Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
File: 1hCKSF368GqTH1Q8CFoAnGrqLZw.mft (raw, json)
Hash identifier: a2+ynjhREItvzjmhTw/aN0n7ZAaW2lmhn4GcuT2HNLI=
Subject key identifier: 5B:70:30:50:71:B5:0D:4A:F1:B9:2D:EF:65:56:F3:81:6D:D8:56:69
Authority key identifier: D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
Certificate issuer: /CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Certificate serial: 0198D705B9F331E33F307B74DC47656D34C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
Manifest number: 0954
Signing time: Sat 23 Aug 2025 13:02:13 +0000
Manifest this update: Sat 23 Aug 2025 13:02:13 +0000
Manifest next update: Sun 24 Aug 2025 13:02:13 +0000
Files and hashes: 1: 1hCKSF368GqTH1Q8CFoAnGrqLZw.crl (hash: S5BVGhXe1UqJD3aP8iNkOawcOfqIJBHnLJeSHk1wzGA=)
2: XYlDbmNEweM6LqFALkkvUh2W9lE.roa (hash: 9gP6l/HCX+2ev9Uk9YYU1pfiHW7Ig/5Pk5coTY/utmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:b9:f3:31:e3:3f:30:7b:74:dc:47:65:6d:34:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Validity
Not Before: Aug 23 13:02:13 2025 GMT
Not After : Aug 24 13:02:13 2025 GMT
Subject: CN=5b70305071b50d4af1b92def6556f3816dd85669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:68:68:7e:08:7d:c0:84:10:2f:4e:39:41:a0:
d0:51:47:e1:55:51:5d:67:6c:21:e7:12:02:53:1a:
49:e5:ab:21:68:47:08:59:b6:cb:4d:0c:f4:55:a1:
31:7c:43:e0:64:8e:cf:c6:2c:ab:3b:67:ee:75:51:
4c:44:92:e4:92:d8:5c:c2:d6:5b:bf:dd:a4:ea:57:
54:a8:f0:9e:00:6b:e0:78:40:50:f1:be:ab:e4:b2:
75:16:c0:46:2c:35:91:2e:33:2b:25:04:bc:81:a4:
f5:83:07:4d:c6:a0:d2:5d:cf:45:6c:85:c5:3f:ca:
2b:a8:cb:e5:a6:e6:99:fe:de:19:0a:bd:69:68:de:
29:bc:8b:1b:3b:ec:4f:49:80:23:41:a2:f0:63:0b:
fa:3c:ef:2c:f9:62:dc:49:9c:fb:31:e3:8f:5a:a0:
a1:8f:96:f2:19:ca:5b:05:31:25:ea:a4:41:59:39:
25:bb:9a:59:1e:c4:35:9c:c6:8c:e6:2e:fa:01:3c:
d0:c9:3a:87:cf:0e:1c:31:d4:46:6b:68:59:5c:06:
15:ab:6a:b4:cb:af:08:1b:07:d4:93:42:33:ac:4c:
7d:70:ef:41:ab:d1:70:57:f0:71:75:d5:ec:1f:76:
b6:3e:05:4d:b4:c4:04:5e:32:35:76:f2:e2:87:ac:
0b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:70:30:50:71:B5:0D:4A:F1:B9:2D:EF:65:56:F3:81:6D:D8:56:69
X509v3 Authority Key Identifier:
keyid:D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:92:7d:a6:51:4f:65:c8:44:74:cc:4c:44:e6:57:b7:62:18:
91:2a:d7:f5:73:8e:46:70:34:e6:5c:af:d7:f3:36:e4:f3:8c:
52:de:dd:16:c9:59:99:1c:4f:11:ec:ab:91:ad:62:12:7e:b0:
70:c2:f0:0f:56:28:e1:84:9f:84:f0:37:80:75:42:4a:ed:2c:
64:15:6d:9d:ed:af:cb:ce:f3:db:10:7e:bc:50:e6:30:9d:ed:
95:71:15:80:75:1d:e8:8f:95:67:fc:23:73:6b:97:95:f7:ba:
66:43:9c:67:c8:5a:eb:e0:3a:29:a7:95:df:12:be:90:85:19:
59:e9:be:3f:8a:68:11:87:ee:17:e4:e4:39:21:27:44:a5:41:
78:e6:cb:11:26:1f:1b:bb:e7:61:b3:95:e6:14:ed:ad:a9:45:
2e:04:96:31:37:7f:59:fa:80:0f:56:0d:36:c5:29:41:1e:93:
68:33:00:db:df:b6:79:49:d9:3b:53:3f:39:62:fa:18:eb:41:
39:4a:44:b8:8d:69:28:fc:bd:57:9e:6b:b0:14:07:7c:34:66:
d1:dc:0a:51:70:73:31:60:58:ee:c0:65:ed:47:6d:0d:1e:1b:
b4:9f:c1:29:36:5d:85:5c:0c:ba:82:e6:a0:19:3e:f0:c6:9a:
b4:48:94:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:50:35 2025 by rpki-client