Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
File: 1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft (raw, json)
Hash identifier: ZSZ2sHqu/SuO+cuDD6BEcuLWa3g4SvfUZxhCXCejKfs=
Subject key identifier: 6B:1E:E1:88:2E:14:83:0B:22:FC:F0:80:72:55:40:2C:43:49:34:47
Authority key identifier: FB:0F:7E:BD:25:F6:AF:46:37:82:2E:FF:48:B2:78:B1:8C:70:6F:82
Certificate issuer: /CN=fb0f7ebd25f6af4637822eff48b278b18c706f82
Certificate serial: 0198D54DC0B1AD370B41F0DE6D8EA0C7B25C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
Manifest number: 15D8
Signing time: Sat 23 Aug 2025 05:01:39 +0000
Manifest this update: Sat 23 Aug 2025 05:01:39 +0000
Manifest next update: Sun 24 Aug 2025 05:01:39 +0000
Files and hashes: 1: 1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl (hash: CFhvgJJKixZC1BNUH0lDYaVf3YNvN3AVTEjabm+bL3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c0:b1:ad:37:0b:41:f0:de:6d:8e:a0:c7:b2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb0f7ebd25f6af4637822eff48b278b18c706f82
Validity
Not Before: Aug 23 05:01:39 2025 GMT
Not After : Aug 24 05:01:39 2025 GMT
Subject: CN=6b1ee1882e14830b22fcf0807255402c43493447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5d:8b:65:b2:31:16:0f:ea:ea:81:6a:12:9f:
b4:1a:ca:51:9f:f7:01:1a:01:ee:6d:b4:91:28:13:
1f:88:25:77:0b:d6:22:38:bd:03:2a:1f:4b:2f:c1:
d1:33:9b:f3:fe:88:2e:49:80:a1:f9:d9:c7:aa:a4:
fb:53:f2:85:0c:47:da:c4:ea:7c:c2:0c:01:b1:dc:
b5:55:75:8d:9c:ca:76:fa:83:60:d5:83:e6:ca:f3:
55:c0:2d:1f:f8:89:2c:71:1d:97:a5:05:ed:4e:f5:
a1:63:2f:85:78:5b:37:1b:91:4f:11:5e:cb:f3:79:
05:2e:30:cf:07:bd:28:84:83:3a:54:3f:1a:8f:61:
9a:cb:83:a1:11:c4:d0:4d:7e:be:a0:ff:e3:e5:4f:
d8:2c:0d:72:d5:e8:64:3e:b9:2c:0a:6c:e5:9b:8d:
f3:ad:57:56:ec:18:b0:0a:a2:c8:c6:0e:e2:dd:77:
38:f0:a6:83:11:c3:f3:1e:d5:86:b4:4f:b6:3d:77:
d4:a1:cb:b0:ff:c6:10:00:05:f3:5f:f6:f7:63:03:
9b:2b:e5:bf:1d:90:ef:9f:9f:94:b2:cb:82:92:a6:
5c:85:41:9e:f4:e0:b9:89:80:16:ae:3c:80:ce:e5:
d5:57:a6:2e:83:be:e3:c4:85:05:20:c1:c3:54:e0:
8c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1E:E1:88:2E:14:83:0B:22:FC:F0:80:72:55:40:2C:43:49:34:47
X509v3 Authority Key Identifier:
keyid:FB:0F:7E:BD:25:F6:AF:46:37:82:2E:FF:48:B2:78:B1:8C:70:6F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f5:1d:13:53:c4:62:05:d1:51:b6:34:54:03:9d:21:82:bf:
77:dd:49:58:46:3e:4d:03:a2:96:83:cf:61:4b:65:11:33:a4:
f8:81:6e:76:c3:5c:14:46:d5:99:2b:0b:a0:ed:07:3b:fa:e7:
3e:f8:fc:bf:9a:24:de:71:e4:d6:27:74:c5:d6:06:f8:4c:e3:
ce:ac:a9:1b:1b:d2:f5:aa:20:1e:be:2b:c1:9e:45:fc:d2:cf:
90:5b:ca:7c:fb:35:15:9b:1d:76:c0:1d:16:e3:45:d0:f6:50:
ff:58:58:1f:13:82:ff:a5:8e:17:70:46:ec:f5:20:22:b9:fc:
a7:a8:8d:7a:9e:07:64:b0:a6:12:f0:2f:58:d9:f3:ca:cd:c9:
27:d0:87:68:b0:4e:29:e2:a3:cf:3e:35:2f:62:27:9c:ec:c4:
6a:d9:b8:61:62:76:bd:92:21:ed:3b:2c:c9:3f:dd:46:f0:53:
f7:e2:a1:ab:5e:da:57:9f:96:fb:5d:0a:77:0e:8c:5c:f1:44:
ac:bc:32:4c:a0:28:5b:e2:b8:da:48:d3:cd:3a:9b:03:06:dd:
5a:3c:ef:a0:ee:e8:c1:33:e8:aa:e6:64:e1:0b:0c:76:da:e0:
e0:8d:f4:24:01:2b:dd:7d:8c:19:de:84:cf:13:2a:34:40:c6:
2a:09:c1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:40 2025 by rpki-client