Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
File: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft (raw, json)
Hash identifier: QXb4Sz78DE+8QFbwLYjt8mhV1Z7Y5UKeutO3UkOy7xM=
Subject key identifier: 55:25:98:7B:9A:C7:DD:6E:8D:E5:18:AD:F0:F1:06:7E:B5:E7:C3:55
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial: 0198D4048D5889B4EF4BD4829CEC3C16022E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
Manifest number: 016A
Signing time: Fri 22 Aug 2025 23:02:04 +0000
Manifest this update: Fri 22 Aug 2025 23:02:04 +0000
Manifest next update: Sat 23 Aug 2025 23:02:04 +0000
Files and hashes: 1: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl (hash: 9bapUVJzh9E0ev6SVEZYDs73RccD6OO8NKYEYD1WXMU=)
2: Mhhz4wUnWbhungV9qmdIiiClbC4.roa (hash: vs++Lho+ybbPqiNcZp7StywgPzEvRC+QjSZW2g6/U6I=)
3: Ri1W5hGdOA2IQn0eWHH7b3-bfws.roa (hash: P/qvYKsl5b2W4hd0B25iig5CdZGpWYsMZEWjWtHjTyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:8d:58:89:b4:ef:4b:d4:82:9c:ec:3c:16:02:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Validity
Not Before: Aug 22 23:02:04 2025 GMT
Not After : Aug 23 23:02:04 2025 GMT
Subject: CN=5525987b9ac7dd6e8de518adf0f1067eb5e7c355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9f:a8:e6:a4:36:b0:be:36:76:b1:3d:ab:ff:
66:c1:c4:c0:ff:bb:0b:02:76:2a:ca:f6:9f:b6:6c:
a2:cd:d7:6b:2b:ce:1f:06:c0:6e:3b:2c:9d:f2:fe:
a6:57:15:ed:d9:82:3a:c9:d1:9a:8b:b0:d6:44:4a:
ed:d1:56:1f:23:55:6c:02:a7:e5:e8:65:70:89:4d:
2f:60:83:74:0b:73:cb:90:12:76:71:ba:58:a7:57:
71:3e:59:a2:3b:d6:69:b7:73:78:46:ac:32:e5:8b:
4e:cb:ec:1e:eb:ed:86:c7:0e:d6:74:65:7c:3d:5a:
f2:10:3b:56:f9:ec:40:17:ce:90:17:de:19:76:c9:
ad:55:a9:50:27:60:6a:2b:51:2b:c6:11:fd:a8:41:
6c:ed:a0:fe:0b:83:cb:c3:17:f5:da:92:f9:57:d7:
ab:6b:4f:3b:35:f7:95:05:5b:ba:d7:d9:73:a4:57:
bd:d8:3e:8f:86:15:08:26:c0:42:72:8b:85:b5:f2:
94:5e:44:05:09:5e:3e:cd:f6:fe:b9:42:e4:3a:ba:
64:b8:01:f6:9a:d5:99:69:6e:68:42:48:75:f8:07:
c5:5f:e1:9c:fa:a2:88:24:23:74:1d:42:83:3b:7f:
84:e1:53:4d:62:8c:7e:65:7b:1e:99:54:d2:17:75:
d2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:25:98:7B:9A:C7:DD:6E:8D:E5:18:AD:F0:F1:06:7E:B5:E7:C3:55
X509v3 Authority Key Identifier:
keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:12:14:bd:02:39:ad:7f:68:e7:6f:59:54:9b:2a:67:63:e6:
7b:4c:ae:5a:99:8f:bb:ad:9f:11:34:b5:03:39:24:c8:53:6d:
a5:97:70:f1:b5:70:28:13:e9:b3:e8:61:1a:e6:3b:f1:cc:25:
df:96:24:64:6b:d0:fe:f3:8a:53:39:93:fb:f3:8c:65:2f:c5:
f3:fa:34:d5:b0:e7:05:ac:e1:68:43:22:ac:e2:a5:8d:91:1d:
68:c4:37:4d:78:a6:dc:c5:34:8e:4d:f5:20:67:8b:1c:9e:35:
5e:0e:06:5a:27:d2:eb:80:9e:c3:a4:2c:7c:b4:4a:33:ab:bb:
f9:99:bd:b5:e9:c2:20:3d:63:52:6f:d5:6a:9a:97:ac:ac:66:
c1:04:d1:7f:59:71:c8:1f:0a:b2:de:0e:27:84:59:f7:f0:80:
74:a6:36:d0:e0:42:3b:f4:2c:69:c5:18:8e:fc:dc:fa:13:08:
67:65:34:3f:5d:f1:ca:31:c8:44:bc:58:26:43:34:00:00:03:
af:1a:1e:3d:74:5c:66:06:d3:f5:8c:d0:8b:5e:5e:c9:ce:76:
c2:43:de:4c:16:28:f7:a9:5d:fc:2c:11:8e:68:39:2a:09:17:
68:71:a4:b2:97:90:22:39:a2:78:00:db:cf:23:23:2c:1c:c1:
3e:17:66:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:15 2025 by rpki-client