Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
File: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft (raw, json)
Hash identifier: fKViBUAQ4ZvvllxjGjNKuVBzgrpRz/hgzIEklD/c+ZM=
Subject key identifier: 80:23:91:17:93:35:A0:E5:69:2D:A8:61:FA:23:4A:CA:38:49:96:05
Authority key identifier: F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
Certificate issuer: /CN=f8b770160553760c3567df51a847ed6c529c0789
Certificate serial: 0198D5BC27BB9BCFAD49271224367E84707B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
Manifest number: 0FC5
Signing time: Sat 23 Aug 2025 07:02:14 +0000
Manifest this update: Sat 23 Aug 2025 07:02:14 +0000
Manifest next update: Sun 24 Aug 2025 07:02:14 +0000
Files and hashes: 1: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl (hash: LFARd+i+VLOt5Sct4FlThDDcFyqt37RHtSUpJyt8+lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:27:bb:9b:cf:ad:49:27:12:24:36:7e:84:70:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b770160553760c3567df51a847ed6c529c0789
Validity
Not Before: Aug 23 07:02:14 2025 GMT
Not After : Aug 24 07:02:14 2025 GMT
Subject: CN=802391179335a0e5692da861fa234aca38499605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d4:5b:43:c8:97:00:88:d9:72:3a:ed:12:34:
08:b3:d2:29:05:6a:7b:4c:20:f0:b4:3d:12:83:30:
1a:d1:0d:05:ed:25:66:36:de:2e:93:77:36:88:36:
48:c5:8a:70:1d:bc:e4:76:c6:3f:6f:59:8a:25:6d:
7d:8d:d5:ac:cf:b4:66:5f:1e:61:49:11:d9:17:33:
c8:89:59:b3:fd:e4:d9:33:8c:71:ff:56:63:c9:1f:
dc:7b:1d:01:1a:8b:7d:e5:a4:ec:fd:ba:58:68:9b:
f6:b5:d2:74:38:5c:03:98:19:ef:fd:b0:39:01:f9:
fe:d5:fa:a2:ed:1c:bb:ca:f6:cc:71:ff:be:e8:a4:
b2:5a:b6:73:02:c2:46:50:3e:ce:4e:2a:fd:af:f8:
f9:51:cd:67:4f:82:5d:fa:68:74:0b:92:ac:3a:a8:
fc:8e:9e:13:5d:99:99:2e:fe:c6:7d:49:9f:a3:d2:
60:83:f0:7f:27:52:10:f8:11:20:6a:c3:99:fa:d6:
3b:31:f2:1f:47:86:1f:49:92:5d:02:b2:35:c0:3d:
34:9c:5e:30:41:5d:32:89:8e:20:7e:c4:39:39:07:
e7:8d:e1:11:fb:23:2e:9a:17:c9:b2:5b:d1:d0:56:
cb:81:bf:9a:d2:e1:b4:4a:c0:6f:b0:a5:a0:a5:8b:
44:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:23:91:17:93:35:A0:E5:69:2D:A8:61:FA:23:4A:CA:38:49:96:05
X509v3 Authority Key Identifier:
keyid:F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d8:8f:4b:36:ed:60:ee:5e:d9:4b:2d:39:1f:26:00:96:65:
34:68:89:e7:23:d7:67:fa:a4:de:4f:9c:9f:a0:09:43:ab:be:
b2:9f:5e:30:26:0e:42:6b:28:a7:ae:fa:f9:78:fa:29:60:2d:
c9:38:ab:f1:94:f4:f1:f6:8d:6a:f3:2b:71:8b:5a:73:d3:f4:
9b:09:a0:de:07:43:c1:25:88:1e:87:15:62:cf:94:1b:d0:c2:
ca:05:bb:32:68:08:f9:f1:da:8a:b6:e2:69:dd:b3:7a:21:11:
79:7f:52:a7:7d:19:96:47:ec:b1:72:bd:b9:60:55:d9:b7:b9:
43:64:f8:97:79:05:8e:06:a6:6d:58:63:66:f8:5f:69:90:f5:
46:54:9f:1f:c4:a9:ca:bb:ea:58:0d:89:59:4a:85:ae:22:5b:
70:9a:67:b1:ea:e2:6c:b2:eb:72:ad:1d:bf:c2:6f:ec:ee:7e:
e8:b9:3d:c8:d2:d0:45:ba:79:dd:e7:52:c8:05:06:8e:1a:ac:
91:24:9f:1b:ef:de:84:6f:76:d5:06:e8:ca:87:aa:21:a4:c6:
3a:50:54:48:bd:11:0e:cb:9f:22:97:a1:1e:75:d1:31:0a:48:
b9:7f:2a:6a:f1:f9:1a:3c:9e:bc:16:96:04:cc:08:75:19:3e:
3f:4f:2c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:25 2025 by rpki-client