Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
File: 1TOwlDCwSPBSbvapN3dOfwYgNzE.mft (raw, json)
Hash identifier: c31ZVAfW3IYLHq7EKr4P4FMCaL4ZMcDBZxZd/gZBccE=
Subject key identifier: 99:F6:F6:65:BA:88:10:95:F3:5C:8C:F8:90:18:DD:99:17:B3:B0:99
Authority key identifier: D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
Certificate issuer: /CN=d533b09430b048f0526ef6a937774e7f06203731
Certificate serial: 019873E2DC9A1C07812188A6234861D98FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
Manifest number: 0959
Signing time: Mon 04 Aug 2025 07:01:44 +0000
Manifest this update: Mon 04 Aug 2025 07:01:44 +0000
Manifest next update: Tue 05 Aug 2025 07:01:44 +0000
Files and hashes: 1: 1TOwlDCwSPBSbvapN3dOfwYgNzE.crl (hash: uaP3JY517bpJgiSw27pGg6t6i7Rc+BlT+t2Y+KpBiK0=)
2: b2-2zA239FER4wC7CBSDQ_s6itc.roa (hash: ttiQIOl1DGhdd6BIOrtS+dGFnQqKAzV6ghp1LfZsaAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:dc:9a:1c:07:81:21:88:a6:23:48:61:d9:8f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d533b09430b048f0526ef6a937774e7f06203731
Validity
Not Before: Aug 4 07:01:44 2025 GMT
Not After : Aug 5 07:01:44 2025 GMT
Subject: CN=99f6f665ba881095f35c8cf89018dd9917b3b099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:6d:c9:2d:ec:5d:9f:87:2f:4d:bb:a2:e9:5c:
72:3c:50:fc:f4:98:09:61:65:ce:71:72:64:2b:2d:
32:df:d8:d6:a4:51:48:36:92:7e:45:c9:f3:7a:f9:
b5:cd:22:82:72:ba:ac:2e:70:04:a9:42:33:00:21:
18:6f:90:30:c9:c1:21:1e:e2:84:ba:1f:3b:90:85:
17:d7:c0:dc:cc:bc:fe:af:7d:c0:22:5a:0d:25:bb:
22:69:14:84:6a:77:cb:4b:4a:08:bc:ab:38:75:48:
5a:8c:68:6c:ca:75:bc:0c:32:86:c2:fd:b1:fe:0d:
56:aa:04:d4:65:c3:6b:f3:c8:34:e4:13:49:d9:62:
75:bb:1a:9d:59:51:fa:3f:5f:19:3c:af:28:c2:9e:
b2:65:73:4f:e7:a8:30:6c:02:3a:24:b1:63:1a:74:
07:12:0a:b0:60:a3:05:2c:00:e0:a1:14:ef:ed:14:
e0:37:8b:85:98:29:bc:62:22:0f:91:7f:6a:58:bc:
49:70:41:97:71:f4:29:04:d7:af:d3:ee:7b:0a:87:
f3:c0:dc:aa:a7:35:75:a7:9a:1d:4f:4a:d9:16:fe:
78:48:8f:39:42:f6:59:1f:02:50:dd:73:53:4a:6c:
a6:89:4c:63:bc:62:b6:a7:ab:71:8c:7b:ad:35:3f:
a1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F6:F6:65:BA:88:10:95:F3:5C:8C:F8:90:18:DD:99:17:B3:B0:99
X509v3 Authority Key Identifier:
keyid:D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:22:76:00:0a:b7:22:21:0c:f9:99:3c:ba:e7:b7:46:0e:18:
22:80:00:ef:58:ea:b9:df:5a:ce:9d:ce:90:c8:90:93:57:85:
dc:7e:da:d8:11:e1:4e:3c:3c:dc:b0:2a:46:01:75:e3:91:0c:
cb:2b:76:6f:33:38:85:d0:09:40:1a:a2:fe:b5:60:80:62:1f:
ef:3c:45:36:0c:c7:07:ce:69:d9:64:6b:58:c0:2a:99:04:82:
f4:35:19:64:76:74:2c:40:60:a6:3a:4b:a4:bf:d4:6b:cf:b8:
a2:8a:62:c7:ef:24:97:fe:c9:95:99:8d:9f:91:98:32:44:7b:
f1:a8:87:a3:d1:ba:60:29:69:30:cf:0d:e7:05:ba:1f:06:a9:
1a:58:64:1b:45:2f:f5:b3:fd:60:47:46:43:da:3b:f1:54:24:
d8:2d:c5:fe:56:cc:62:40:48:38:4d:c0:dc:52:86:f7:1f:be:
a9:9a:49:8e:4d:e4:d5:2e:c1:c6:7c:c6:39:f3:3c:69:ef:1c:
8c:da:90:dd:ef:c5:f0:0e:8c:a2:a4:b0:61:43:00:5b:42:80:
7a:3f:c5:27:91:a9:86:2b:e4:5a:e0:a5:a2:7c:0e:f3:63:08:
1d:4d:05:ef:f4:e5:ae:f3:57:9d:30:fc:56:4d:c8:1a:e8:e0:
c8:4a:4b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:10 2025 by rpki-client