Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
File: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft (raw, json)
Hash identifier: UDBvdZLSKEQgUChSA4RRFYwDTbsiP+DK6RifsdipbFQ=
Subject key identifier: 65:DE:88:46:D6:16:64:53:5A:02:27:15:63:F7:83:2E:F6:C4:3C:48
Authority key identifier: D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
Certificate issuer: /CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Certificate serial: 0198D70602A3C79D1FC29FBF00711DF377D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
Manifest number: 130C
Signing time: Sat 23 Aug 2025 13:02:31 +0000
Manifest this update: Sat 23 Aug 2025 13:02:31 +0000
Manifest next update: Sun 24 Aug 2025 13:02:31 +0000
Files and hashes: 1: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl (hash: tzjf5H3j5wPw+0Bo7uoQ1GRfFeI2y34Wh4edb45Z06I=)
2: A0q8SzSP_vkB0Kdb-LLhQ_QObQQ.roa (hash: U5YBrDMRrX6ygfCOd+cwFtTn/aDz7ai314haVDrv0Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:02:a3:c7:9d:1f:c2:9f:bf:00:71:1d:f3:77:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Validity
Not Before: Aug 23 13:02:31 2025 GMT
Not After : Aug 24 13:02:31 2025 GMT
Subject: CN=65de8846d61664535a02271563f7832ef6c43c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:87:04:94:5d:be:ee:35:41:5a:f9:49:01:
8a:e4:81:6e:12:a7:78:44:24:5b:5b:d7:eb:d4:5d:
60:bb:66:f2:20:71:8b:20:ab:1d:05:5c:42:d1:0e:
4a:80:c7:6a:44:f1:ec:66:b9:bf:8b:8a:19:89:53:
5d:16:78:44:7a:b8:cf:03:1e:a0:55:82:b2:05:18:
00:f0:d7:93:80:65:ed:62:1c:e4:72:a1:e1:9a:c0:
4c:8a:4a:1c:35:ae:0a:b5:6e:05:05:4d:2d:d8:ec:
09:37:47:19:24:87:63:9e:53:cf:fa:1e:eb:40:35:
b2:b0:3f:e9:17:9c:69:d3:af:ae:f0:5b:35:bc:2f:
21:34:42:fc:34:3e:10:46:d5:72:ad:ed:6a:08:37:
1f:9d:dc:e8:6d:cf:b0:27:f6:be:b6:97:09:f4:86:
c6:09:0e:1c:ab:e2:a4:20:e6:87:16:97:7b:2f:6a:
35:53:ad:ca:8a:a2:6f:48:b5:56:33:f8:5a:9d:50:
d9:fb:5c:b0:ba:52:0f:45:fb:78:f6:a8:de:05:18:
74:b2:b5:34:cf:f8:77:2b:f4:1b:67:eb:5e:e3:eb:
ca:ff:0d:65:bb:e3:47:63:41:3d:62:7e:95:b9:aa:
c4:e7:a8:35:0d:af:86:0a:ad:11:a8:47:4d:30:90:
e9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DE:88:46:D6:16:64:53:5A:02:27:15:63:F7:83:2E:F6:C4:3C:48
X509v3 Authority Key Identifier:
keyid:D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b7:71:98:07:77:5f:5d:19:d5:41:6d:5f:ed:43:0f:98:f1:
49:73:e7:a6:a0:c7:80:c8:85:9c:2f:d3:23:01:0f:7f:a6:c0:
69:cf:e6:f6:9f:49:26:43:92:bd:8a:e1:f7:cb:4e:f7:ae:a4:
e7:3b:df:6e:b1:80:33:32:1a:25:0e:75:05:c8:ad:d4:5d:79:
dd:cf:34:c8:2d:dc:55:5e:00:ea:6e:ff:b5:52:3d:78:9b:55:
c3:15:ef:bd:31:23:87:fe:ee:ae:26:e4:1b:3c:3c:ee:d5:5b:
99:f8:6c:fe:f2:f0:8a:95:f7:a7:86:b1:ed:d6:5a:7d:5e:ea:
3e:49:a2:d0:16:f9:bd:e3:97:51:19:a4:0b:90:7c:4a:99:4c:
94:56:8f:8b:3b:be:9b:2c:99:54:19:30:b5:25:e8:19:2a:e9:
f7:50:37:60:1d:fb:c8:d6:d4:1e:d9:e0:69:f6:79:c1:55:f7:
5e:34:ca:10:e2:1d:90:1b:a9:ee:e5:af:87:86:cd:19:83:3e:
2b:7a:05:21:1d:21:59:9a:fd:c3:cc:ae:01:8c:49:94:f1:68:
96:03:92:e0:b1:d7:5a:fd:14:ea:39:2e:43:10:af:85:cb:dc:
83:c4:fa:c7:fa:09:50:ca:d0:91:9b:a4:6e:e6:d8:4f:27:47:
bd:0b:91:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:48:47 2025 by rpki-client