Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json)
Hash identifier: S9axvblS/rLjgmqDsuhbM7VUCGwxEQcALSfmGbpMuNw=
Subject key identifier: A7:35:1D:49:74:A0:33:E5:CC:7B:3C:0C:EB:93:3F:EB:41:59:1B:DE
Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c
Certificate serial: 0198D698457318A01A0347D9DA233BC07379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
Manifest number: 062B
Signing time: Sat 23 Aug 2025 11:02:40 +0000
Manifest this update: Sat 23 Aug 2025 11:02:40 +0000
Manifest next update: Sun 24 Aug 2025 11:02:40 +0000
Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: 7Q6h+H9OP+PnbTtaH7qjekrtLS9iDr5gekJ66BIZxrE=)
2: nK4fLsZ-CNNohZUItb4se5mVTks.roa (hash: E8CbmlBbMfwFFllt9Np43WKWYkKbRui+TW9xF2TYMh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:45:73:18:a0:1a:03:47:d9:da:23:3b:c0:73:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c
Validity
Not Before: Aug 23 11:02:40 2025 GMT
Not After : Aug 24 11:02:40 2025 GMT
Subject: CN=a7351d4974a033e5cc7b3c0ceb933feb41591bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b7:bf:2d:d9:b5:13:37:1c:36:6c:89:e7:8a:
e9:75:9d:85:56:89:12:b4:94:45:fe:79:11:93:48:
df:f6:b3:de:56:7c:01:19:d3:bf:5b:14:8f:64:11:
dd:11:45:35:21:30:e8:e5:c6:c8:10:4b:94:ca:64:
0b:f8:d7:1e:2a:82:91:36:7f:7a:12:9c:76:ad:0a:
94:ae:8c:f4:ff:09:2f:f1:19:97:3a:04:53:57:54:
2f:2b:c4:ab:dc:43:c8:b6:46:78:a7:b5:7a:00:34:
9d:64:b9:81:53:43:73:04:0a:2a:66:38:da:38:a8:
47:a1:f1:d7:17:2a:96:e8:a7:de:31:96:07:21:3b:
d1:ac:b6:56:59:30:46:86:fe:d4:a8:58:68:6f:b2:
6e:6f:bf:05:ca:a0:86:c5:b1:56:90:fb:16:cb:b2:
5f:a2:a0:2e:d0:59:06:b2:ce:fe:01:61:92:43:2f:
4d:1e:06:7a:dd:54:05:09:23:39:be:5f:7a:48:5f:
00:b2:c1:d3:e9:4a:df:1f:6f:a2:5c:b1:ba:84:51:
93:43:c3:ce:4f:d9:a4:9e:0a:17:47:f5:16:d5:0a:
e8:55:a9:96:d8:f3:88:a4:f8:1c:0c:e7:c0:cc:14:
a7:c6:80:ae:96:bb:9c:f7:22:71:ac:cc:32:60:5d:
c7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:35:1D:49:74:A0:33:E5:CC:7B:3C:0C:EB:93:3F:EB:41:59:1B:DE
X509v3 Authority Key Identifier:
keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:01:41:6f:22:1c:a9:36:67:72:20:0b:94:77:af:c0:db:5d:
09:29:d6:3a:0c:ad:29:59:84:cd:ca:77:a7:09:af:f1:22:8a:
9f:83:4e:15:63:79:39:ff:0a:e5:23:81:e8:be:63:b8:33:ec:
06:f4:81:34:86:60:71:a1:ba:66:69:f8:b5:59:8b:31:ce:26:
45:50:61:8a:77:a6:4b:6e:c9:c2:ea:3c:37:f9:2c:c0:c8:7e:
31:f4:63:80:cb:aa:d3:e2:cd:57:0c:6c:f2:ab:33:bb:dd:44:
0b:31:d7:a1:a4:94:a4:8e:17:c1:d5:47:91:ea:31:0e:b7:a1:
d1:1e:b1:28:0e:33:06:ee:40:97:83:33:77:3d:d3:8b:73:ba:
63:19:c8:fd:a7:f3:39:63:27:ac:60:74:cd:79:a5:6f:b5:05:
64:40:b8:fb:10:c0:04:f2:74:a4:c2:4b:eb:66:5f:63:49:26:
68:f5:fc:1d:82:f2:bd:8e:7c:7a:e3:25:71:36:08:b2:ba:a2:
d5:56:d5:52:07:e4:74:b6:33:06:18:bb:87:7c:64:bb:e7:7c:
b7:76:7e:a4:4a:25:08:10:a4:ef:fc:02:d1:db:a7:41:7a:d1:
05:72:68:cf:47:b8:02:e7:93:25:98:c4:a1:a7:15:e9:6a:04:
74:26:69:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:50 2025 by rpki-client