Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
File: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft (raw, json)
Hash identifier: 4F+R0WVI5XDkBJKNoPhNOVq2EknDZKtm6u7yiDofBfo=
Subject key identifier: CA:0C:EC:6D:94:04:E1:09:7B:1A:37:7C:03:CD:30:9E:85:B6:0B:9E
Authority key identifier: FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
Certificate issuer: /CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Certificate serial: 0198D54DC31FCEAF66C9383405138FC4C9E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
Manifest number: 035E
Signing time: Sat 23 Aug 2025 05:01:39 +0000
Manifest this update: Sat 23 Aug 2025 05:01:39 +0000
Manifest next update: Sun 24 Aug 2025 05:01:39 +0000
Files and hashes: 1: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl (hash: 7AyvGm2UzdZk3pcs6IKu+umN6W9/klIPr8g22LoS4Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c3:1f:ce:af:66:c9:38:34:05:13:8f:c4:c9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Validity
Not Before: Aug 23 05:01:39 2025 GMT
Not After : Aug 24 05:01:39 2025 GMT
Subject: CN=ca0cec6d9404e1097b1a377c03cd309e85b60b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b6:d1:26:31:35:26:e3:3c:08:62:4e:63:6f:
e9:d4:ad:0c:20:25:78:01:b2:8a:8b:04:fe:be:ed:
30:00:7c:10:2b:26:1d:73:3f:af:d4:35:8e:05:0f:
a1:e3:d4:04:42:58:42:b7:d3:79:1a:4e:0a:af:2f:
66:f3:b2:d9:0f:b2:7a:06:20:47:92:c8:66:bd:7f:
d8:04:33:e3:04:14:e3:09:41:14:3f:67:90:55:b7:
73:34:dd:8a:20:4a:3d:d5:79:16:92:e6:cd:f4:dd:
43:0f:95:cb:e5:fe:c2:42:2b:50:c1:d5:50:e0:1e:
bb:20:93:e3:21:c1:02:a3:99:92:c4:ab:38:75:81:
97:22:6c:e6:4c:c8:b4:fd:14:c4:3c:ab:e5:78:e8:
4a:5c:cb:26:32:69:fb:18:1b:2c:6b:0d:db:0d:d2:
ef:cf:5e:b6:09:20:9d:03:2e:c5:be:92:1d:8e:d4:
43:43:40:c6:7b:d7:eb:ee:5c:a1:88:a9:b0:ea:f3:
ab:36:45:a0:5d:5f:8c:d7:9f:62:70:75:1a:34:cd:
f2:61:02:fd:42:b7:ed:fc:d2:a9:46:4f:11:31:02:
e4:17:38:14:5e:9e:d2:d1:1a:5b:59:8d:b5:da:77:
e3:51:0c:f5:ab:ea:18:a8:39:8a:22:77:6e:b7:fe:
d1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0C:EC:6D:94:04:E1:09:7B:1A:37:7C:03:CD:30:9E:85:B6:0B:9E
X509v3 Authority Key Identifier:
keyid:FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:18:f3:5a:32:d3:1f:b2:da:8c:43:af:55:81:8b:a7:fb:4a:
2d:bd:05:99:6a:91:f1:06:43:22:fd:66:11:5c:17:c9:4f:77:
d2:2c:97:49:6f:86:33:e2:3f:b0:c3:06:14:5b:44:49:45:c6:
ad:b6:01:f9:d2:fb:f3:b5:c9:4b:7a:20:58:08:c5:b7:24:93:
79:8c:21:0e:c7:26:31:dd:ee:d2:3a:dc:c4:f3:37:1c:32:53:
d7:55:00:fa:ab:a7:24:ac:30:6f:b1:a3:ea:53:b0:bf:de:a6:
4d:54:14:3b:e9:ab:15:92:69:5a:b3:04:66:71:f5:8c:17:d4:
bd:eb:ef:dc:d3:5a:2a:02:20:22:77:e2:93:ba:1f:4e:21:2b:
45:fc:6c:1a:45:f3:a6:e8:d9:7d:ad:d4:dd:f9:5b:3f:01:7e:
f5:31:93:8e:f6:8f:d1:af:d5:25:c0:0d:9f:1e:87:a0:45:a2:
c6:63:8f:d6:a5:af:c4:0c:44:1e:19:d9:34:27:63:10:f0:d3:
4a:f2:b8:ed:0a:45:50:a8:d0:40:27:a5:5c:a2:85:09:c7:5f:
16:0f:b5:64:42:39:ff:bc:3e:dd:43:f1:3c:ad:ad:25:77:b6:
13:5b:77:0d:cc:48:ee:d6:95:e1:40:47:db:99:72:c0:b7:f2:
78:cc:26:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:13 2025 by rpki-client