Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
File: 1-6DtkuyUMh3LIZ03842QfhgyRL0.mft (raw, json)
Hash identifier: 5gpXLZEOgO7Fd8xltYCsxyziJcGOKCr13WBp74wSiTE=
Subject key identifier: 57:B0:61:9A:CE:39:5B:B0:7F:67:A6:80:73:09:FE:F1:9F:51:D1:38
Authority key identifier: FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
Certificate issuer: /CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Certificate serial: 0198D8BD137A2A747723473BD3D10CCDFCF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
Manifest number: 0A0B
Signing time: Sat 23 Aug 2025 21:02:06 +0000
Manifest this update: Sat 23 Aug 2025 21:02:06 +0000
Manifest next update: Sun 24 Aug 2025 21:02:06 +0000
Files and hashes: 1: 1-6DtkuyUMh3LIZ03842QfhgyRL0.crl (hash: Vo94eCuZvsEf5kpybPH3GI8TGeFa6ZFzlVUfkwET4eo=)
2: 1s70h6r87L-IulVsz6h8zyFXb_Q.roa (hash: 5H/5j8LaoLq/mqGaGFCi4+VAwjIOpu8grnJTKJtYod4=)
3: sEXfZ_frVlYD_mxkBMmTSShT4Aw.roa (hash: q9q1zeZ/+pc1h+hiJuULLx4217R4jnkBQRFKylMHrZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:13:7a:2a:74:77:23:47:3b:d3:d1:0c:cd:fc:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Validity
Not Before: Aug 23 21:02:06 2025 GMT
Not After : Aug 24 21:02:06 2025 GMT
Subject: CN=57b0619ace395bb07f67a6807309fef19f51d138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8b:1f:d8:8b:96:8d:74:64:2d:2b:b8:4c:16:
bd:25:5e:a3:e1:b0:85:e1:de:9b:47:70:0f:c6:5a:
85:df:a2:5b:68:c7:84:40:d6:95:3b:ea:fe:bc:c7:
46:a5:28:1f:06:6a:ca:41:29:f6:c3:00:c4:dc:e5:
52:a3:d5:43:85:df:f2:c3:61:b0:e1:ee:72:84:69:
b5:22:21:b0:29:02:05:bb:e9:62:72:08:22:bc:cc:
56:aa:02:20:f6:93:30:f2:74:27:d6:d2:35:2b:d8:
0e:0d:dc:19:6d:21:54:66:5c:8e:ff:c9:1f:e2:65:
d4:eb:73:50:37:b8:a2:f8:a6:01:bb:57:81:da:fc:
fa:18:c9:f8:8a:02:fb:26:6f:7c:4c:c0:1f:4d:f1:
87:a9:e1:07:ad:a4:17:60:df:87:cb:fe:ea:0b:d9:
ed:bb:a2:93:49:d8:70:b7:2d:71:a1:e0:49:05:4d:
a6:06:15:b8:78:ad:04:0f:99:ab:41:fd:6e:34:a5:
f1:cf:66:8c:3a:b7:7b:68:24:34:05:60:bd:6e:aa:
b8:05:72:08:5b:01:17:4d:30:66:62:f7:4c:ad:2b:
2e:47:ec:90:f2:29:59:23:fc:66:b5:de:7d:35:5f:
cf:95:08:72:fc:67:d7:91:e5:72:32:aa:0c:74:77:
da:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B0:61:9A:CE:39:5B:B0:7F:67:A6:80:73:09:FE:F1:9F:51:D1:38
X509v3 Authority Key Identifier:
keyid:FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:bc:31:e2:83:98:3f:e9:a7:81:96:7b:bf:14:0b:eb:26:c5:
3a:6a:40:c9:28:ff:9a:1c:c2:24:1c:cb:44:2f:2c:f4:91:4f:
40:31:94:ab:62:cb:63:7b:a8:db:ab:fe:d6:5d:ce:13:1e:62:
48:0c:62:99:1e:f5:cc:1e:83:63:c2:bc:6c:b3:2e:1f:17:7f:
df:4d:4f:6c:09:81:c6:ac:3c:7b:78:0a:f3:84:0d:e8:4e:6b:
a0:b5:5c:03:18:56:88:80:05:54:b1:39:10:9d:2a:61:b2:da:
ad:47:18:27:ea:59:96:f4:7c:a4:ea:ec:f7:a4:4f:05:2a:eb:
c1:5c:46:f2:e9:51:61:cc:9f:61:0c:94:97:f1:c9:6c:54:fd:
34:ad:43:01:14:36:6d:50:73:0c:b9:31:1c:c8:21:1d:d6:f8:
93:e4:a9:66:ca:0e:a7:1d:f5:b7:f5:b5:96:a0:41:d9:cc:24:
ba:3f:1c:3e:ab:99:5b:8b:2a:54:99:7b:52:fe:ac:53:93:32:
f8:92:0d:98:92:ac:88:98:5f:96:ea:85:9b:ec:ee:79:eb:4d:
64:2d:81:16:57:f6:f6:c4:ae:e5:e5:cb:cb:0d:31:03:ac:b3:
a6:8a:ac:a2:ae:50:c8:3d:b8:ea:37:43:48:6b:6d:9a:f0:fb:
e8:31:dc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:08:08 2025 by rpki-client