Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
File: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json)
Hash identifier: Qgl8iOacAp09TTMylOQugkIPwL8Cg7+gqtwKS7juZC4=
Subject key identifier: 36:BC:65:C8:3A:D1:5A:9F:95:C2:6F:ED:36:B6:FD:24:E6:14:5B:C9
Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
Certificate issuer: /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Certificate serial: 0198D54DDD44D932947ACC22C64C3C73D586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
Manifest number: 12EB
Signing time: Sat 23 Aug 2025 05:01:46 +0000
Manifest this update: Sat 23 Aug 2025 05:01:46 +0000
Manifest next update: Sun 24 Aug 2025 05:01:46 +0000
Files and hashes: 1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: rZIFfI9gcc3fKlC7frC2QaMYtsT3M8WMoW9ZH2ZE2MU=)
2: T5P1uF0UtYOhlxgIVxyPu_E24ZA.roa (hash: D5TZHibqLUW4oTHKSJ4ExAAZayO10mFfTENppWTtXa0=)
3: fEMD1Qw1-K78TFax9wsXAdNUiZc.roa (hash: zI5YMBWWK0MgL2oV8W3UKZtv3pFv7wUr61mj7J1xZ8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:dd:44:d9:32:94:7a:cc:22:c6:4c:3c:73:d5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Validity
Not Before: Aug 23 05:01:46 2025 GMT
Not After : Aug 24 05:01:46 2025 GMT
Subject: CN=36bc65c83ad15a9f95c26fed36b6fd24e6145bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:f9:3c:b6:05:ec:cf:9d:bf:88:47:33:ea:
45:0e:3d:0e:c8:f9:65:62:2a:f5:90:f7:e8:a1:1e:
3d:35:7e:9c:6c:0c:ff:4e:29:8b:05:b4:9e:04:aa:
26:c6:6b:e2:99:05:ca:31:bc:d6:83:65:40:13:8b:
3f:97:e8:e8:51:84:46:bf:f1:e5:8f:12:b0:a8:e4:
30:33:f4:4b:c8:09:84:43:be:94:a3:f2:a5:04:b9:
e1:9b:ce:6b:86:f4:55:33:17:d3:14:a9:f1:06:62:
a4:cd:4b:4e:ac:08:a2:5b:a4:86:9b:dd:a9:32:dc:
dd:89:f6:85:a6:4a:93:e7:60:88:cc:40:8e:ce:9b:
b5:f7:e6:b9:9d:7b:8b:93:f1:b1:cc:9f:42:f0:ee:
e9:37:e5:1c:9a:07:ff:8c:bf:ce:80:66:93:fb:7b:
63:4b:d2:32:4f:68:fc:35:c6:ce:bf:10:45:0a:f5:
17:eb:01:ec:2e:53:d9:bf:8d:8e:1b:b9:51:09:36:
4a:5e:47:d9:3a:37:86:60:06:45:15:7d:56:ea:55:
08:6b:5a:f4:7d:ab:22:58:15:60:5c:60:48:d7:90:
01:95:3b:d5:2a:98:e2:c2:11:76:9e:c5:92:5d:dd:
4e:e5:11:3a:a9:a4:4b:da:c0:f3:50:71:b1:6d:8d:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BC:65:C8:3A:D1:5A:9F:95:C2:6F:ED:36:B6:FD:24:E6:14:5B:C9
X509v3 Authority Key Identifier:
keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:16:b4:78:59:ca:ab:06:db:b4:65:53:ce:e1:fa:49:bd:58:
85:e9:2f:76:8f:dc:d4:e2:ea:2d:30:eb:a7:e3:3d:53:95:9b:
28:f9:91:0e:d3:58:67:69:d8:1d:aa:a7:65:f0:8c:84:5d:14:
6d:5e:68:48:07:98:7c:2a:c8:65:7d:dc:99:85:91:74:07:c0:
39:65:50:89:01:33:cd:1f:27:40:17:92:cf:89:a3:6a:a0:fb:
2f:a8:ff:9f:e8:08:7d:9a:0c:09:8a:d0:b4:86:ac:e8:3a:f4:
4a:11:30:5b:5b:96:2d:9c:98:b9:51:17:b9:92:79:0a:49:96:
51:85:11:21:ca:af:e9:37:ec:c7:69:b0:bb:65:9b:ee:2b:2b:
ea:62:de:fb:99:bf:33:ea:26:40:a9:44:36:32:eb:3c:92:37:
00:43:3c:a3:f9:62:54:7f:10:76:60:99:9d:aa:8e:42:38:47:
77:eb:f4:18:69:28:3e:6c:46:85:bb:54:f2:56:c6:ae:3f:6f:
b9:d7:7c:35:f5:be:97:f4:a0:dc:fa:9f:dd:05:92:c8:79:c7:
b8:28:76:44:1a:f2:c8:33:56:e7:94:34:ad:33:a4:79:19:86:
65:2e:f6:e2:f8:a8:fd:45:0f:74:08:fb:bd:23:9b:1e:48:e1:
ba:90:5d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:39:37 2025 by rpki-client