Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json)
Hash identifier: yGkWu944eWDVQzGZ+iygDL0UYSmdLsbwQfXCn+7KUCw=
Subject key identifier: 85:EE:09:0A:39:C1:69:BD:87:E9:31:F1:B3:BA:D7:9A:0C:AC:62:30
Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Certificate issuer: /CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Certificate serial: 0198D4DFED370194399A7F78714756087B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
Manifest number: 0597
Signing time: Sat 23 Aug 2025 03:01:41 +0000
Manifest this update: Sat 23 Aug 2025 03:01:41 +0000
Manifest next update: Sun 24 Aug 2025 03:01:41 +0000
Files and hashes: 1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: ZBKXb7RXIVnZnjcU64NhnsmtbKos1KzzYecUbWDwdgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:ed:37:01:94:39:9a:7f:78:71:47:56:08:7b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Validity
Not Before: Aug 23 03:01:41 2025 GMT
Not After : Aug 24 03:01:41 2025 GMT
Subject: CN=85ee090a39c169bd87e931f1b3bad79a0cac6230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:56:a2:bd:b5:cf:56:00:a3:61:29:fd:3d:
d5:14:23:30:b7:8b:a9:6d:d8:27:ea:3e:9a:e1:7d:
28:ae:f6:90:35:25:2c:c9:b6:2b:8b:b4:b5:39:75:
72:13:b2:80:14:22:92:d6:57:41:a5:5e:63:7b:73:
da:3d:c7:20:37:9a:61:0e:ca:9a:e4:44:1e:d8:5e:
88:b9:28:c8:6f:6d:15:b7:f5:c8:1c:24:95:df:36:
52:82:47:1c:ca:ea:cb:a0:63:cc:18:ae:2d:3f:7a:
eb:f2:da:b2:a1:47:dd:66:cd:68:af:4a:03:0f:57:
b4:98:bf:77:c6:2b:2b:80:51:04:a4:01:5f:5c:a0:
76:d3:de:29:9a:e8:22:85:61:1c:db:44:51:1d:b6:
f2:94:31:f0:7c:93:5d:da:9f:66:5c:45:9a:01:f6:
80:7c:04:fb:90:58:15:0e:f0:6e:e3:9d:16:68:4a:
91:f1:09:2a:fa:b6:44:e3:0e:e7:87:4d:6c:d6:5a:
4f:d4:e1:d0:80:32:af:5d:1e:43:17:c5:7f:e5:e4:
02:d0:cf:fc:71:3f:fe:7c:9b:78:56:69:6a:84:b4:
3b:c9:ae:72:85:c5:99:77:f7:c9:d6:cf:26:84:fe:
02:e0:69:7c:23:55:82:16:84:c0:99:d1:96:8f:c3:
9e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EE:09:0A:39:C1:69:BD:87:E9:31:F1:B3:BA:D7:9A:0C:AC:62:30
X509v3 Authority Key Identifier:
keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:48:78:11:5e:b6:6f:4e:cf:87:dc:30:f9:ea:6c:5e:35:ba:
76:98:a4:87:c0:88:24:54:86:4b:6a:a0:2c:ca:38:97:99:90:
5b:99:5c:3a:49:c6:f9:04:0e:45:4f:86:6d:7a:c2:13:65:c3:
a5:7d:22:41:30:b6:96:1e:17:7e:20:2c:e4:c4:be:6f:b7:16:
57:84:09:19:ff:73:60:ac:3d:17:b4:b3:d3:44:5d:ad:6f:f8:
0b:e1:c3:47:3a:0e:89:19:a2:1d:f5:e4:a3:87:ba:41:e2:df:
d0:93:23:b7:dd:bd:24:fb:e4:b2:f5:da:64:63:f2:86:e0:e9:
93:19:8e:77:84:c5:25:c6:1c:83:bb:b0:11:8d:26:4f:88:89:
9a:e7:b6:2d:79:a2:f1:42:b4:6c:55:84:bb:8b:d1:8d:4e:65:
33:40:14:ef:93:89:08:60:4c:90:b5:ff:7f:2e:da:72:b7:82:
b6:b6:89:e9:b4:58:19:63:d0:bf:b9:42:2d:a1:2b:51:e2:5a:
c2:a8:46:ed:b8:66:d2:80:a2:23:93:09:eb:dc:67:75:9d:4c:
72:18:18:c8:ee:c3:59:0e:3a:84:66:32:21:87:62:ce:5f:56:
d8:5a:99:a6:5a:35:15:75:91:8c:9e:b9:56:aa:27:44:c4:77:
e3:4d:78:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:26 2025 by rpki-client