
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
File: 1-sCJqc1qA3W65JnMBqTKowcbXUw.mft (raw, json)
Hash identifier: wr+PV9mUkwI58NU3nIUzEcO0jASAWVmnEHZhsx7RSW0=
Subject key identifier: E2:EF:FE:2E:34:C7:9C:F5:11:33:C6:A1:98:E4:47:39:57:A5:A7:C8
Authority key identifier: FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
Certificate issuer: /CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Certificate serial: 0198D474336888B04764F34DFDF6A1A0161C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:04:01 +0000
Manifest this update: Sat 23 Aug 2025 01:04:01 +0000
Manifest next update: Sun 24 Aug 2025 01:04:01 +0000
Files and hashes: 1: 1-sCJqc1qA3W65JnMBqTKowcbXUw.crl (hash: T84ReFeTrNDB9dkcTcCR7bjMRthfm2Nlkhb09hc809I=)
2: 9Gc0nLgQOtGtRNM7UIaRIs_ONW8.roa (hash: 7XUr33w/Uy5ddx5EoTNZGUbNED5TJtOlZQk+2e6Mxi8=)
3: wfH5z_Bg4z7tHe6fq0H-30TIL34.roa (hash: VmP56mLP1KsPx5GBmYqlZvdPkuhp1r337TX7Q50d+Qg=)
4: yj2XO7X6nmMUvJxwQor2eoTB-gs.roa (hash: SDht8xJ05XM4bxvOhysfN3ceB8zgniuYHVUq4tgjt6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:33:68:88:b0:47:64:f3:4d:fd:f6:a1:a0:16:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Validity
Not Before: Aug 23 01:04:01 2025 GMT
Not After : Aug 24 01:04:01 2025 GMT
Subject: CN=e2effe2e34c79cf51133c6a198e4473957a5a7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:37:ce:63:d5:28:fd:e1:82:91:c9:d1:3a:98:
db:b6:ea:36:b8:80:03:c2:de:a9:61:a4:37:04:c7:
0b:eb:54:d4:b4:ee:bf:61:92:2e:8f:64:7b:7e:8d:
51:91:31:12:ab:8a:d8:1c:d0:37:23:f6:be:9a:19:
72:ca:57:71:99:2c:33:75:0a:c7:22:3a:78:f0:dd:
cc:4b:d9:96:03:45:5b:8b:e8:43:67:5b:97:ea:bf:
b5:af:d2:cc:16:d7:53:2d:60:63:2b:83:5e:cd:84:
8f:a5:47:4a:98:9d:ff:94:12:25:1d:2a:1b:31:ae:
9f:eb:83:0c:17:89:1c:6f:01:21:e7:ed:89:a0:cc:
a9:1e:27:c6:5c:69:4b:45:6b:51:ac:5d:82:ce:d0:
37:c8:32:63:a4:07:c3:86:02:d0:5d:0d:0b:e8:e1:
3f:12:d6:b4:a6:d1:29:6b:e0:d0:f2:3a:5f:76:b2:
90:18:37:b1:3d:e2:5c:97:d1:f1:ad:77:06:82:04:
42:67:b0:98:40:58:3e:72:f0:84:1a:41:f5:60:ac:
51:15:1f:da:da:bc:f6:53:bc:99:d8:59:bd:7d:96:
05:ad:95:18:f7:11:c4:c8:11:78:ff:91:0a:1f:f8:
f4:6d:21:9a:65:a3:9a:44:b9:a4:c2:9c:3e:bd:3f:
33:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EF:FE:2E:34:C7:9C:F5:11:33:C6:A1:98:E4:47:39:57:A5:A7:C8
X509v3 Authority Key Identifier:
keyid:FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fd:68:1b:93:f4:b9:ca:b8:15:8d:5b:f3:da:c3:a5:3f:a4:
bd:d3:42:05:a7:ec:47:c0:b2:b5:d2:71:f8:2b:3e:6d:da:22:
c1:dd:fd:d1:40:0b:f5:93:b1:bd:01:d8:23:be:70:19:a7:e8:
44:1d:01:10:1a:56:cb:e5:bd:33:3c:84:74:b3:58:35:77:a3:
5c:a3:76:b3:87:43:1a:5b:c2:f6:57:43:5c:a9:73:a6:a3:49:
91:79:a3:45:17:48:07:90:f9:d8:80:9f:83:dd:34:45:6c:02:
9e:e3:a0:b4:ab:96:e1:3b:a6:57:09:00:8a:82:98:f4:a8:25:
ff:6b:06:03:b8:3d:b8:2a:0e:ac:06:85:93:76:fd:c3:c0:50:
f5:d1:f6:35:9c:c0:a3:4e:1f:cc:c1:59:00:73:23:03:b2:f4:
ab:5a:ac:51:5c:2a:3e:9b:e4:ea:32:8e:d1:18:6b:56:6c:c5:
f8:4e:a6:b0:0a:1a:ef:aa:cf:b4:e7:78:ff:67:0a:20:e4:c2:
ea:87:a4:82:4d:c8:14:62:b3:ab:f5:02:00:00:0c:78:28:8b:
7f:0d:ba:b7:57:ab:55:e3:41:ac:ed:d5:7f:1b:0e:94:f5:f6:
2a:19:9a:4c:7a:94:4f:6e:79:e9:2b:c1:cb:2b:57:59:e9:c7:
bf:7f:c7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:54 2025 by rpki-client