Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: rJAlBMT4i9sSYeiL48v0On71TpFZLt7pX6OaiFF/mUg=
Subject key identifier: AF:D7:D7:52:88:36:6E:ED:0C:06:EB:42:30:C2:C7:56:AB:F8:4C:4D
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 0198D5F1CB87CB864D99CB90395CD6BEAB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 15C8
Signing time: Sat 23 Aug 2025 08:00:49 +0000
Manifest this update: Sat 23 Aug 2025 08:00:49 +0000
Manifest next update: Sun 24 Aug 2025 08:00:49 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: HMarHSkBOl4+e0k9wCs5lRxPvRJTnAMDI5Z9LBLsxMw=)
2: 8Ja6nLmqn5rWkD8bJIXyJiseunA.roa (hash: 0Zo4/0JR5pHj4KIYK41VyhNWjJ7czQTS1SR9Du+4qQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:cb:87:cb:86:4d:99:cb:90:39:5c:d6:be:ab:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Aug 23 08:00:49 2025 GMT
Not After : Aug 24 08:00:49 2025 GMT
Subject: CN=afd7d75288366eed0c06eb4230c2c756abf84c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:37:15:8a:51:21:39:b9:85:be:e9:b5:c4:
19:fd:ea:89:03:5b:fa:4f:aa:4c:a5:89:5d:76:85:
44:66:97:52:07:9c:da:b5:b8:18:16:6c:68:d5:ac:
a8:a2:4e:1c:b6:32:d7:e1:75:61:69:62:51:5a:f9:
50:4d:49:d9:d6:e2:a0:58:cb:1d:84:aa:4d:31:3d:
95:64:27:57:06:10:21:9c:b5:57:df:f1:eb:55:b9:
95:08:96:d4:d8:0a:49:33:5e:27:b1:6e:1a:94:31:
95:19:a7:af:23:70:9c:be:ff:78:9a:f8:75:4d:a0:
fd:38:df:2b:10:92:cd:74:7f:8e:00:1f:eb:8a:71:
0d:f7:ba:a8:7f:ac:0a:7e:b4:8c:42:b6:fa:25:c3:
a6:bd:2a:9f:7a:81:c5:86:b6:5f:9c:0d:c9:8a:90:
3f:5a:cb:2b:cf:9b:97:8f:25:48:8e:69:bc:ab:60:
d0:d9:31:56:a7:ac:1d:e3:55:2c:43:74:23:fe:f3:
3e:7b:33:63:52:ee:1c:a2:5c:c5:c3:bf:d8:d8:a2:
f9:e7:5d:d9:b2:f9:49:b1:d3:49:f0:20:12:9d:50:
6c:f0:97:b7:db:5a:8b:22:55:2a:14:84:93:61:a6:
d2:eb:7e:50:04:00:d4:78:d9:45:86:f7:14:69:3d:
93:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D7:D7:52:88:36:6E:ED:0C:06:EB:42:30:C2:C7:56:AB:F8:4C:4D
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ff:92:19:b2:32:d5:17:ee:ce:41:b6:fe:ab:36:2c:97:37:
b9:e8:f7:69:61:9e:34:9b:a2:1d:c4:c3:5a:eb:6b:22:b0:98:
da:d6:19:dc:12:ca:c3:10:0a:33:a5:b4:81:15:4a:67:a5:18:
3b:53:0b:1d:e1:50:a1:e8:94:7f:2d:6d:95:41:7e:12:54:9d:
3f:74:47:92:64:c6:3b:c9:d1:a6:1c:a8:24:fa:60:67:32:be:
3b:2a:86:f1:94:f5:75:82:e0:8d:fb:e6:ac:c9:64:c3:32:a7:
ae:88:61:4e:e6:25:e8:c5:2c:c4:a9:2f:65:7c:e1:1a:02:aa:
26:0e:bd:d4:fd:a6:3d:56:ec:0c:83:6f:c7:32:c2:fd:a1:d5:
56:a9:8e:fc:e2:2e:2a:43:7f:83:d7:10:55:73:2a:f1:e8:dd:
0e:e5:36:6e:a7:1b:2a:05:db:3c:3e:91:91:49:12:29:87:99:
c1:fa:e8:1b:d4:1e:a8:28:32:b4:58:3e:dd:0e:61:00:24:14:
da:46:1c:93:85:cb:59:c3:6f:41:9e:e0:24:ea:c7:45:13:13:
5b:4b:6a:67:9d:03:5d:a4:3d:93:c9:1e:2a:88:0e:bb:ae:b0:
d9:70:f7:60:af:36:1b:92:06:24:ce:da:7b:69:73:1e:26:1d:
2c:da:85:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:21 2025 by rpki-client