
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json)
Hash identifier: sFcw3+tHSBtmgK96dT2t+U+k6glwY/yvGq2neKBI6Pw=
Subject key identifier: 7F:72:D5:16:90:6A:D5:1D:9B:EF:E0:EC:ED:CC:3A:66:40:D4:00:44
Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Certificate serial: 0198D70599B96A557E8FEB3888812BCD24DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
Manifest number: 02D0
Signing time: Sat 23 Aug 2025 13:02:05 +0000
Manifest this update: Sat 23 Aug 2025 13:02:05 +0000
Manifest next update: Sun 24 Aug 2025 13:02:05 +0000
Files and hashes: 1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: Tz/3e8QGgR0X3ysrmy4/+z2kydNKHsBNVW4nub5Zi/E=)
2: olYC3vt3bTWX5B6Daul0GiCdzRk.roa (hash: EU31+YZYAX7zRrR/hWxXMjIPU9jCSCk9p7wSptbJIM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:99:b9:6a:55:7e:8f:eb:38:88:81:2b:cd:24:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Validity
Not Before: Aug 23 13:02:05 2025 GMT
Not After : Aug 24 13:02:05 2025 GMT
Subject: CN=7f72d516906ad51d9befe0ecedcc3a6640d40044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:d9:63:71:05:dd:23:37:ef:0d:25:18:42:
8f:1b:b6:1d:a8:6c:8a:1a:96:98:6d:d4:05:14:92:
cf:25:cf:26:3e:f3:d8:59:34:d6:8e:2b:61:a1:db:
fb:2a:b6:eb:90:4a:bd:0c:98:56:97:8d:2c:43:92:
7f:44:48:9d:1a:71:93:6f:29:0f:f5:e8:42:5f:2e:
05:1d:b6:a2:bb:ac:78:96:70:2a:2b:7b:e2:fc:c1:
91:b4:b3:d4:3c:eb:4f:76:d7:fb:89:3e:25:35:8a:
41:fd:c9:c7:54:6b:48:8f:41:b8:7f:c0:05:68:b5:
aa:77:51:73:d6:40:4b:0f:0b:6b:e0:a7:51:38:63:
07:64:d9:a3:19:00:b8:a7:40:0d:8c:c7:c1:1e:41:
61:22:f3:87:89:ed:01:74:ce:7b:de:87:4f:7c:bd:
f6:9b:16:0c:d4:35:c1:4e:e2:ee:46:c6:0f:ff:a8:
42:2d:a7:6e:35:97:b5:e4:a8:70:20:89:7b:ea:3d:
f6:85:f5:ae:44:7c:72:1a:c3:61:68:4d:b4:d8:68:
c8:56:81:19:c7:3e:b7:38:dd:e1:e1:69:d0:3b:1c:
19:95:57:00:62:fc:0f:cf:93:aa:dd:a2:fd:b5:a7:
eb:57:44:2b:c1:ed:52:20:f6:d1:eb:e2:fd:79:c6:
05:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:72:D5:16:90:6A:D5:1D:9B:EF:E0:EC:ED:CC:3A:66:40:D4:00:44
X509v3 Authority Key Identifier:
keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:15:f0:43:ba:f8:e7:d7:bd:7f:ba:38:40:75:14:b2:54:28:
6d:40:03:9c:65:c8:be:8a:65:16:a4:ad:2e:45:1e:b6:cd:ef:
e4:94:8c:69:a2:d8:a8:9e:d3:5d:02:ce:d9:1e:b6:28:b1:08:
19:0f:c1:60:78:50:c7:12:ac:1e:aa:3d:90:37:5d:e8:fe:b8:
7b:c1:f8:89:7b:a7:90:dc:3c:d1:84:99:fc:9e:36:c0:99:2b:
e3:b2:e6:3d:5b:b6:20:46:b2:33:9a:4a:75:92:bd:32:a8:1b:
1c:81:81:58:01:5f:b7:e1:fc:e0:a3:ee:31:6c:bb:4f:34:62:
8d:68:1f:c0:4c:ec:a7:6c:f8:13:2d:5a:30:f4:55:99:e3:0d:
4c:54:8c:31:c7:c9:3b:3a:a9:2a:80:f9:ce:85:54:7e:a5:e7:
bd:66:28:f2:6a:ca:db:b2:3a:0c:94:3b:fb:e1:11:49:8d:18:
b1:ed:bd:d3:54:f8:91:fb:e2:27:f4:dc:ce:72:2a:e8:c2:de:
3b:a7:9e:58:cc:92:49:c5:cb:d8:cc:b5:c7:3c:b1:82:1c:66:
2b:ca:56:23:5d:e5:6d:5b:5a:db:86:38:09:7d:b2:03:d6:b9:
c8:76:15:7a:2d:d0:0b:31:86:dd:7c:59:48:eb:bf:04:35:ca:
8d:5d:d9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:49:51 2025 by rpki-client