Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
File: 1-V9aNXOMMini9DlFAMMiyCdal6I.mft (raw, json)
Hash identifier: oqJTCDc1yRAo1Ba0miWF/EzZ2ANF1NldOghtI347CRA=
Subject key identifier: C5:F7:DF:EC:06:1B:DA:5A:62:3E:F1:64:1B:26:6A:4C:E3:9B:DA:8D
Authority key identifier: F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
Certificate issuer: /CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Certificate serial: 019874506195B308634149E677AF0AC2407E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
Manifest number: 134C
Signing time: Mon 04 Aug 2025 09:01:21 +0000
Manifest this update: Mon 04 Aug 2025 09:01:21 +0000
Manifest next update: Tue 05 Aug 2025 09:01:21 +0000
Files and hashes: 1: 1-V9aNXOMMini9DlFAMMiyCdal6I.crl (hash: i/YHULrlw2AItsclwslq4K6nTzHlEGPFuM7UfdBUV38=)
2: k_l8rtQi2P6fa9dQhkQ5j5jaCYE.roa (hash: sMo/6l6OJgyWFVqU8cFbnDYPktbERaDpmId+0GVplIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:61:95:b3:08:63:41:49:e6:77:af:0a:c2:40:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Validity
Not Before: Aug 4 09:01:21 2025 GMT
Not After : Aug 5 09:01:21 2025 GMT
Subject: CN=c5f7dfec061bda5a623ef1641b266a4ce39bda8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:c8:f3:fe:1d:d4:a6:e0:e0:28:b7:b6:9d:
ac:65:bf:3e:da:c0:50:29:62:7c:9c:b6:30:1a:94:
5c:e2:b1:ac:15:0a:3d:07:ba:1e:5f:b2:c6:c1:26:
f3:21:5f:74:86:72:ef:4b:59:63:fb:28:74:68:4c:
07:87:46:a3:38:a6:9a:0e:90:bb:d4:fc:2d:67:2b:
dd:40:59:46:16:ec:46:82:21:97:2e:aa:bb:d6:03:
ed:e7:ea:15:72:f2:64:fe:12:44:db:fe:79:78:ed:
e2:23:0f:99:76:42:02:1b:8f:1b:47:d3:45:4a:74:
fe:6b:a5:42:4c:a8:c9:62:7c:c3:b3:86:4b:0a:ec:
59:b0:0f:a0:b7:d7:dc:01:b1:92:1e:8f:f7:c5:14:
24:2a:be:70:3f:1f:b4:cf:e6:71:69:86:ce:a0:c0:
c2:79:8f:30:71:8a:11:64:a2:6c:66:64:32:5c:22:
03:51:f8:20:3e:36:4b:ce:02:a2:9b:a6:f2:d4:50:
c0:45:5c:4f:19:10:e6:86:75:f7:74:08:dc:fa:ce:
8b:dc:c3:68:c4:25:2a:73:c7:6a:54:b5:a1:7a:06:
3c:3d:e4:78:6a:fc:ca:8b:96:d4:b7:94:12:08:af:
82:9a:c7:e5:3d:55:4d:e8:4e:c2:60:f7:2f:d5:70:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F7:DF:EC:06:1B:DA:5A:62:3E:F1:64:1B:26:6A:4C:E3:9B:DA:8D
X509v3 Authority Key Identifier:
keyid:F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c4:a7:13:d1:81:35:de:61:a2:45:60:db:4f:77:b5:b8:4b:
bf:2f:67:26:c2:0c:fa:59:05:6c:94:92:d3:4c:d0:8e:8e:06:
21:6b:3a:11:7b:c9:e9:e4:80:6c:36:7d:e9:0b:df:33:f8:42:
0f:5b:04:05:3a:ce:a6:c7:4d:f6:2f:eb:ed:6a:6d:b5:48:9c:
ab:da:cb:c6:87:7d:fb:b1:00:67:6a:cc:0c:15:25:30:94:01:
94:b6:c6:cf:bd:74:f6:ea:58:12:5d:da:88:b8:e8:e0:6d:1b:
d8:05:57:5b:8f:33:52:5d:80:e6:c7:03:53:33:df:1f:65:8c:
7a:e3:ff:39:b8:a5:ce:cb:6c:dc:be:88:a9:41:c3:1a:2d:ae:
87:bd:3c:03:1b:0f:c1:9a:60:cf:ff:a0:34:ea:e5:15:bd:59:
e5:b0:c4:6d:28:28:43:a9:54:a1:22:ba:be:5d:17:fc:2f:a1:
be:54:ff:b8:e7:39:38:46:14:31:31:77:ee:e3:7d:fc:cb:91:
eb:a3:c5:03:ba:42:ab:b4:f7:12:17:cd:92:88:e1:36:9d:e4:
21:fd:7d:fd:71:f5:56:59:cd:f6:81:bc:19:80:ee:12:77:f9:
f2:23:69:83:5c:37:2c:b0:3d:a8:7c:a7:4c:46:f0:34:bc:d8:
80:3c:7e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:30 2025 by rpki-client