Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
File: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft (raw, json)
Hash identifier: sz8kAfzsT5ShNBVl8ZqPdqG/3Fc495y4c7/s+62yS2U=
Subject key identifier: 77:5F:5B:75:BC:88:68:ED:81:AA:07:4B:A0:9B:57:F3:0B:69:4D:82
Authority key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
Certificate issuer: /CN=fa3c481607619c835d09f2471d976d7cf74a0439
Certificate serial: 0198D5835951C082BFE48EEEC1ACC5F1CA30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
Manifest number: 0979
Signing time: Sat 23 Aug 2025 06:00:11 +0000
Manifest this update: Sat 23 Aug 2025 06:00:11 +0000
Manifest next update: Sun 24 Aug 2025 06:00:11 +0000
Files and hashes: 1: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl (hash: dxM091Z0oq0Q2MY+6sLqR65zqI3bKiHsxaFVJC+qHcY=)
2: Sm1L2uD9xe6VKth3NCE80Tv0dS4.roa (hash: 4pEKUYq0mI20y4yprrQN9bkk++T0cMvg0WwPL7Akx3E=)
3: wE4iXQHrpihOXjgvME7qpP1G1M8.roa (hash: 5SJHRAX4MIESmj0+ywOG6OpEbcFrbWg8slbXKt2TqRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:59:51:c0:82:bf:e4:8e:ee:c1:ac:c5:f1:ca:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3c481607619c835d09f2471d976d7cf74a0439
Validity
Not Before: Aug 23 06:00:11 2025 GMT
Not After : Aug 24 06:00:11 2025 GMT
Subject: CN=775f5b75bc8868ed81aa074ba09b57f30b694d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2f:d5:d9:55:c4:3b:66:a8:9b:51:87:1d:71:
ea:62:2d:f1:bb:e3:60:03:ee:e1:cc:38:46:50:56:
e9:73:ae:5f:89:e4:f1:00:b0:5e:79:27:8c:f3:6a:
1c:ae:d4:ea:a8:86:5a:27:b6:4b:d0:2a:0d:3f:e6:
a5:3c:72:91:1e:85:b0:d1:fc:93:07:c3:c7:2a:22:
10:c3:5b:19:a7:f0:c8:6e:7a:a4:05:dd:8a:5b:3f:
6a:12:1c:f7:f4:1a:36:8d:60:ff:5a:74:ea:31:68:
30:0e:03:91:94:b2:76:2f:41:2a:0f:2e:d1:88:43:
5b:65:10:82:78:f2:16:06:51:32:42:75:c1:c4:7f:
a3:be:85:fc:29:eb:65:bd:93:9e:85:ad:b8:b2:83:
ec:41:20:c1:98:32:75:9b:e8:c0:78:d4:b1:86:94:
30:5d:94:ae:8e:71:51:4e:15:bb:32:5f:58:42:14:
93:d3:6d:3a:e3:66:5c:a0:3b:ce:ea:91:c0:da:2b:
75:9d:78:02:16:dc:f3:ec:21:df:18:0d:e3:0b:3f:
a0:e2:fa:0a:de:2c:75:bb:be:ab:90:b2:a9:d0:ec:
d8:b7:e0:cf:8e:95:e3:39:c9:95:79:57:68:33:de:
0f:58:4d:cb:9b:04:8e:89:81:8e:f4:3c:79:f7:61:
74:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5F:5B:75:BC:88:68:ED:81:AA:07:4B:A0:9B:57:F3:0B:69:4D:82
X509v3 Authority Key Identifier:
keyid:FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5a:81:b7:14:d2:f0:2d:8d:a2:d0:ac:6a:32:b5:27:02:3a:
01:ac:5f:80:7f:18:96:32:5e:bf:6a:0b:4e:04:b7:ae:92:6b:
ed:05:9b:ea:04:26:d4:95:eb:4d:33:2a:b4:8f:2e:2d:06:6c:
ee:af:65:78:44:bd:45:2d:ea:5d:db:59:f7:9b:73:0b:c0:2e:
35:c6:09:a7:46:74:a4:cc:f4:f8:53:7a:ae:f0:d1:fc:df:c8:
ed:0a:ad:b0:1e:f4:35:c1:b6:e4:a2:52:3e:1e:59:5a:bf:8b:
ca:5c:e3:2a:a5:42:6b:94:80:48:37:5b:a6:57:7e:ec:30:a3:
b8:f4:37:1c:67:3b:f1:2f:3d:b2:f7:d5:9f:0f:a9:26:52:d8:
64:c0:cf:dd:14:de:d2:14:34:18:00:0e:3f:fe:18:d9:aa:2c:
77:08:8a:03:15:91:36:3e:f9:5a:a9:17:b8:fc:7e:5f:08:db:
a2:25:08:38:96:c5:9e:04:2f:2d:32:dc:46:b2:07:a6:b9:9f:
52:46:43:2e:32:7f:11:5f:dd:27:aa:8e:f7:5f:c8:b8:4c:ed:
9c:48:ce:1a:e1:03:55:87:e7:88:46:06:b7:d9:f4:44:4a:51:
39:66:3b:47:3c:63:ba:d7:46:5f:d7:89:38:6a:de:27:3b:27:
54:ea:46:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:22:57 2025 by rpki-client