Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
File: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft (raw, json)
Hash identifier: cJrfS6HSzU2u8ptUp5D+fxvd7w0F9ho5TLKg7KZpEVw=
Subject key identifier: 02:D4:BD:20:7B:5F:90:CF:33:06:38:59:09:4A:8E:5E:E3:0E:1B:78
Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
Certificate issuer: /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Certificate serial: 0198D404B30981CAF9B4EBD5774B63C38A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
Manifest number: 1648
Signing time: Fri 22 Aug 2025 23:02:14 +0000
Manifest this update: Fri 22 Aug 2025 23:02:14 +0000
Manifest next update: Sat 23 Aug 2025 23:02:14 +0000
Files and hashes: 1: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl (hash: zK6MnIUk4zdclt2/D1S9T+B0HSXrVqOe54aj/Ku7ZvA=)
2: H-kQEaFf2MPiwlkPCOgWrFwC_9I.roa (hash: WMlarJWRcXR27oWlU2I21RPYRd4PDPHteVf5HE7I34E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:b3:09:81:ca:f9:b4:eb:d5:77:4b:63:c3:8a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Validity
Not Before: Aug 22 23:02:14 2025 GMT
Not After : Aug 23 23:02:14 2025 GMT
Subject: CN=02d4bd207b5f90cf33063859094a8e5ee30e1b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:13:3d:66:e7:8c:2a:30:ed:00:0d:c8:4a:d8:
e1:07:fa:e3:3e:05:a8:4f:86:64:67:a6:9d:bf:4e:
53:2c:1f:a3:80:cb:76:ae:48:c5:2c:ed:3f:bb:09:
02:cc:91:1f:bf:15:a3:29:1d:b6:2c:fb:ed:9d:a2:
df:b7:b4:ae:83:4e:ff:7a:ae:06:5e:28:cf:07:b1:
cc:a8:57:3b:5b:ec:ac:15:f1:21:c8:c4:e5:3b:f1:
cd:b2:6f:32:fa:18:4b:e9:4f:28:61:f6:50:58:83:
30:0e:2b:e0:f9:60:eb:0a:e7:44:68:47:84:73:46:
d4:44:a3:4c:ca:2a:6c:16:9a:f0:df:82:73:37:e8:
ac:62:1f:5a:2a:48:1f:e1:4b:a0:ea:da:d3:89:2b:
0e:94:a4:5e:1f:73:06:8e:a0:7d:df:25:51:c4:f7:
88:0f:a3:c4:18:6d:28:0d:9d:ab:d8:21:8f:1c:9d:
98:08:ba:e9:94:38:fc:c5:54:01:ec:d1:e3:6d:00:
4e:ca:72:f4:f2:66:5e:6d:6b:01:fc:50:18:83:3b:
72:48:5d:8d:d5:ea:79:b6:39:1c:a0:e5:f3:6c:dd:
3c:ab:de:33:6d:64:e1:9e:0f:d0:a2:93:a7:6f:03:
1b:35:6e:ae:6f:9d:d8:40:7f:65:b1:a9:3d:d7:bd:
f8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D4:BD:20:7B:5F:90:CF:33:06:38:59:09:4A:8E:5E:E3:0E:1B:78
X509v3 Authority Key Identifier:
keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:1d:99:4f:e3:8e:a7:92:a1:b3:9b:4b:6b:f9:93:1a:d5:0f:
49:83:79:62:42:26:07:b1:a3:16:c1:ac:dc:7d:f2:55:33:15:
c7:ce:c5:97:2c:ab:c2:e0:fc:16:82:41:68:a4:fd:64:2f:aa:
cc:30:3a:00:f7:97:1d:e9:36:8a:fa:3b:09:16:ad:6f:b2:e5:
53:ab:39:4e:d8:d4:d1:46:39:bd:c8:55:9c:eb:7c:db:9a:4d:
2b:c0:af:57:a0:8f:2e:8b:90:1d:90:78:bd:e9:ef:0a:57:f7:
69:9c:68:aa:d6:77:2b:e3:e9:79:83:a8:11:fb:56:aa:76:61:
f2:39:f0:a5:d7:57:9d:06:d3:71:83:59:1c:fa:b5:f0:f2:67:
b9:01:c8:13:47:36:5b:01:b1:53:be:2f:f0:5e:23:28:13:0c:
f7:63:d3:58:e9:2d:15:06:74:45:4d:ec:11:3b:1c:a2:22:a7:
99:b4:de:50:46:bf:1c:ce:b4:f5:fd:d8:fd:e5:86:f8:5d:57:
bf:53:91:08:17:67:89:44:05:a8:81:45:54:3f:b3:43:ee:37:
cc:52:98:85:e4:2e:83:2f:75:de:14:0c:85:de:87:1c:9e:be:
ca:61:71:89:e7:0e:f8:eb:b7:d3:33:3c:98:0b:7e:94:87:2d:
4c:50:30:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:25 2025 by rpki-client