Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
File: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json)
Hash identifier: XtHHITSYZWDe7AxM/Nz7tG391yEmICBHKcyd37STdhA=
Subject key identifier: 98:28:59:A0:77:72:7C:7B:4A:B6:B5:18:11:04:F4:71:15:1B:F1:47
Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
Certificate issuer: /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Certificate serial: 0199FAD7BCA12C584B8C48553F7FC6615143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
Manifest number: 1383
Signing time: Sun 19 Oct 2025 05:01:06 +0000
Manifest this update: Sun 19 Oct 2025 05:01:06 +0000
Manifest next update: Mon 20 Oct 2025 05:01:06 +0000
Files and hashes: 1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: 7rbH1HZKcSyjRQxxgHVen8z1gOIIYNaoKIbpW24pg4g=)
2: T5P1uF0UtYOhlxgIVxyPu_E24ZA.roa (hash: D5TZHibqLUW4oTHKSJ4ExAAZayO10mFfTENppWTtXa0=)
3: fEMD1Qw1-K78TFax9wsXAdNUiZc.roa (hash: zI5YMBWWK0MgL2oV8W3UKZtv3pFv7wUr61mj7J1xZ8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:bc:a1:2c:58:4b:8c:48:55:3f:7f:c6:61:51:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Validity
Not Before: Oct 19 05:01:06 2025 GMT
Not After : Oct 20 05:01:06 2025 GMT
Subject: CN=982859a077727c7b4ab6b5181104f471151bf147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:aa:d2:7b:2e:b0:48:13:1a:f9:49:5d:96:4a:
58:e9:c6:a1:e6:d6:db:a6:f0:25:39:2c:73:8b:1e:
1a:59:96:34:79:a4:b3:71:89:23:e7:73:93:db:ff:
2b:2b:9e:d7:dc:2d:fa:1c:d1:1f:74:28:a9:cf:bd:
7f:9c:c9:b3:bc:1c:f6:a9:24:92:99:89:26:5d:7f:
74:fc:61:b3:f3:c6:89:c6:9a:34:9c:92:14:bc:62:
19:85:97:d2:3c:50:7c:2c:53:42:6a:bd:9c:29:b5:
35:19:08:ff:e0:e4:6f:79:67:d9:a8:48:7d:6d:bd:
72:06:ca:ff:68:ea:e3:f5:e9:14:70:9e:ac:b0:10:
88:ec:83:01:6f:f6:48:1f:28:be:e6:36:d5:25:8f:
f5:a6:35:85:d5:9c:42:5d:47:d4:43:24:ab:4c:60:
40:85:98:65:64:8a:3a:91:94:b3:b5:a6:88:5e:01:
b0:f4:b5:6a:1c:a7:62:69:0c:e2:b8:d8:6c:85:7f:
0e:7e:b8:05:5e:7c:2d:2c:ee:2b:0e:18:7e:c2:66:
42:0f:fd:c2:4d:73:3b:65:a8:fa:aa:8e:cb:09:b3:
13:90:46:8b:9f:62:dc:80:7d:7a:53:8c:5a:1d:1f:
eb:b0:5c:ce:62:d9:5e:c5:d9:95:9c:04:d3:ff:4e:
87:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:28:59:A0:77:72:7C:7B:4A:B6:B5:18:11:04:F4:71:15:1B:F1:47
X509v3 Authority Key Identifier:
keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1a:be:0f:69:2c:dc:61:ba:70:5d:0c:83:23:0d:50:ce:c1:
dc:2f:de:e7:d8:fb:8c:4a:8c:55:5b:95:5c:ad:b2:35:70:d3:
92:ef:37:ee:63:d7:c4:a4:1b:c2:d3:cb:3c:2f:57:88:8c:80:
52:b9:d8:ae:ff:30:8d:22:6d:db:a5:b2:ed:b5:6a:aa:b0:ef:
70:e4:20:fd:c3:12:7d:9e:61:99:73:9d:8e:ff:90:df:97:dc:
9d:ff:ed:f1:4f:01:3c:9d:64:d7:63:18:ea:ab:df:81:a6:41:
55:18:30:fa:cf:fb:43:8a:84:f6:22:a6:ad:63:20:f9:4b:0c:
4d:96:47:77:1c:7f:5e:83:39:89:1c:5d:b6:bd:17:91:de:63:
79:24:fa:24:e8:cf:40:a3:85:a1:99:80:ae:e2:ba:9c:2f:20:
51:b2:d9:05:d1:e6:7b:8f:1f:22:a6:be:dd:16:c4:2b:53:a2:
a3:56:cf:12:cd:7b:a2:e7:e7:2a:56:6c:5c:bb:52:85:3c:c8:
cf:15:99:1f:2f:2f:e6:34:62:75:9b:65:23:85:78:1c:00:84:
a4:68:a2:fd:3d:6e:6e:8d:07:f0:91:96:70:6f:c5:b9:c6:a0:
92:ed:f0:c4:d1:4d:97:99:33:19:0e:df:a8:fd:56:2d:c2:e4:
ce:a0:6a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:21 2025 by rpki-client