Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
File: 1-PvIQVghSG6P4IYLW-w-koO4A4U.mft (raw, json)
Hash identifier: 8GT+jBuKPIAwXvjJKQ0cMzpq2K2ARg40Mn9S9pdt9xw=
Subject key identifier: 77:0A:8C:99:96:C5:E5:EA:FA:9E:8B:25:5C:20:EE:3D:7E:83:F4:8A
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Certificate issuer: /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial: 0198D54EA2DB3B8A55EC6085C29D24EFC814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:36 +0000
Manifest this update: Sat 23 Aug 2025 05:02:36 +0000
Manifest next update: Sun 24 Aug 2025 05:02:36 +0000
Files and hashes: 1: 1-PvIQVghSG6P4IYLW-w-koO4A4U.crl (hash: zIhQEtcBqMSFJVAPFweA0P/IiOJtKoD5i3SW+mgaX7o=)
2: Dn9PJQBV1DBDQ0-rgh6HR3KDZu0.roa (hash: gZf47H7ZNPeHNBxmm1n+mb7mTaHE9Uiqqc+N1w8TQc8=)
3: rkGv9bkZwGnroE2E1JMq5CMdQAQ.roa (hash: DQuQsqAZ9ADD7G7O8fgD2/H25auaCw74dHGUBLobCk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a2:db:3b:8a:55:ec:60:85:c2:9d:24:ef:c8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Validity
Not Before: Aug 23 05:02:36 2025 GMT
Not After : Aug 24 05:02:36 2025 GMT
Subject: CN=770a8c9996c5e5eafa9e8b255c20ee3d7e83f48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:96:d4:80:04:63:b4:99:b3:7c:a3:d8:4c:
90:c1:59:64:42:f2:18:d2:b0:8b:9b:ae:aa:c8:ac:
2a:75:35:b7:3d:bb:32:57:5d:9c:a1:84:b4:2c:06:
58:c7:93:d6:a5:39:b6:39:58:14:73:35:c7:1b:91:
e9:16:1b:7a:52:3f:ab:b8:82:fd:f9:34:74:c6:1d:
93:5a:85:69:9a:34:49:89:c9:62:ca:9b:8a:40:5c:
26:0f:02:f0:1c:4b:5a:d4:ae:56:09:73:7d:ee:bf:
dc:de:4c:0e:62:fc:cc:aa:7d:6f:6f:5c:f3:c8:09:
8b:ae:2e:b2:ee:0d:a3:87:7d:2e:5f:0e:d1:58:30:
eb:f7:8b:84:5b:65:ad:53:78:06:a6:a3:a9:8d:13:
68:f4:ce:9e:52:45:1b:39:cb:31:d9:2c:94:93:20:
1f:38:97:7c:5d:16:ea:20:28:0f:21:79:5b:da:19:
73:7e:34:68:b4:99:75:d1:e8:18:4c:8a:9f:4c:c2:
ec:c2:d0:8d:05:8e:d1:e9:c7:1e:e9:dc:f6:a1:90:
c2:c4:cf:2f:11:70:82:34:e6:d5:c3:c7:67:bf:d7:
da:27:63:94:8a:7c:e6:2a:26:1a:66:de:21:8f:77:
02:17:92:d6:7f:84:21:b7:33:e2:02:35:82:53:95:
d6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0A:8C:99:96:C5:E5:EA:FA:9E:8B:25:5C:20:EE:3D:7E:83:F4:8A
X509v3 Authority Key Identifier:
keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6c:23:69:eb:92:56:23:38:5c:f1:41:c2:6e:47:a8:1c:d7:
cc:fc:00:fb:71:d7:5c:34:61:65:8e:7b:12:47:e4:30:30:31:
11:0b:05:d9:f5:be:c5:db:84:ed:76:97:3f:79:56:10:0a:06:
c1:88:97:24:18:b9:c6:d1:af:26:d1:b3:cf:cb:39:e8:95:d7:
f4:35:90:f0:68:97:f1:bd:bb:a7:8d:6b:3f:c4:d2:79:b4:92:
8b:14:8b:0d:f5:21:46:06:a4:46:d0:2e:73:18:49:64:7a:10:
94:10:b9:1f:24:a5:be:7e:7b:b3:52:8b:65:4b:35:91:5f:3c:
7d:c1:dc:f7:76:f8:6a:a3:71:70:8c:ea:0a:71:59:92:c5:5a:
52:4c:04:36:f1:fb:ff:db:df:3a:3d:b5:5f:21:fb:53:b0:26:
ba:d3:0a:3d:a4:ec:77:79:f0:70:87:99:29:bf:82:96:eb:ed:
5f:3b:46:74:d5:10:63:0a:e9:c7:43:9e:d6:cc:9c:0d:1f:a2:
13:63:69:21:42:c7:2c:ce:4c:67:ae:0f:f2:9f:1c:10:32:c7:
ba:05:ec:8e:21:1a:68:e6:a0:b0:f5:83:1e:a9:26:b9:41:41:
0d:53:c9:44:6a:4d:8e:ef:46:8b:3f:29:40:d7:f2:f7:78:b3:
7b:d0:da:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:02 2025 by rpki-client