Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
File: 1-6Cw8f3WQBTlBXuEihmiOehJ290.mft (raw, json)
Hash identifier: zq6YOoaWplQE6PJ+VKQ+3bP7Ie+vJgz0Jk4/4MjIH6M=
Subject key identifier: 9D:09:4F:45:1C:58:7D:42:2D:A3:DD:2B:3D:74:13:84:19:6A:B2:BA
Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
Certificate issuer: /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Certificate serial: 0198A128723867333DEEBD7507D4A5177C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
Manifest number: 0F09
Signing time: Wed 13 Aug 2025 02:00:39 +0000
Manifest this update: Wed 13 Aug 2025 02:00:39 +0000
Manifest next update: Thu 14 Aug 2025 02:00:39 +0000
Files and hashes: 1: 1-6Cw8f3WQBTlBXuEihmiOehJ290.crl (hash: bd7s/R4xaJYfzuCo7onENok65UCshuR5eudl2YmYv/8=)
2: UljtGTk6FE5SFIVhbxqvXUbkWqc.roa (hash: JzByF342QYXpOV0k7S0SEeUJe7klEsAVIE0a0wTpdvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:28:72:38:67:33:3d:ee:bd:75:07:d4:a5:17:7c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Validity
Not Before: Aug 13 02:00:39 2025 GMT
Not After : Aug 14 02:00:39 2025 GMT
Subject: CN=9d094f451c587d422da3dd2b3d741384196ab2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9b:40:29:24:48:96:ec:8e:67:13:64:eb:67:
75:31:44:49:af:70:e4:6d:53:da:64:2b:3e:7f:31:
99:86:79:96:26:61:2b:32:c8:7e:9f:f0:f9:d6:d8:
0e:53:bd:d4:11:12:f7:8d:e0:5d:72:21:6a:ab:7b:
9f:d9:79:79:fa:bb:a8:27:fd:99:06:9c:39:90:83:
05:4f:fd:7f:6a:c0:d7:c7:dd:24:7f:60:c6:fd:8e:
b2:8d:7f:5a:e4:ed:52:99:de:57:0b:86:f4:a9:2d:
6c:c7:b2:e6:8e:cb:00:ee:85:0b:18:d0:5b:76:d7:
44:8d:93:83:d9:4f:91:44:ca:76:25:c3:e4:ce:26:
50:d7:65:62:fd:15:b3:a2:34:f7:2e:1c:3c:25:37:
ff:b7:48:90:6e:5e:ff:6d:4c:9a:7e:2d:84:64:df:
c0:f9:2a:80:9d:3e:78:d4:c5:cb:a0:34:9e:26:c0:
5a:45:02:13:61:ea:35:90:98:34:b7:22:7e:4a:a6:
f2:bf:40:ea:73:e8:e2:77:b0:1d:74:02:4d:00:d4:
a4:82:43:ff:64:2f:aa:62:28:76:cb:f9:b1:4a:fd:
c4:48:03:f3:75:4f:af:6a:de:45:e6:c2:61:cc:8c:
fb:c8:d1:d0:88:84:8e:d7:d7:ba:37:40:3d:52:02:
63:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:09:4F:45:1C:58:7D:42:2D:A3:DD:2B:3D:74:13:84:19:6A:B2:BA
X509v3 Authority Key Identifier:
keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bf:f9:f0:e2:ab:9d:4a:20:b2:b7:6c:77:c2:18:b1:24:9b:
a8:67:a1:ed:36:18:5d:06:b4:23:d6:73:93:98:f6:e4:89:f5:
75:7b:14:e8:37:b9:f3:16:21:a2:cf:df:ac:eb:cf:1f:75:25:
72:8a:2f:f6:51:90:af:93:bd:2f:bf:4c:3c:11:f4:a3:27:0d:
ff:30:e2:87:dd:c5:fa:e1:be:35:a8:b0:88:e4:cd:c0:f4:e5:
38:4d:86:17:9f:d9:bc:bd:cb:ab:c5:a3:8e:85:18:53:09:f8:
88:b0:50:56:22:4a:78:34:50:ac:9a:ca:37:df:d8:aa:74:96:
18:d5:9e:d0:0b:2e:19:e4:53:ee:1f:23:5d:8e:cb:cf:ff:4f:
c6:94:88:a2:c1:4c:68:65:57:05:d6:fb:4f:25:7e:1c:d9:5a:
8b:0f:5b:fd:06:9f:f8:48:67:06:2b:34:4c:0d:e0:f7:eb:d2:
81:24:ee:99:7b:de:d6:ac:10:b7:a0:0e:ed:17:95:57:c4:1c:
df:e7:0d:da:e0:5a:29:6c:4d:e7:49:38:d7:0d:ff:99:59:be:
0e:71:20:c9:b2:81:5c:6d:b1:2a:0a:ff:c6:9c:2a:b0:09:be:
1e:b5:ad:e8:92:2f:32:05:d1:ae:fa:da:c6:b5:f2:e3:c0:b5:
d3:98:62:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:38 2025 by rpki-client