Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
File: a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft (raw, json)
Hash identifier: NlpodA6s9lr1FpAFJF69Aul8uP6DwLwJv47X63n3zCE=
Subject key identifier: D3:C5:F4:A5:F5:3D:A9:46:7D:4C:81:BF:CD:BD:FB:77:31:EF:83:B7
Authority key identifier: 6B:51:57:E4:19:FB:5A:18:BA:2B:EA:F2:DE:54:5F:2B:B3:DE:CF:D1
Certificate issuer: /CN=6b5157e419fb5a18ba2beaf2de545f2bb3decfd1
Certificate serial: 01989336C33FD8371A95C91B53F267A5F551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
Manifest number: 0E9C
Signing time: Sun 10 Aug 2025 09:01:36 +0000
Manifest this update: Sun 10 Aug 2025 09:01:36 +0000
Manifest next update: Mon 11 Aug 2025 09:01:36 +0000
Files and hashes: 1: a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl (hash: gdSyIBssa0sYD6iikeIZJahzw7Erkg/JlgQqaDWG5Po=)
2: ttVoIKzTT0XKllFStzVaYvUJzr8.roa (hash: UbtbO9ulOo1L1dwjq6p3bONW5eyopaXSfqTO9fveMwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:c3:3f:d8:37:1a:95:c9:1b:53:f2:67:a5:f5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5157e419fb5a18ba2beaf2de545f2bb3decfd1
Validity
Not Before: Aug 10 09:01:36 2025 GMT
Not After : Aug 11 09:01:36 2025 GMT
Subject: CN=d3c5f4a5f53da9467d4c81bfcdbdfb7731ef83b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:da:df:84:ce:d2:02:0b:06:49:f4:9b:53:ff:
b2:d5:2a:13:6f:5c:15:92:fd:af:a5:f5:cb:93:a2:
08:4d:c7:08:69:59:20:26:b6:ac:b6:b8:3d:47:8d:
c6:6d:07:de:84:e2:73:66:18:6f:55:c0:de:c1:85:
32:12:8b:a6:ef:1d:5b:17:78:73:43:2e:81:4f:37:
4c:cd:b6:ab:2a:0c:11:ea:a4:27:ec:b7:a4:84:20:
27:53:2f:fc:a7:16:f8:61:0f:e2:fd:78:e4:4c:ad:
af:af:c6:03:55:e9:84:f2:5b:00:37:93:69:e4:be:
fc:7e:ec:c0:a0:47:e2:bd:32:d4:90:b3:a8:8e:df:
9d:6a:b5:39:d8:f7:97:29:8e:ae:84:f5:15:b9:b2:
1e:7b:46:c9:a0:c4:4f:38:16:6e:86:34:8f:fd:56:
30:4f:e4:0f:46:a0:8f:09:81:6b:dc:be:71:ea:ea:
7a:0a:5a:c4:5e:81:a1:2e:5d:93:7b:1f:b9:de:6b:
7d:a1:1a:30:16:5a:d4:9f:ac:21:e2:07:67:0e:a8:
a5:23:07:ff:50:5e:34:6a:c1:66:c7:85:2a:46:1d:
c3:20:08:d9:64:c0:e9:89:8e:00:ea:9b:05:fd:87:
13:dc:e5:4b:14:3f:a4:54:b3:57:2d:fc:b8:88:78:
87:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C5:F4:A5:F5:3D:A9:46:7D:4C:81:BF:CD:BD:FB:77:31:EF:83:B7
X509v3 Authority Key Identifier:
keyid:6B:51:57:E4:19:FB:5A:18:BA:2B:EA:F2:DE:54:5F:2B:B3:DE:CF:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1d:35:42:3f:4b:16:d0:3e:c3:19:03:06:ce:de:1a:bc:e5:
c9:cf:a4:0a:70:d8:38:b9:5c:0d:ad:c0:c4:f2:1f:60:1a:6a:
cb:5b:5a:5d:32:18:60:8e:5f:53:22:7c:ab:dc:8b:9b:21:4b:
7b:48:5b:81:bf:d7:21:89:29:1f:73:ed:2e:ea:09:81:4a:61:
d6:59:8c:6f:4c:ad:a2:af:2d:43:c2:00:4a:43:39:bc:df:60:
36:2e:60:52:9c:39:c5:99:db:c9:75:00:97:0f:3c:1a:ca:55:
5b:64:34:0f:a3:97:be:9a:4a:99:0b:66:e7:dd:1e:f8:34:b0:
aa:ef:5e:72:3d:4f:2c:b3:ca:38:32:7f:fb:e3:be:76:86:89:
89:ff:5a:81:ec:62:97:d2:f1:9d:2a:c0:20:3a:5c:84:53:81:
1a:20:77:cd:b3:a4:87:2d:80:5b:02:9a:73:a0:51:9b:dc:1f:
ed:95:e5:e4:02:7c:e7:ab:d9:2e:f1:c8:a3:9e:c9:89:73:8d:
c3:f4:8e:8b:e3:bd:b8:e5:d2:42:30:3c:72:27:33:fc:d4:09:
3d:28:81:36:55:67:13:01:ef:7a:9a:dd:dc:3e:10:53:da:96:
75:63:e7:98:40:f2:69:1d:5b:99:c2:b9:ed:10:e1:ce:fb:e8:
2d:0e:43:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:12:41 2025 by rpki-client