Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
File: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft (raw, json)
Hash identifier: FtzsB2EP6Q7RNdAii6JZHkgHwr0CC8QGFNc+FH9I5L8=
Subject key identifier: C2:26:F1:FF:A7:E3:B4:EA:BB:FC:E4:B4:0F:D2:BF:75:14:C1:97:FB
Authority key identifier: D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
Certificate issuer: /CN=d6107622fd26072e2b9936caf275704350226ca0
Certificate serial: 0198D65F4BF4D453C88C6DC718438AC6AEB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:00:26 +0000
Manifest this update: Sat 23 Aug 2025 10:00:26 +0000
Manifest next update: Sun 24 Aug 2025 10:00:26 +0000
Files and hashes: 1: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl (hash: 3h+P0+NIUV5/IUB5XQYHa0eOdusWtnFgaqQ8Y3zWSsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:4b:f4:d4:53:c8:8c:6d:c7:18:43:8a:c6:ae:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6107622fd26072e2b9936caf275704350226ca0
Validity
Not Before: Aug 23 10:00:26 2025 GMT
Not After : Aug 24 10:00:26 2025 GMT
Subject: CN=c226f1ffa7e3b4eabbfce4b40fd2bf7514c197fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:40:b4:01:ea:c0:df:62:55:8c:eb:2d:8b:
0a:f7:62:42:91:ca:9c:1f:a3:a1:9a:36:d2:20:64:
d6:f3:30:b5:02:ea:2a:1e:94:d6:ce:ef:bd:6c:b4:
fa:db:b8:20:37:a2:51:c3:1b:9e:06:27:04:74:b1:
94:12:3e:df:1f:46:1e:05:c4:a8:f7:f3:5f:88:33:
5c:b5:0f:0b:73:ff:fb:16:2a:f3:52:9a:98:8c:73:
f8:fd:00:cb:2b:58:f1:48:aa:b9:22:f3:92:30:44:
d8:f9:29:80:3b:07:92:83:84:53:7e:f4:fd:a9:1c:
9d:eb:b3:6b:0f:bd:d9:f5:17:4f:d7:34:5b:01:84:
c1:65:d6:a2:85:93:4b:69:a8:a4:b2:09:c3:64:70:
3e:03:5c:bb:1c:2d:cc:ef:50:68:ba:5f:18:8a:1b:
c1:b2:74:8c:dd:67:9b:c7:11:f9:a6:81:8a:11:0b:
00:75:a3:90:e0:7b:37:8c:6d:a0:da:42:6e:48:46:
53:86:15:54:3e:d8:bf:fe:0b:79:02:59:f5:dc:6b:
17:8f:7d:47:e3:b1:58:57:15:86:29:f2:5f:06:5f:
81:e2:e8:03:2a:1a:6e:c3:c5:ee:98:6b:5f:68:cd:
1b:1c:9a:d3:54:0c:b4:f6:fb:cc:4e:50:a7:1c:ef:
90:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:26:F1:FF:A7:E3:B4:EA:BB:FC:E4:B4:0F:D2:BF:75:14:C1:97:FB
X509v3 Authority Key Identifier:
keyid:D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:58:4b:ef:de:74:64:34:fa:ad:c9:43:02:f0:56:64:84:8f:
fd:b9:54:1e:3e:0a:46:d2:57:e8:52:77:b1:c0:3a:6f:d3:df:
1e:db:42:f8:12:c0:5b:78:88:07:4b:b1:26:ab:ce:53:15:e3:
65:b6:ed:70:83:15:4f:1a:10:bc:6f:dc:c4:b2:a5:77:be:f6:
1d:e3:80:b9:b1:25:2a:d6:84:f3:f1:36:87:3e:64:8c:ff:55:
87:b5:82:c0:f9:32:28:be:fe:2b:b9:29:2f:0d:d5:a7:14:3c:
24:0d:de:c6:83:67:0f:df:da:75:bb:6f:7c:45:b8:3a:aa:bd:
30:61:82:b3:94:1b:63:91:87:d6:c3:bb:28:fb:82:af:39:1c:
d3:d5:5c:1f:ce:92:bc:f2:50:2d:82:8a:8f:a1:33:aa:8d:f1:
b6:4c:2a:1e:8a:00:ca:4f:a2:7c:08:7d:7a:00:cc:f8:a7:c0:
80:bb:78:aa:39:f0:3a:d5:22:27:b9:91:6d:f7:c0:4f:8c:0a:
d5:42:93:de:24:f2:85:43:d7:68:3f:7a:93:96:08:55:0f:9b:
bc:36:3a:e1:8c:fe:66:53:80:4e:ad:e2:50:32:f5:e1:53:23:
c9:c0:df:6d:24:83:c1:ff:0e:1b:67:f6:0e:23:31:45:bc:26:
07:f5:3b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:35 2025 by rpki-client