Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
File: 1-RVYjvgFRokoxj2rCGMAheXQj2U.mft (raw, json)
Hash identifier: pd7PgZSllqrsR5okiGx8j7cwtersCL1FxWfPT/8JwbY=
Subject key identifier: EA:56:0E:68:48:2D:23:D0:C9:F2:56:3D:37:39:AF:AA:62:0E:96:33
Authority key identifier: F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
Certificate issuer: /CN=f915588ef805468928c63dab08630085e5d08f65
Certificate serial: 0198D660744B10CC42A22CF4A8210DCBA6D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 10:01:42 +0000
Manifest this update: Sat 23 Aug 2025 10:01:42 +0000
Manifest next update: Sun 24 Aug 2025 10:01:42 +0000
Files and hashes: 1: 1-RVYjvgFRokoxj2rCGMAheXQj2U.crl (hash: EIiHa+vnmtevmTsR4iZxY5tTpDN8dnfHnzXsJGRN6nI=)
2: kSpoSxHKDe6NIGWDkuL60L15TUg.roa (hash: H+OsucCLJz/FqkNDXLyLTzKpNO9y1yCy5pgD6JvPI6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:74:4b:10:cc:42:a2:2c:f4:a8:21:0d:cb:a6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f915588ef805468928c63dab08630085e5d08f65
Validity
Not Before: Aug 23 10:01:42 2025 GMT
Not After : Aug 24 10:01:42 2025 GMT
Subject: CN=ea560e68482d23d0c9f2563d3739afaa620e9633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b2:4b:82:85:2f:79:cc:e6:83:47:55:5b:eb:
e8:84:13:7b:34:d8:a6:99:80:fc:ef:12:8f:69:7b:
28:42:c4:11:fd:ab:87:fa:2c:03:ab:85:59:93:c7:
a8:40:0b:bc:6a:08:81:5e:04:9f:74:d8:d2:b8:fe:
fc:71:3f:d9:fa:ce:6e:ef:21:36:46:9f:60:c6:e0:
2b:ec:dc:db:c7:79:b5:fe:59:ab:28:dd:5f:74:93:
ef:d5:1e:69:8b:af:9e:a9:5e:08:ab:98:cf:04:d0:
f0:37:c7:d2:86:f7:c7:ad:41:2b:af:fa:8d:1e:3f:
6f:28:22:fd:95:ed:82:aa:4b:66:5a:c8:5e:92:f3:
4f:5a:77:ee:20:73:53:58:e4:eb:1a:5a:b6:e9:c6:
f3:e8:85:2b:67:ed:c6:0d:9d:a0:ad:32:f8:d5:42:
80:d7:e0:4b:34:98:23:fc:8a:00:9d:77:51:ef:99:
70:df:40:7e:ac:13:d7:a9:09:39:ec:61:30:2e:3c:
6f:ee:7d:55:5a:46:b3:87:76:c8:52:dc:41:b4:70:
34:43:9a:45:8d:04:93:84:1d:37:8c:9c:fd:94:61:
54:19:41:6c:d2:e2:18:17:8d:71:78:63:17:e8:97:
69:91:63:1c:4e:92:7a:40:54:73:ba:cc:34:ea:08:
69:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:56:0E:68:48:2D:23:D0:C9:F2:56:3D:37:39:AF:AA:62:0E:96:33
X509v3 Authority Key Identifier:
keyid:F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b7:e5:ad:47:d0:c6:30:5f:5a:c6:bd:3f:68:a8:10:9c:04:
85:ca:ff:08:e9:97:df:cb:8d:1e:da:8c:f9:20:85:ce:77:16:
0c:74:c3:23:5d:32:e4:8d:f2:05:3b:55:4b:77:fe:d2:47:25:
61:8a:86:28:03:14:6d:cc:82:50:b9:41:01:ad:8a:6c:cf:12:
eb:95:53:74:d8:d3:05:0c:05:ad:df:19:86:74:e2:ce:d9:23:
0c:9e:99:5c:58:d6:30:69:0a:3f:ab:78:89:33:87:69:e9:2f:
37:29:2a:f3:ef:d1:e1:01:ef:36:c5:a9:4d:4e:0a:d6:aa:07:
d1:93:52:a1:5b:9f:04:3f:df:f2:0c:44:56:0a:dd:32:ca:6c:
e2:b3:aa:03:71:74:f7:e2:6c:56:5e:32:03:2f:7c:c4:68:62:
ac:d5:5a:a1:59:f4:f8:1f:3b:9a:03:33:cb:25:06:c2:a9:af:
41:cd:4f:bf:04:42:9a:23:94:af:34:00:2f:b9:e2:e1:10:78:
9a:14:5f:4f:e3:5d:74:e4:96:9c:84:2e:4e:4a:ed:a2:d8:1b:
9d:13:e0:30:18:9b:21:b4:59:21:c4:76:3a:e1:26:2b:23:1f:
b6:f7:3b:c2:4e:19:a7:6c:b8:15:ee:93:e9:ab:b0:5b:02:3f:
71:66:dd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:33:16 2025 by rpki-client