Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
File: 1-cSsxnpLABNVenTs5mQfT5R1_y0.mft (raw, json)
Hash identifier: wQXyjEZNBPhd9NbucDOLMftvOnelebJWUKiYIDtIM+g=
Subject key identifier: 20:6A:17:6C:E0:2A:97:4D:7C:AD:BD:AC:D9:8B:96:80:DB:78:33:1F
Authority key identifier: F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
Certificate issuer: /CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
Certificate serial: 019881D4984B36CE631E100300E2836A382C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
Manifest number: 161E
Signing time: Thu 07 Aug 2025 00:00:50 +0000
Manifest this update: Thu 07 Aug 2025 00:00:50 +0000
Manifest next update: Fri 08 Aug 2025 00:00:50 +0000
Files and hashes: 1: 1-cSsxnpLABNVenTs5mQfT5R1_y0.crl (hash: Yqd1IJ02dyeLqUMo2VqzKBMp8Ug1zvBg76juB0HzK6k=)
2: 9KxQR6j2axabNDMZ1-8dgcNiaM8.roa (hash: 2rUs2SoRDiW7TeHLXoH00fOWIiSClvCYzvEbW1LWNms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:98:4b:36:ce:63:1e:10:03:00:e2:83:6a:38:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
Validity
Not Before: Aug 7 00:00:50 2025 GMT
Not After : Aug 8 00:00:50 2025 GMT
Subject: CN=206a176ce02a974d7cadbdacd98b9680db78331f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:92:6b:8c:90:eb:cb:f8:a0:ef:2e:59:dc:
67:aa:46:05:a0:89:3f:74:02:9a:ee:2d:87:d9:ab:
52:48:52:4a:0b:c3:47:b3:a8:9f:7e:aa:d8:ce:5d:
c6:a0:7b:fc:ca:a4:03:35:e2:4a:c4:83:97:42:f3:
79:6b:db:ee:5e:0f:0f:37:e1:ee:02:84:46:e0:55:
6f:92:b1:eb:91:04:0a:ea:02:16:05:48:3f:51:89:
f2:f6:af:03:35:e9:85:f6:e4:13:f3:ed:75:8b:fd:
a9:e9:68:e7:99:09:1f:5a:e9:ae:08:d8:5e:25:2a:
e8:9e:e9:40:81:34:39:d3:9f:af:fa:dc:97:1e:8f:
34:3d:b7:a1:7e:d7:43:e9:5e:e5:a3:54:b3:03:6e:
d8:4e:9a:6f:19:08:8c:04:be:fe:9e:fc:3d:a1:57:
52:7c:6e:08:46:53:81:db:3e:5a:dd:4e:86:c6:c0:
4d:b9:49:91:f1:57:50:e9:29:3d:37:a6:91:b2:12:
5d:26:53:77:6c:9a:dd:c7:ea:4e:9e:26:20:a0:12:
38:e7:34:78:7b:e9:63:b8:c4:6b:a6:7c:de:2b:d8:
60:ea:bf:da:bb:43:90:b6:0a:74:6c:ca:f6:e4:3a:
53:78:5d:3e:c5:8f:fd:bc:34:d4:b2:42:63:5c:8e:
61:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6A:17:6C:E0:2A:97:4D:7C:AD:BD:AC:D9:8B:96:80:DB:78:33:1F
X509v3 Authority Key Identifier:
keyid:F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:09:65:f3:be:61:4f:e9:01:cb:07:f7:d6:5d:51:33:16:e7:
86:21:e4:7f:4b:7c:4f:28:c2:b3:57:0c:30:d1:53:9d:ca:c7:
3d:29:77:e5:46:60:d3:ab:ca:8a:5c:3d:33:57:3a:e0:07:88:
9f:6e:12:e4:8d:d0:50:55:97:92:e5:b8:81:46:b7:f0:70:07:
a6:11:d2:57:9e:a1:fb:b2:f9:84:90:4d:2a:08:84:47:4a:dc:
b6:16:d4:58:fc:66:a2:34:62:61:76:3e:9d:29:3a:14:ff:74:
56:98:6f:d4:59:6a:d9:f8:57:cb:43:64:3d:3c:01:bf:e9:6d:
f4:09:41:19:01:6a:91:5a:5e:d7:ad:28:85:24:bf:61:e2:5d:
ed:2e:ad:4e:cc:bc:17:a8:ec:b7:ae:bb:ba:ff:f4:4e:57:f5:
97:cc:ac:6c:e8:b5:ee:df:44:9d:77:ba:67:e9:f3:28:3f:ba:
53:41:38:e3:97:01:64:f9:e5:30:d6:43:f7:69:ab:27:5d:39:
ec:d3:60:a8:1e:98:d4:a9:38:e1:2a:37:55:4d:b0:80:ec:d5:
61:0a:e2:0b:f4:51:44:e1:07:27:9a:cc:db:b7:d7:1a:c2:e1:
97:fc:59:9b:1d:3b:9f:71:4d:a3:6b:8a:03:94:2f:7a:03:b6:
66:49:47:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:59:24 2025 by rpki-client