Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
File: 1-NPp2u22ukJraBbRyQ83kiO-dXY.mft (raw, json)
Hash identifier: 7aUZE07euxHkMWeenEGGoOjRXFuQtQ0+qqkve3Irs3A=
Subject key identifier: 12:5E:94:A4:C2:1E:BB:01:D2:40:51:A9:C9:42:DA:04:1A:5D:75:F7
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 0198D4E04DB1636BAE71F00AB4A2152D4C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 03:02:06 +0000
Manifest this update: Sat 23 Aug 2025 03:02:06 +0000
Manifest next update: Sun 24 Aug 2025 03:02:06 +0000
Files and hashes: 1: 1-NPp2u22ukJraBbRyQ83kiO-dXY.crl (hash: +Gt0uFOkjK9IpiiJxUIODnbvIb+EbzK4vST8ewE0QWY=)
2: ApRmxFrIHgDq0uE514jDIHsfIeg.roa (hash: wwR59HFeyAkBUrzznAPWkLGe9T2sf1JpKPVH96BNgPU=)
3: LDvMOjEUxjVrAxBBKwXZ2WWq0ic.roa (hash: lSJbEniX1S5iq6pQApVmxDosGfWL1zz6nfIQW1JNw3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:4d:b1:63:6b:ae:71:f0:0a:b4:a2:15:2d:4c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Aug 23 03:02:06 2025 GMT
Not After : Aug 24 03:02:06 2025 GMT
Subject: CN=125e94a4c21ebb01d24051a9c942da041a5d75f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:67:9b:fb:7b:e0:cc:20:c0:b2:1d:92:84:f2:
e1:26:91:ad:e0:c6:29:d0:99:15:16:e1:16:c7:5d:
aa:32:d9:f9:e9:fa:d4:ec:ef:37:0e:cf:be:f0:64:
2c:41:bb:06:33:dc:cf:ee:1b:a5:71:ee:d0:db:1d:
0f:49:75:20:62:27:ce:58:a7:df:a4:eb:5a:08:4f:
c8:c8:e1:dc:bc:5d:3d:76:bb:58:75:2b:3e:c6:7f:
9f:db:8e:25:40:4e:66:a0:5c:58:0f:cd:6f:41:f0:
ea:ec:4b:83:47:a1:80:aa:73:ee:4a:05:75:13:c9:
ff:33:e1:55:cf:a4:54:a9:38:16:4e:91:2a:2b:95:
bd:52:19:86:55:d0:04:8c:b3:c1:d6:7a:e6:df:d9:
21:e4:01:1d:26:f4:48:93:95:bc:e2:44:ae:e4:e2:
5d:25:1f:cc:62:20:ea:df:07:9f:19:d4:1b:f6:60:
b6:33:5b:a1:be:fc:12:e0:72:c4:e2:41:c9:73:79:
a9:d0:93:d6:55:13:07:4f:41:5e:56:e8:a3:db:0e:
b5:e9:2d:82:16:9f:4f:55:e6:e1:df:c9:cf:58:5a:
c2:0c:c9:5d:48:49:f6:48:31:79:2d:a3:09:ad:9e:
17:bc:81:3f:07:b7:75:14:86:96:3e:12:fe:40:8d:
02:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5E:94:A4:C2:1E:BB:01:D2:40:51:A9:C9:42:DA:04:1A:5D:75:F7
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:69:0d:17:ba:e8:a2:8b:75:95:79:5d:b0:9c:69:4c:91:4c:
85:56:cf:d2:5a:6b:ea:76:9c:74:16:4f:62:a0:47:aa:e0:6a:
1c:33:06:6a:17:5a:b3:11:4d:49:ee:2c:1b:78:58:c6:b6:26:
8a:16:e8:04:c9:20:42:d1:69:6c:6e:b9:ab:c7:9e:c3:1a:34:
9e:53:d2:4a:50:47:13:ab:2e:9e:99:0b:64:c0:e9:db:4d:7b:
68:18:e1:33:e0:8f:c9:e9:04:94:f1:2a:40:26:30:ac:b1:02:
fb:4c:4b:6b:5f:f6:69:67:05:9e:11:f0:e8:eb:57:68:93:e1:
90:1b:40:e6:a9:43:0b:7b:82:e8:19:b2:03:bc:f2:a2:0d:eb:
d0:b0:1c:d9:69:02:aa:05:a1:7e:82:ae:f7:5a:26:62:ea:e3:
e4:3a:c0:59:01:3a:d9:3c:bc:cd:64:c1:a8:2a:be:a8:04:96:
38:7c:d1:1d:92:e6:f4:bb:e4:6c:74:44:c5:25:8b:ed:bb:b7:
e7:1e:a8:c8:de:8a:bd:da:f3:a4:2b:cf:7e:9c:17:7b:60:84:
30:97:f7:86:09:47:52:1e:ff:01:67:5b:ea:6e:4a:dd:53:ea:
4b:f5:d3:4e:84:fc:de:09:a2:8b:80:59:12:4b:7f:cc:47:1e:
59:96:c3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:04 2025 by rpki-client