Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier: 5fWrDHIR+4QbhL6Bj08f6I7VraKzfEXN+ZjzF9uU9U4=
Subject key identifier: 01:6D:06:5B:2E:3E:22:7A:32:B8:57:74:F1:C6:8D:73:79:90:A1:6E
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial: 0198D5BB9D9E227F9F4E7F7EADDAF1F8ADAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 07:01:39 +0000
Manifest this update: Sat 23 Aug 2025 07:01:39 +0000
Manifest next update: Sun 24 Aug 2025 07:01:39 +0000
Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: DJXM3Taz9ieIBHwb6e/o4Z5KL3Zncpc5tIcdXwGXbTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:9d:9e:22:7f:9f:4e:7f:7e:ad:da:f1:f8:ad:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Validity
Not Before: Aug 23 07:01:39 2025 GMT
Not After : Aug 24 07:01:39 2025 GMT
Subject: CN=016d065b2e3e227a32b85774f1c68d737990a16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:44:47:0f:af:19:91:81:ef:3b:49:90:bc:29:
f6:55:42:0d:a1:67:3f:d1:61:e6:2d:9f:02:0c:c0:
93:65:49:44:9d:de:c9:99:3f:dd:79:1d:81:37:2f:
5f:f3:e3:4d:0a:69:df:0a:a5:95:a4:87:97:64:47:
f0:90:46:92:db:e2:83:45:29:ce:78:ea:ae:d0:13:
d9:4a:09:53:44:0e:bc:96:f9:73:07:f0:23:7b:f3:
d2:72:2e:5e:a9:a3:7e:b5:a5:cb:15:fd:9c:2f:cb:
61:9f:b5:56:32:9a:19:83:25:dd:be:18:91:5e:a3:
0e:31:43:d2:a8:07:55:fc:6b:99:6f:37:b9:bd:fa:
9a:10:d0:96:a7:09:f2:a1:02:b3:eb:33:c7:1f:15:
02:b4:78:f7:c3:a4:32:21:47:44:7a:94:f6:bb:33:
b9:29:35:b1:ac:b9:17:40:b1:f6:a1:ca:e3:fb:25:
75:8c:fa:cf:1b:f2:c3:17:84:a5:f3:9c:7a:52:3f:
7d:5d:5e:20:c1:6e:fa:9f:fd:7e:db:0c:24:12:02:
e7:56:ea:8d:67:33:1a:fd:97:83:ed:36:20:bc:da:
c0:e2:71:e0:67:66:1c:02:a2:31:f7:cc:c6:49:74:
52:cf:9b:04:10:f9:22:bf:e6:11:33:39:10:cf:85:
cb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6D:06:5B:2E:3E:22:7A:32:B8:57:74:F1:C6:8D:73:79:90:A1:6E
X509v3 Authority Key Identifier:
keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:28:3d:06:aa:59:80:0f:c3:82:88:7f:38:86:b2:a1:dd:d9:
84:80:84:8b:f4:f4:f9:c3:80:f1:ba:e8:b0:bf:7f:fd:06:fb:
0b:78:03:d6:a7:8c:2e:2f:4a:43:75:0f:f4:0c:ce:49:10:ea:
74:89:ad:14:9d:81:73:2e:d9:a2:cf:8f:07:58:0a:37:63:f3:
6d:c0:e2:d9:0e:bd:96:b2:7e:8d:4d:e6:fc:c3:6b:91:68:74:
85:77:e1:22:79:8e:39:d1:d5:99:ec:25:e6:80:0b:ac:2f:57:
0f:d1:50:fc:a0:44:36:45:49:95:33:1a:0a:1a:aa:50:f0:37:
27:44:35:86:ec:48:25:02:df:db:41:88:25:1c:f9:36:02:e2:
7f:9d:b1:6e:dd:31:55:ef:94:9f:93:7a:4f:07:0c:e4:34:53:
82:60:89:bd:c7:c2:9c:72:c1:e2:aa:77:05:4d:4a:bd:08:12:
f4:4b:fe:44:e9:e4:2a:85:82:6d:98:ba:bd:c2:bf:d7:f6:6c:
fd:d7:9f:38:52:29:6c:d1:0a:74:e2:2b:ed:aa:31:4d:15:ea:
34:55:34:86:ad:0f:38:63:fc:68:fe:db:e6:65:d1:3b:e3:60:
c8:f3:67:2f:9c:af:8e:3e:c4:b2:c6:48:d3:4c:e9:ca:09:da:
85:15:89:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:33 2025 by rpki-client