29:bd:51:f7:87:8a:d9:65:
73:b3:ec:7c:68:36:c1:ce:bd:a7:34:00:cc:19:a6:
04:a3:87:d5:b1:49:4b:1d:87:ba:28:ba:56:64:40:
cd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D8:2F:76:35:53:5F:56:BF:3C:69:D2:98:F9:B3:80:04:79:31:73
X509v3 Authority Key Identifier:
keyid:FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a8:05:9d:71:27:95:4d:e0:f0:c3:c0:11:1f:1a:37:6e:17:
b0:5d:71:3a:6f:e0:18:5b:70:66:ff:ec:dd:9b:a7:91:a3:46:
98:32:44:2b:94:77:a4:13:75:af:99:22:bc:0b:d1:74:08:1a:
08:0e:45:a9:bd:09:9c:51:e1:16:07:01:b9:c7:b5:37:fa:1f:
e4:2c:9a:b4:55:6b:ef:ea:af:6c:1a:65:b2:0d:bd:59:4d:c8:
fa:9a:52:fa:06:2e:37:80:17:d9:75:65:fc:92:08:97:54:62:
16:67:fd:d4:a3:37:ff:b8:9b:38:3f:2b:26:a0:70:55:e3:d4:
16:5f:36:a7:76:09:37:d7:2f:60:9e:08:ee:d6:53:48:79:ab:
d5:33:e4:b2:85:5a:5a:b8:52:a1:dd:6f:d4:37:78:e4:4e:99:
cc:c3:3f:27:8f:cf:47:89:aa:fd:72:97:88:61:47:fc:59:cc:
ee:b8:5e:eb:58:aa:90:7d:e9:20:cc:56:11:d8:ae:8c:0c:5b:
a2:9b:57:61:a5:fd:4c:8c:5d:0e:05:0b:55:e6:47:7a:9f:f1:
fa:17:b5:6a:60:bd:15:a8:ef:5f:4d:39:b1:00:02:10:88:d7:
3a:f8:08:f1:47:28:7f:bb:3f:d9:15:a7:38:19:32:f9:11:4d:
c0:8f:9b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:15:24 2025 by rpki-client