Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
File: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json)
Hash identifier: FI28yIXEbNcM58kgTYid7OUzAkpGVYUBfdEscZCYLsU=
Subject key identifier: DF:7B:F3:F2:76:25:4D:8C:D1:1F:BE:7A:F0:6C:0B:06:DB:01:15:90
Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
Certificate issuer: /CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Certificate serial: 0198D7E1210912180410984E07DF96752D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
Manifest number: 0B83
Signing time: Sat 23 Aug 2025 17:01:52 +0000
Manifest this update: Sat 23 Aug 2025 17:01:52 +0000
Manifest next update: Sun 24 Aug 2025 17:01:52 +0000
Files and hashes: 1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: NIxNEIX+FG59VwFTYxQkzYaRMTMasQ7GtntR7hQ/7TY=)
2: 17Ijw7DnA-ky4M-qBTdOY4I7ec4.roa (hash: iu+mQ1jbZcSsyxSnbAMCeHovGJfrloyLqIxmClTwTuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:21:09:12:18:04:10:98:4e:07:df:96:75:2d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Validity
Not Before: Aug 23 17:01:52 2025 GMT
Not After : Aug 24 17:01:52 2025 GMT
Subject: CN=df7bf3f276254d8cd11fbe7af06c0b06db011590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8f:64:3a:81:70:cd:87:4e:dc:d7:7f:1a:b5:
c4:15:13:94:9d:4f:f7:a1:d7:e0:93:d0:cf:89:90:
c2:f7:42:39:b5:2b:29:af:5d:70:eb:ad:67:06:89:
26:56:d5:66:36:2d:ad:7c:16:3f:3f:d1:d1:aa:31:
6a:ae:de:7c:91:44:54:b7:28:ec:fa:b0:d1:65:00:
e4:f6:1b:83:9b:81:5c:c7:6c:07:58:65:7d:f5:4f:
cb:78:c9:72:71:65:f6:e0:3d:5b:8c:88:64:a7:47:
20:66:e2:2d:15:24:9f:e9:f2:be:00:7c:3c:63:f9:
e3:a0:64:73:65:f2:3f:54:df:6f:c1:22:0a:52:0e:
31:bf:d4:a3:d2:93:d4:34:41:51:06:f3:56:92:ac:
03:c1:f7:5b:5e:12:60:23:67:9f:ff:60:07:a4:54:
72:f1:ed:b7:19:4c:cd:25:e7:1b:e3:3d:b6:9b:e3:
48:17:a4:ff:52:a9:6f:36:04:54:49:4d:47:42:64:
d5:58:72:8f:97:2e:e9:42:6c:0c:f2:fc:05:76:f3:
dc:6a:da:f1:ad:a2:a7:b5:1c:5c:44:a7:7c:76:7c:
00:45:eb:bf:9d:18:25:10:07:bb:0b:c0:e5:6f:ad:
98:ba:80:0c:4c:21:0a:c2:4c:61:d4:20:9f:d9:33:
ca:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7B:F3:F2:76:25:4D:8C:D1:1F:BE:7A:F0:6C:0B:06:DB:01:15:90
X509v3 Authority Key Identifier:
keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:98:c0:9a:4e:9b:32:aa:01:ae:1f:df:2b:98:aa:95:38:64:
e0:a4:82:95:e3:b4:60:9c:8c:32:1e:77:62:78:73:21:9f:a6:
c0:42:10:ca:ce:16:3c:c4:bf:d9:71:47:39:ae:10:6e:29:e4:
50:87:51:46:af:13:66:3d:a7:ba:13:59:3f:39:35:8a:6e:de:
d6:54:6b:5a:5b:70:bc:ea:7e:e7:85:ce:10:a1:90:61:b9:7e:
51:61:a0:c9:87:b7:b6:b2:6a:eb:f2:19:0a:a8:dd:f3:1e:90:
aa:aa:45:8f:4a:00:4a:c9:99:67:14:5f:8a:32:67:04:ba:4d:
ac:76:9a:f8:3b:fb:b3:5f:3d:2f:f1:c4:b6:ad:7e:48:95:3c:
3c:fa:91:54:c4:1d:e9:71:c1:20:1b:91:2a:0e:b0:9f:f7:83:
3b:1e:58:b9:0e:ed:38:9a:2b:c8:d3:d1:fc:f7:2d:2b:55:92:
8a:8b:f8:78:ba:42:1b:2c:ea:50:b9:a2:61:ff:0b:ae:ec:e9:
72:55:d3:32:8d:db:21:22:79:ad:a1:5a:72:fe:44:44:3b:14:
7d:af:af:68:60:34:df:c7:5e:b4:65:ac:84:94:1d:b8:e9:ea:
3d:d5:b4:d9:42:e1:73:68:ed:3e:8d:95:55:c1:82:9c:34:d9:
cb:3e:71:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:36:40 2025 by rpki-client