Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier: IYGysV3jLK31aWpP826Cis/pZetQuTj2gtinHlewync=
Subject key identifier: 71:21:A0:7F:05:94:F5:43:7E:65:4F:D2:41:A2:45:19:66:3A:28:07
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial: 0198D4A7FD04722367F85C7272FFDAA7FB3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number: 0CEB
Signing time: Sat 23 Aug 2025 02:00:35 +0000
Manifest this update: Sat 23 Aug 2025 02:00:35 +0000
Manifest next update: Sun 24 Aug 2025 02:00:35 +0000
Files and hashes: 1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: yGHbpNGC3BBsdklqQuxru8I7Gy9I2qF5toCGEIvmJGw=)
2: QFnY02YmfQGJ4URcdKc-UJCZjYo.roa (hash: cz0+d02fJHBBngQvBEuS7ucPucnAX57nkrsYbr2NfQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:fd:04:72:23:67:f8:5c:72:72:ff:da:a7:fb:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Validity
Not Before: Aug 23 02:00:35 2025 GMT
Not After : Aug 24 02:00:35 2025 GMT
Subject: CN=7121a07f0594f5437e654fd241a24519663a2807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:69:1c:52:6b:8b:dc:32:8a:74:c0:04:41:
1d:a4:90:40:e1:a7:0f:be:d4:72:69:99:0f:d6:9f:
45:7a:1d:1e:48:9e:9d:00:80:0b:fe:80:84:be:20:
cb:ed:b4:40:2b:f7:6c:b4:25:01:23:4b:ef:f2:84:
d3:bb:fc:5b:43:8f:3b:97:ac:4d:72:e8:62:86:5f:
ef:79:fd:e8:7d:2a:9e:d9:3e:e2:e8:88:b0:79:9b:
c6:ed:98:9c:d7:60:dc:94:97:98:7e:e5:17:01:f5:
0d:66:fc:8b:d1:3b:45:f5:ca:b5:43:a5:a8:02:6d:
18:a7:17:ff:81:89:f1:68:a7:4e:47:2a:89:45:39:
ae:53:1c:78:ee:1e:e7:d8:16:6f:41:47:66:44:17:
1d:6a:9e:a3:c1:e5:01:ef:59:d5:71:03:4f:64:0a:
36:ce:ee:a2:fc:ff:cf:5d:21:16:e4:91:cc:31:90:
8e:72:d0:b9:f0:98:62:1e:cc:20:5e:1b:01:98:7c:
4e:b4:11:e9:73:a7:ba:18:0b:49:c5:71:74:f7:98:
99:f4:b4:81:87:f9:4c:5c:cb:ad:d2:0c:b1:e1:38:
4f:45:19:3b:86:fb:76:a1:c0:3e:a0:a4:a0:65:8f:
44:ef:67:40:ac:2a:36:a5:71:4c:be:b2:9d:2f:5f:
84:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:21:A0:7F:05:94:F5:43:7E:65:4F:D2:41:A2:45:19:66:3A:28:07
X509v3 Authority Key Identifier:
keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:53:d7:c3:57:20:41:ae:76:7b:e1:95:f0:14:38:f8:39:fa:
c7:d8:06:8d:e4:50:dd:02:d5:2b:4b:79:b3:3d:a6:8e:99:dc:
1f:d6:be:2a:d1:12:51:00:93:9b:39:c6:b1:f8:9e:c7:d6:75:
63:d5:1e:c7:07:fc:d4:29:23:38:fb:9c:ec:24:24:af:eb:dc:
6c:32:67:d2:37:28:a1:2d:17:b9:60:57:a0:ec:40:fb:de:5a:
b4:86:73:61:7b:b1:dd:dd:07:6c:3b:5a:87:fe:86:43:d7:b0:
3d:9e:3b:a3:ef:68:2d:51:a2:49:fe:31:4e:55:5e:6b:23:ba:
38:ea:03:77:bc:cb:e5:fb:64:44:16:23:03:87:e5:01:ef:49:
44:3c:a1:aa:d7:90:df:4a:f5:00:3a:24:05:79:fc:ba:71:84:
b6:58:8a:fe:91:79:a3:9e:be:db:00:e4:ba:e0:9d:fb:0a:63:
f9:c1:4c:92:71:c2:15:89:f0:2c:1d:ca:ca:ce:66:cc:36:ed:
c8:a9:cc:f7:b9:52:2b:37:b2:ee:77:e8:5f:76:9d:b4:84:3b:
bd:85:4e:82:38:34:01:12:b1:1e:7a:b4:b5:00:48:67:6a:0c:
65:f5:4d:35:59:c7:ec:2f:27:09:3d:e6:b3:cf:cd:8d:82:f5:
d8:54:52:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:23 2025 by rpki-client