Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json)
Hash identifier: 6NrO9EiC5ea6WcrhErOu2rJxv6DEBrNAVOjxW/j62yk=
Subject key identifier: 74:11:4E:86:70:4B:4F:54:E1:7D:83:B7:CD:0F:A1:D8:84:6B:0C:95
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial: 0198D4A7BE9202DCF98EE74AFF54C10516DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
Manifest number: 0732
Signing time: Sat 23 Aug 2025 02:00:19 +0000
Manifest this update: Sat 23 Aug 2025 02:00:19 +0000
Manifest next update: Sun 24 Aug 2025 02:00:19 +0000
Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: 8CXcaGe46JYo0SQGyusVu5bytE5Up3vuBDObXYjSDCQ=)
2: goyOFyNzCSnjNoSGUslWBJblZKU.roa (hash: gOANPYh3QzN79F/MQE5xUnJrm2gWdrunUVxAKHrrHlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:be:92:02:dc:f9:8e:e7:4a:ff:54:c1:05:16:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Validity
Not Before: Aug 23 02:00:19 2025 GMT
Not After : Aug 24 02:00:19 2025 GMT
Subject: CN=74114e86704b4f54e17d83b7cd0fa1d8846b0c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:40:79:f9:63:8c:61:ba:8c:42:e1:62:47:
7f:ac:ea:f4:65:dd:d5:6c:cc:b4:ad:ca:e4:e9:1a:
56:d8:af:af:73:fb:10:b4:e3:5e:d9:44:a5:51:3f:
fb:aa:1f:57:73:5e:ee:02:23:b7:b8:6d:67:1a:a0:
06:61:37:a0:18:dc:77:e6:e5:01:94:8d:59:06:56:
cf:4a:b4:b3:57:f6:5d:fc:01:92:e0:5b:92:31:d7:
25:58:4f:bd:46:f4:42:22:6e:d7:53:77:d0:78:f6:
9b:e7:32:75:78:84:11:96:65:ae:66:d9:ef:34:b5:
cb:55:d8:a3:48:e0:88:b1:3e:f3:63:42:c8:ca:c0:
ad:e5:f6:c9:c0:7d:21:75:18:14:54:8e:1f:c2:4a:
70:a7:55:b4:33:e4:c0:b4:29:a3:b8:0b:07:17:9a:
17:7f:4b:8c:cb:37:d7:39:56:99:cf:90:92:00:1f:
39:d9:96:9c:5d:9a:24:5f:10:7f:ff:6b:ee:a2:99:
ec:f0:3e:9a:6e:a2:da:71:b4:92:b6:ac:8c:f5:79:
34:65:3d:32:a3:bf:e2:15:44:1c:01:6a:07:f7:5a:
24:59:60:77:3f:9a:82:84:38:70:5c:20:2e:14:33:
55:0b:6d:99:be:64:fc:d3:77:5c:a5:af:e4:5f:68:
36:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:11:4E:86:70:4B:4F:54:E1:7D:83:B7:CD:0F:A1:D8:84:6B:0C:95
X509v3 Authority Key Identifier:
keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a6:5f:fb:3b:98:da:c4:fa:4b:67:d4:b1:d2:24:f4:40:4e:
43:85:ff:c4:f1:36:a2:d5:b4:14:a3:98:7a:97:65:ab:cb:d4:
c2:8f:13:f9:6b:7d:4c:5d:c5:2a:a5:ec:de:f9:d6:d4:ac:3c:
34:75:74:f2:e7:46:dc:9a:8d:a3:d7:ca:32:01:b2:c3:dd:4e:
a8:e6:37:dc:88:4f:50:31:72:fa:25:1e:e1:74:3f:4c:9c:42:
4d:58:ab:11:38:de:a7:e5:6a:ac:e2:28:94:db:e3:04:4a:ee:
d5:4a:01:96:16:a7:c7:37:94:ff:de:c2:21:32:c8:f4:aa:c3:
ca:5b:5d:4b:1e:6b:24:77:78:d9:d9:15:d6:21:dc:41:25:04:
ff:c6:9b:47:5f:c4:d9:d7:aa:cc:6f:89:6a:48:4d:f9:72:7b:
c3:ee:c7:17:ba:a9:ab:16:ca:40:71:15:fe:58:4a:d1:08:68:
6a:a4:b4:8c:75:d5:97:38:d5:26:d1:62:33:69:33:8b:96:76:
97:5e:4c:94:ea:8e:e4:39:17:12:6b:91:26:22:c8:aa:b7:26:
11:40:32:3f:5c:40:aa:c7:fb:e5:c5:61:49:b5:f9:8d:f9:b3:
e5:52:57:99:40:49:1c:69:b8:00:40:12:54:04:e5:5f:cd:f2:
0e:43:d7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:51 2025 by rpki-client