Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
File: 1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft (raw, json)
Hash identifier: cBK2cdaFGPOZzK2EHRWPRhz0edmakD/RpY5dHy805Pk=
Subject key identifier: B3:0E:D6:33:56:61:9A:F3:E9:B7:81:42:91:45:1F:E8:E2:89:94:B1
Authority key identifier: FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B
Certificate issuer: /CN=facf153f24fa8d3214cd7c6e250d4b19f506722b
Certificate serial: 0197B5FC52723E0967361148ECDC6316B7CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 10:01:41 +0000
Manifest this update: Sat 28 Jun 2025 10:01:41 +0000
Manifest next update: Sun 29 Jun 2025 10:01:41 +0000
Files and hashes: 1: 1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl (hash: 7c+YCqfi5/dl7qNtV0DP5T55Rka0faLAyfPgqH8Wwj0=)
2: rJdrJhQQmpxY59M8JPVpH2s71pI.roa (hash: xxb6VYq/XoyduiRjX57bX/HD20WZN47aVhzULOuwKsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:52:72:3e:09:67:36:11:48:ec:dc:63:16:b7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf153f24fa8d3214cd7c6e250d4b19f506722b
Validity
Not Before: Jun 28 10:01:41 2025 GMT
Not After : Jun 29 10:01:41 2025 GMT
Subject: CN=b30ed63356619af3e9b7814291451fe8e28994b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9f:9d:c2:fe:3c:2e:ff:c2:2c:a5:b9:cf:eb:
0d:e4:11:7b:3c:cc:54:c5:cd:94:a0:58:f1:da:ab:
5d:6d:53:af:ae:9e:90:99:b5:9b:75:40:5b:13:43:
1f:7b:4c:e5:84:fc:cc:ba:2f:6a:8c:bd:a8:8a:34:
cb:3a:4e:a7:1f:d6:bb:15:e7:ee:6a:40:61:7c:a7:
b8:6c:36:6f:15:e1:10:e4:6b:df:c8:67:be:64:ae:
55:da:5c:b1:58:f0:c9:c8:38:3d:6e:5a:16:f3:98:
ec:93:99:d3:f2:36:a3:83:f2:41:3d:1e:e0:81:82:
55:65:20:d2:9b:dd:30:1d:14:f2:1c:48:22:59:65:
de:21:c9:6a:e2:b5:d5:c3:5d:5d:12:41:c3:ec:7d:
09:e5:af:17:40:31:7d:0a:92:36:fa:9b:1e:8d:65:
3a:63:3a:1b:db:cb:76:d6:02:45:63:48:71:ce:3c:
4e:7e:da:d9:26:ba:23:f9:81:9c:c7:a4:52:be:eb:
be:2d:d2:29:77:8c:1e:72:bb:7e:6d:37:d8:4b:04:
50:96:da:63:bb:ad:f6:de:b2:fc:48:4f:35:38:e8:
9e:1e:7d:45:55:0c:85:c4:c0:79:17:a5:3e:58:ec:
ce:5b:7e:0a:c2:f4:6c:2f:58:35:c9:39:ac:8a:3c:
97:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0E:D6:33:56:61:9A:F3:E9:B7:81:42:91:45:1F:E8:E2:89:94:B1
X509v3 Authority Key Identifier:
keyid:FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:37:02:15:aa:e0:09:44:15:0e:e2:0d:dc:d9:ec:ef:c0:26:
57:13:31:d6:68:dc:c7:79:b5:49:f7:ba:13:61:d6:df:b8:e6:
42:25:35:4c:26:61:3a:db:63:10:90:cb:ac:c2:2f:ae:30:97:
4d:98:f6:1c:fa:42:28:a6:5d:af:d1:56:68:7a:6d:88:21:af:
74:af:2b:e1:c5:31:11:b5:82:22:1d:54:ef:a8:e4:72:8a:82:
b6:a5:16:af:93:4f:06:de:c4:52:c5:f8:a9:72:6d:d5:67:59:
58:85:f7:8b:f6:1e:0b:d6:4d:66:2f:8c:b4:28:be:05:10:df:
68:52:0f:62:4d:76:d5:1e:b6:2d:fc:38:57:c0:4c:70:ec:53:
b5:73:37:e2:c1:87:9c:e0:2d:04:ee:5d:dd:9f:43:7b:95:f4:
ba:d6:40:c7:13:b0:02:0d:9b:af:4a:78:6f:66:ac:9f:c1:78:
c4:cf:95:45:3a:e8:5e:a8:ce:07:df:dd:79:0f:b9:f5:87:21:
03:29:f6:09:1a:2b:17:b3:4c:da:05:3f:a3:c8:c5:b8:fc:3b:
26:ca:2c:2b:b3:7a:b7:25:2b:23:e4:c2:f5:ad:df:5e:30:3b:
43:2b:7b:9f:31:68:d7:53:a8:6b:60:16:ce:68:dc:5a:35:4d:
48:29:aa:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:29 2025 by rpki-client