Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
File: 1Fib0sD75-LYWSzuaHGSu7V5efc.mft (raw, json)
Hash identifier: +D7GQpT803N7aS5dsAVA+zWQcaflCf0x9SeV2Hn5O2I=
Subject key identifier: BF:CF:4C:CC:C6:81:11:19:E4:E2:1C:AB:3D:D7:3C:CB:B5:3F:7A:C4
Authority key identifier: D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
Certificate issuer: /CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Certificate serial: 0198D65F90C52969A130AABD5B41367233EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
Manifest number: 030A
Signing time: Sat 23 Aug 2025 10:00:43 +0000
Manifest this update: Sat 23 Aug 2025 10:00:43 +0000
Manifest next update: Sun 24 Aug 2025 10:00:43 +0000
Files and hashes: 1: 1Fib0sD75-LYWSzuaHGSu7V5efc.crl (hash: 7T8qt6Z0HXcpQ9DO/MCPfoc3gS4mDCGRwsrssPYItYE=)
2: kWLYBV2lkiSE5J3RZk5fvmnmzB0.roa (hash: fcVu1jDo+tZnVop9ajN9Wj6s2WROmvxL/2WZUAGhZDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:90:c5:29:69:a1:30:aa:bd:5b:41:36:72:33:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Validity
Not Before: Aug 23 10:00:43 2025 GMT
Not After : Aug 24 10:00:43 2025 GMT
Subject: CN=bfcf4cccc6811119e4e21cab3dd73ccbb53f7ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:66:84:32:36:9a:bb:17:1b:e8:af:5d:c6:b2:
cd:78:7b:b0:a1:6a:0e:85:8d:bf:76:9b:7d:66:a9:
be:e8:d0:38:34:ec:0d:c6:19:fe:73:05:5c:5c:ee:
0f:f1:d0:39:7d:96:75:65:5f:f1:c4:3f:d3:01:fb:
f0:0c:75:05:51:42:93:71:89:4b:21:fc:05:68:ce:
1e:d8:52:f6:11:5d:a8:fe:21:9e:a0:3b:11:cf:0d:
2f:d8:e1:fb:b5:78:84:ce:4a:95:e7:a5:6a:c5:90:
67:91:f0:8a:2b:82:b6:cd:28:7f:2e:c6:a1:21:b1:
2d:f8:e9:b4:a7:60:cf:b6:d0:69:0f:19:89:46:0c:
49:8f:c7:6b:e3:de:fa:99:d8:c4:4e:42:ac:57:97:
47:6c:56:6f:22:a0:97:ad:62:37:1d:48:0f:99:87:
74:01:17:93:06:3f:55:ee:9b:d6:f0:d8:c5:21:9c:
48:21:eb:95:d1:e4:ec:35:1c:23:36:77:e1:0e:13:
7e:e4:c4:20:5a:a1:b1:26:f2:df:6a:a5:79:f9:f1:
d0:d3:d7:fc:09:59:b9:8e:47:1d:da:40:d5:e8:2f:
5f:99:47:4b:a5:8e:52:d0:4c:f6:2d:0f:7a:e1:d2:
94:fa:74:37:2f:4d:02:40:fd:f6:52:83:96:92:5b:
2a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CF:4C:CC:C6:81:11:19:E4:E2:1C:AB:3D:D7:3C:CB:B5:3F:7A:C4
X509v3 Authority Key Identifier:
keyid:D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:47:15:74:d4:c9:85:06:08:82:3c:7c:4d:3b:2c:c1:80:35:
0b:4d:42:ac:da:56:be:9b:00:ef:42:18:a2:86:29:36:8a:3c:
b6:c3:e7:60:de:66:96:be:b5:41:32:d7:a2:cf:1d:a8:f8:48:
92:47:3b:ea:23:22:e9:a2:22:31:05:bf:1e:e7:50:be:45:f6:
ca:2e:72:87:64:9e:3a:6e:c8:18:61:c7:73:4e:f8:50:14:a5:
67:eb:2e:af:af:52:3d:30:ab:d9:49:5e:91:4d:76:5d:75:32:
0a:fd:8e:e1:03:6c:9f:4d:81:2b:bf:88:3d:37:43:d9:09:55:
a8:6d:ed:49:39:bd:70:fa:c7:ba:b2:61:05:67:0a:94:78:43:
8a:c0:85:13:a5:af:7a:42:21:99:2d:38:47:3a:b1:52:24:d8:
e6:ec:a8:57:f1:fc:23:f5:cd:e3:51:57:77:7a:76:9c:4a:53:
6d:3b:2c:85:64:b5:05:a0:f0:d5:97:48:c4:74:f7:ed:df:b6:
56:b1:6a:ab:87:c6:df:28:a3:c9:02:f1:b8:0c:cb:97:6b:ff:
33:9a:bb:e8:a8:f9:55:51:2c:ae:db:62:5c:e3:13:0d:e2:87:
ea:e5:84:28:fa:54:67:f8:68:e7:a3:ae:bf:cc:f7:5a:8b:f8:
e3:df:47:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:50:48 2025 by rpki-client