Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
File: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft (raw, json)
Hash identifier: S2RDGB4aJwQDHgQGNFbOij2qKeOoyg8qoHy5RocNUJU=
Subject key identifier: 10:2F:DC:66:87:8D:35:A2:8C:F1:F6:63:E2:0E:67:87:CB:BD:2B:8C
Authority key identifier: FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
Certificate issuer: /CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Certificate serial: 0198D5BC5E200A2AFE5D8DAB6BD075B50699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:02:28 +0000
Manifest this update: Sat 23 Aug 2025 07:02:28 +0000
Manifest next update: Sun 24 Aug 2025 07:02:28 +0000
Files and hashes: 1: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl (hash: ZbiVoYVBfFEZ983Ag0hRVZLhRJetcpnk3CcWhPvmauE=)
2: LiDek8ukAeDalnCmjHOSOx8ybkY.roa (hash: XaMtoZ+RB8cq+ljNgiN30o7Aneys4CKgmujbsMdFNUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:5e:20:0a:2a:fe:5d:8d:ab:6b:d0:75:b5:06:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Validity
Not Before: Aug 23 07:02:28 2025 GMT
Not After : Aug 24 07:02:28 2025 GMT
Subject: CN=102fdc66878d35a28cf1f663e20e6787cbbd2b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:21:bc:0e:3e:0c:f7:ad:d8:79:2a:79:cf:65:
0c:1c:52:06:5e:5e:6c:17:26:fc:99:13:09:9a:4e:
ee:38:34:d1:1b:f2:c2:6c:75:eb:91:e3:cf:c6:dc:
4d:ec:e5:2c:65:25:d1:93:0d:ad:a3:6b:72:f1:1d:
52:63:57:04:e3:31:8e:33:24:72:15:fb:e3:32:da:
30:07:8c:b6:d6:90:48:81:75:9b:e9:32:d2:ca:b0:
cf:d5:0b:a1:a2:81:69:f7:7b:b6:8a:7d:02:15:94:
bc:67:19:87:e0:7c:75:a8:d0:ef:4e:f9:f8:a8:e3:
67:83:f6:ea:8e:2e:5d:f1:c0:56:80:c6:c1:21:5e:
18:af:7a:4e:68:73:0a:6b:37:27:6f:b4:03:f3:01:
1b:0a:55:a8:93:d5:10:04:c7:99:3a:85:9c:19:b2:
26:d6:47:db:d4:58:7e:5a:c1:85:48:fc:00:1b:cf:
22:bf:bf:3d:55:87:1e:56:2e:3a:80:83:a8:d7:b3:
78:0b:25:33:fc:6d:08:59:56:39:37:dd:1d:a7:20:
9d:50:ac:9e:34:65:bb:69:fa:23:61:51:ba:27:a2:
28:27:11:2e:16:fe:79:f9:dc:7d:9b:dd:b3:2a:b3:
75:2c:f5:27:ee:07:3a:31:cc:42:fa:7f:79:93:c3:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2F:DC:66:87:8D:35:A2:8C:F1:F6:63:E2:0E:67:87:CB:BD:2B:8C
X509v3 Authority Key Identifier:
keyid:FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:54:d7:c2:68:07:61:d8:e9:73:7c:a0:89:48:68:00:de:56:
80:db:3b:c0:78:4d:61:da:fd:77:4f:d2:e5:33:53:12:80:05:
8c:3a:eb:8b:cc:d4:f8:ac:0c:b3:93:49:7e:39:dd:1d:d3:b1:
2c:aa:95:b5:91:e0:11:ef:c6:33:7e:b4:f6:f3:bb:f8:d9:1c:
d9:c2:76:aa:71:72:98:a7:01:5d:59:42:93:11:5e:7e:53:ef:
19:4b:de:3b:8a:78:e0:b8:42:f0:19:e7:69:df:59:c5:a8:54:
1d:5c:22:22:a0:67:19:02:bf:77:28:90:90:50:3f:d6:81:cd:
14:c7:21:4f:e6:5b:6d:66:35:83:64:e4:91:b3:bd:26:cc:53:
c6:ec:88:85:93:df:56:8e:bc:58:9a:65:9a:f2:d4:45:7e:84:
38:87:3d:32:10:8d:c7:bb:7d:14:04:b4:cb:6e:72:c5:8b:ca:
07:36:c0:73:d3:98:11:12:1b:6b:62:69:16:5a:43:24:36:df:
36:5b:25:1e:52:3c:5f:1e:59:67:15:1c:bf:b8:71:82:86:62:
40:14:11:64:c3:72:d8:76:41:20:73:33:92:40:d2:6c:ab:d6:
e6:b8:c3:16:5d:7c:7b:75:4b:1d:22:8b:92:3d:ab:c5:3e:d7:
dd:97:59:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:47 2025 by rpki-client