Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
File: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft (raw, json)
Hash identifier: CnYQ5T1iz098kNoxDRUcOB/wSJSLWJDZCHoq/PrPSsg=
Subject key identifier: 94:2C:A6:33:BC:D9:EC:F8:E6:04:B5:45:C4:93:08:72:F9:BD:05:8A
Authority key identifier: D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
Certificate issuer: /CN=d6f8a9263497c8d54e05496460d439cd6e069260
Certificate serial: 0198D4E097BF422B52206DF9DB35446A5377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
Manifest number: 0136
Signing time: Sat 23 Aug 2025 03:02:24 +0000
Manifest this update: Sat 23 Aug 2025 03:02:24 +0000
Manifest next update: Sun 24 Aug 2025 03:02:24 +0000
Files and hashes: 1: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl (hash: nNJaiTr7oKtjc3QpR+G23+KyjfagzVNV3xYQ57+mvZ0=)
2: 2w_iKrPjyXvCCJbs0F7ZOxiGDMg.roa (hash: nKdejJ8/KPh01N5ujViM/1f8ednF50B5j98TO8WaB8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:97:bf:42:2b:52:20:6d:f9:db:35:44:6a:53:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f8a9263497c8d54e05496460d439cd6e069260
Validity
Not Before: Aug 23 03:02:24 2025 GMT
Not After : Aug 24 03:02:24 2025 GMT
Subject: CN=942ca633bcd9ecf8e604b545c4930872f9bd058a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1f:c8:bb:54:3f:19:4a:5c:2e:0b:af:a6:e7:
14:2f:11:a3:75:63:8a:a3:c2:83:8a:bb:5a:ec:77:
bd:d6:9c:d6:70:87:14:8d:14:24:e6:73:8f:7b:b7:
dd:55:9d:8e:8a:6f:d9:50:35:e1:54:25:f1:f7:fb:
36:b1:95:4f:46:90:64:5b:9c:df:d7:7b:9b:f3:00:
84:d2:64:dd:f9:ac:6b:62:2a:fd:ad:8d:3e:93:df:
38:02:b1:b2:c9:ec:83:b5:0d:25:b6:ea:f0:4b:e7:
ca:99:11:84:f6:44:d8:25:db:25:18:36:23:4b:ff:
11:9d:ef:c3:3b:d0:19:37:8c:33:93:bc:d7:25:47:
56:56:e1:db:9d:7f:b9:a5:e3:2e:0a:61:cc:4d:56:
ab:86:02:d0:50:51:60:0e:df:5c:71:79:81:43:74:
22:ff:08:80:b7:57:e8:69:97:24:7e:4a:27:e7:f5:
eb:29:6f:42:57:68:ce:be:93:88:b5:c8:a6:9d:ba:
aa:2a:6f:f6:ea:db:d6:ac:33:e9:ee:bd:ba:78:28:
f4:bc:af:d0:26:3d:b2:a5:31:ca:48:43:34:11:c2:
c3:e1:19:44:02:39:c9:76:47:c1:da:5c:fd:0b:1b:
79:cd:b8:48:03:50:39:58:b2:be:b8:a4:65:e8:a6:
c1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2C:A6:33:BC:D9:EC:F8:E6:04:B5:45:C4:93:08:72:F9:BD:05:8A
X509v3 Authority Key Identifier:
keyid:D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f6:3d:57:a9:7d:1f:70:34:dc:2e:a5:28:e6:5e:2d:0e:ce:
c0:c4:3b:14:c3:dc:31:36:83:85:07:1c:91:81:d7:c2:0e:62:
41:81:f9:f5:ce:05:98:56:fb:9f:01:28:e1:63:a8:db:52:9f:
3f:f4:e2:a6:7f:57:76:5f:c4:26:6e:bf:1a:ee:ab:ee:81:f4:
d2:49:7d:1a:dc:d7:6f:8b:75:25:2b:68:b2:90:15:dd:18:29:
f1:80:b1:32:7f:dc:1f:53:c3:f5:06:5f:fd:28:6e:ee:78:49:
14:5a:e9:f4:57:9f:98:f9:23:8d:c5:52:a8:14:2a:13:6f:e2:
e9:6b:bb:da:b5:3f:b5:d1:bd:10:05:82:e7:2e:3a:54:ac:83:
ec:df:0c:dd:75:b1:35:bc:3c:d7:1c:40:84:58:04:ac:f1:39:
97:ff:5a:70:6c:09:8b:57:7b:3b:75:61:87:64:bf:13:75:cf:
5e:e8:10:93:5c:53:13:9d:0a:b3:d1:f5:28:3f:dd:05:8a:90:
b6:28:c6:e2:18:1d:9a:d6:fa:0c:cf:fe:74:9d:9a:53:25:b3:
27:ad:68:28:13:d0:52:14:6b:4a:1d:f4:ab:22:cd:01:a9:c8:
99:af:ad:86:1f:c1:63:50:4f:04:7d:1c:f2:eb:12:bc:4f:42:
80:42:72:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:09 2025 by rpki-client