Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
File: 1h61PLVnGN8NlHbNmEqsRDK5D2w.mft (raw, json)
Hash identifier: 94TovZprRhlN3CsZ+bKT+BXVaAgawIrTefE2lx05iE0=
Subject key identifier: E2:2B:7E:25:DD:9D:95:80:EE:B9:D7:B1:CF:39:A8:B9:41:2C:F4:98
Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
Certificate issuer: /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Certificate serial: 0198D58400D9E037BA5A216604F1AFE20BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
Manifest number: 0D22
Signing time: Sat 23 Aug 2025 06:00:54 +0000
Manifest this update: Sat 23 Aug 2025 06:00:54 +0000
Manifest next update: Sun 24 Aug 2025 06:00:54 +0000
Files and hashes: 1: 1h61PLVnGN8NlHbNmEqsRDK5D2w.crl (hash: 2fwwDE9eeZreBGgWdf0s6+R4t2RdqaK4WwlFTsOOFKs=)
2: OrR8ArTb8w0zfL8vZIwz8tbKQ2c.roa (hash: DXI54xHOK1LCP4IfsOxKtDE/CK97CgmE5qjdIRspp1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:84:00:d9:e0:37:ba:5a:21:66:04:f1:af:e2:0b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Validity
Not Before: Aug 23 06:00:54 2025 GMT
Not After : Aug 24 06:00:54 2025 GMT
Subject: CN=e22b7e25dd9d9580eeb9d7b1cf39a8b9412cf498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:f5:29:c9:8b:95:9e:15:82:0e:49:85:30:
cd:b3:18:18:1e:42:11:54:50:e7:3f:dc:4c:a5:8e:
cf:69:ab:3d:23:32:81:91:cd:92:65:76:ae:9a:75:
21:63:53:9d:a4:24:12:ff:1f:74:4a:45:be:2a:e1:
75:44:3a:da:c3:c1:72:71:c1:21:1b:7c:f0:e7:67:
02:56:19:48:c8:a6:00:84:b7:07:e3:9a:d7:18:2e:
5a:82:0f:19:b9:0a:a4:6e:d7:b4:d0:9c:e1:13:9b:
0d:87:00:f1:15:99:24:52:93:b1:a2:e7:75:17:d9:
ea:88:d6:fc:6b:24:f4:45:67:99:d7:a0:35:d9:0f:
8b:be:4a:0f:a8:1b:5a:eb:86:17:e7:33:96:64:02:
18:9e:ea:00:4a:62:b2:2e:97:58:75:ac:d5:13:4e:
34:81:3d:ad:b3:db:01:69:e5:3f:b3:40:73:4a:31:
77:09:fe:b9:81:ff:5c:6a:60:40:e0:69:39:8d:d6:
2b:33:b3:42:38:fc:5f:fd:ad:c5:ca:02:58:b2:ed:
8c:9f:b8:77:1c:09:8d:0b:6b:2d:e2:6d:25:3a:ad:
60:35:2d:5d:67:b2:96:ca:3c:57:8d:0c:b8:9b:59:
41:8a:37:da:29:9c:e7:bb:4a:60:a6:9b:b6:50:19:
77:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2B:7E:25:DD:9D:95:80:EE:B9:D7:B1:CF:39:A8:B9:41:2C:F4:98
X509v3 Authority Key Identifier:
keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1d:16:7f:2e:b1:17:96:e8:0c:06:5a:82:ef:85:90:13:c0:
2d:26:ef:fc:d8:83:c9:26:f7:0b:f0:1c:bc:c8:7b:5d:9f:59:
bf:15:1f:82:c9:1a:4a:ff:69:73:01:de:70:42:88:43:ab:d4:
93:b5:f2:23:04:bb:0e:a4:b8:fb:5b:8f:c8:8b:2a:b3:00:0e:
3d:af:18:61:99:d4:35:fb:2b:2b:7d:a8:1d:32:62:9d:a6:c6:
29:f1:d0:e4:14:4c:25:08:ed:85:a1:3b:2d:0b:cf:e3:ed:01:
e5:c9:1a:49:f3:ab:9c:c1:24:03:ca:e7:fa:4e:73:ca:11:b5:
8f:ce:56:21:6a:0e:7e:41:04:05:d8:a1:1f:74:ea:19:5a:0e:
08:6b:6e:21:a8:d7:9f:9c:df:3d:88:d2:15:cd:94:70:be:d0:
fb:e5:7d:29:28:db:db:6b:91:20:94:9b:92:0a:2e:f4:1a:00:
76:f5:60:79:d4:22:38:1d:c6:ff:e9:18:38:8b:53:8c:24:8b:
14:e1:8d:b6:a6:6e:c1:9b:0a:73:ed:34:27:4e:b5:a4:94:93:
23:fa:25:1f:96:09:8d:b4:d9:b7:81:a9:8f:81:14:ba:50:2d:
8f:21:5b:64:70:f2:db:5b:68:d5:8f:c7:29:cc:85:ef:91:56:
54:c4:5b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:36 2025 by rpki-client