Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: bBTwYAP5T85u847F7txX/HD92nuOgTtE+7/h5l9L9vQ=
Subject key identifier: 89:EC:2E:63:9E:C2:6B:B6:BA:00:4E:09:69:BF:E5:06:4F:89:66:FC
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 0198D473DA77E6A729D7339932D103CB0273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 075F
Signing time: Sat 23 Aug 2025 01:03:38 +0000
Manifest this update: Sat 23 Aug 2025 01:03:38 +0000
Manifest next update: Sun 24 Aug 2025 01:03:38 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: nE7jd61+ySf6aLJLZ+0cDjVUSGSIQaWvV2DF8GrtFaQ=)
2: e156A2TTFNsUHYceE64LHXFN6g0.roa (hash: nO0mYNmn3X/br3j4EpG5tdC2In3Gz3kRvtjW6m8kRsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:da:77:e6:a7:29:d7:33:99:32:d1:03:cb:02:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: Aug 23 01:03:38 2025 GMT
Not After : Aug 24 01:03:38 2025 GMT
Subject: CN=89ec2e639ec26bb6ba004e0969bfe5064f8966fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:bf:1c:8e:4d:65:e7:57:61:0e:e5:02:38:
72:57:3f:9a:54:db:99:88:13:d5:ad:95:c6:19:13:
e6:25:b0:dc:08:bc:f3:08:bd:e0:19:4b:4b:9d:9d:
c1:74:38:b9:d0:f0:6d:96:2b:98:6b:8f:6f:94:6a:
b9:43:0b:8b:c2:12:ff:44:cb:a3:a2:ea:67:f9:8f:
10:98:d0:34:ba:08:0e:a8:87:00:50:00:56:1d:ab:
7d:2c:39:99:51:f3:6b:45:a5:9a:29:34:76:1d:05:
7b:04:83:63:eb:ad:24:df:a8:36:c1:4f:20:46:17:
7c:62:eb:d8:b0:ef:53:96:7e:7d:f9:cc:03:07:d0:
eb:c2:3d:d6:72:e9:cd:4e:c5:05:70:f3:0e:46:d8:
a7:cc:54:58:90:f0:cc:c7:75:6e:37:fe:8b:b0:4d:
4c:eb:f6:37:24:93:f1:05:70:e0:bc:2f:d5:5c:ae:
28:5a:be:fb:57:69:46:2b:77:c4:62:7b:25:17:05:
1f:e0:68:71:88:87:3b:0e:df:ab:c1:e0:05:56:93:
7f:36:24:95:b1:4a:3a:b8:84:70:f9:90:89:6c:94:
4c:a5:9e:bf:db:42:18:7c:f7:50:bd:eb:96:ca:41:
b3:eb:8a:f8:82:25:34:4c:ac:cc:9c:0a:c9:83:f4:
1b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EC:2E:63:9E:C2:6B:B6:BA:00:4E:09:69:BF:E5:06:4F:89:66:FC
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:23:e0:24:46:a8:66:dc:1e:37:9c:63:1e:41:cb:3e:e8:f8:
d0:24:f0:c2:2d:71:12:d8:59:aa:ba:04:df:24:36:24:2f:af:
e7:46:20:b2:2a:91:5d:7b:69:0e:e8:07:ab:c9:ea:6f:5f:a1:
f3:68:51:ec:2a:93:86:5e:f8:b3:77:ea:cb:3c:c8:f5:06:55:
2b:43:ea:f0:4b:ee:49:78:18:39:3a:24:90:b9:ff:87:6a:9a:
86:7c:72:09:26:56:4c:e8:4e:1b:14:b4:b9:72:2e:59:ab:21:
14:ed:a5:b3:96:d0:90:14:ff:f1:4e:80:c1:b4:90:8c:b8:94:
3b:62:05:7c:56:ec:b5:4c:cf:dd:59:fb:5e:7c:89:d9:a4:ea:
87:01:23:34:fa:ef:85:06:cd:b7:b5:f8:a6:bd:3a:0f:b5:ed:
d3:6b:a8:03:f0:2c:e4:ef:de:62:d1:4e:b9:03:d6:af:5d:6a:
31:e6:84:fb:0b:cc:94:f0:03:9f:f2:c3:85:70:c7:1a:08:bb:
98:92:b4:40:96:7b:7a:50:87:6a:0b:17:b3:f7:35:4b:2b:10:
8f:9c:da:87:eb:cb:31:4a:18:62:93:e0:c6:06:a0:d4:29:83:
51:94:d0:3f:26:82:6c:1a:59:f0:89:c6:83:63:b0:97:0d:b9:
22:13:1a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:33 2025 by rpki-client