Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
File: 1-geuOnkY-TLqJMwVa0tum6VYG_o.mft (raw, json)
Hash identifier: 9FJZ+BKC08hWOfI+e3wvu3ptilshygXJqcaFk0ZSL8Q=
Subject key identifier: B4:B5:2A:B8:2C:3C:50:CF:74:AA:27:3A:F1:9A:DA:A6:3A:D9:2A:92
Authority key identifier: FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA
Certificate issuer: /CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
Certificate serial: 0198D73BDDA365A1D321CD3CDEE20372841D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
Manifest number: 0358
Signing time: Sat 23 Aug 2025 14:01:21 +0000
Manifest this update: Sat 23 Aug 2025 14:01:21 +0000
Manifest next update: Sun 24 Aug 2025 14:01:21 +0000
Files and hashes: 1: 1-geuOnkY-TLqJMwVa0tum6VYG_o.crl (hash: 1eM20JsF7JFmrJgvyDzoLxIQjySQvUXB3heGeYj1HrU=)
2: rs3gWt450Dc5VAdX-LPh4FxzPfI.roa (hash: yHX556DQVgZDjr2xTPApsPlrmF99zYD+miBAgNn4a5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:dd:a3:65:a1:d3:21:cd:3c:de:e2:03:72:84:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
Validity
Not Before: Aug 23 14:01:21 2025 GMT
Not After : Aug 24 14:01:21 2025 GMT
Subject: CN=b4b52ab82c3c50cf74aa273af19adaa63ad92a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:32:dc:79:48:e1:fa:a9:05:6f:14:24:81:
45:43:e1:28:df:d0:4b:9f:6a:ef:3c:92:b5:da:96:
22:66:a9:f1:a3:62:7f:a9:88:0f:18:25:cc:c6:5b:
14:ec:47:ed:8f:07:a2:91:86:0c:3a:72:a7:98:1a:
36:ad:f0:5c:f3:af:89:90:c5:d8:4d:f2:54:19:92:
1d:44:c9:03:f2:10:c0:32:e2:b4:a9:df:13:f4:1a:
16:22:e3:54:a3:af:59:f4:e6:0a:0f:a5:a7:96:2c:
7a:65:10:1d:bc:08:34:ee:86:ac:70:40:ad:ae:6b:
8c:32:89:7d:6c:bd:37:a9:21:52:ec:74:89:97:61:
2f:9b:c4:c7:ba:35:22:71:fd:1e:53:9d:b5:e0:2b:
de:b7:39:4a:33:d8:b9:39:01:79:bb:43:85:16:47:
80:09:a4:74:bb:70:b2:80:3d:d7:66:2f:26:57:53:
c4:92:f6:89:1d:d0:66:c2:67:49:5f:c7:1e:55:e9:
d6:ce:ce:e3:cc:a2:c2:48:c1:20:f3:59:b8:6f:be:
cf:26:5e:40:c1:0d:7c:b7:9b:a4:38:89:ca:27:e2:
df:5b:a4:e4:1a:82:da:26:ec:9d:da:89:ac:7c:35:
07:19:30:58:6b:f6:82:19:2a:95:cf:67:42:b0:7a:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B5:2A:B8:2C:3C:50:CF:74:AA:27:3A:F1:9A:DA:A6:3A:D9:2A:92
X509v3 Authority Key Identifier:
keyid:FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3a:13:a0:e9:66:fe:7b:c2:7c:d3:4d:45:31:bb:27:ca:4e:
75:79:76:a9:78:3d:ac:76:c2:44:3d:f2:5a:94:9d:2b:a7:42:
5b:2d:be:dc:1d:03:1a:f7:e9:31:b1:10:4f:39:73:2b:e6:4f:
f7:31:03:8f:06:e9:3f:22:23:6b:8a:17:dc:71:63:05:41:b5:
7f:cf:21:fa:82:a2:d1:be:1c:ac:e9:d1:3f:12:f6:83:66:78:
ba:3c:00:06:e2:d2:d9:75:32:ff:7a:c6:8b:4d:c5:5d:c5:2b:
38:54:d0:a6:a0:e4:58:3c:27:bd:f1:92:1b:2b:de:44:8d:17:
6b:45:71:a9:e8:b1:5e:1c:e7:13:ef:c7:56:2d:19:ee:e8:86:
c2:ab:dd:b8:63:c9:d9:3e:73:17:d7:3b:b9:57:e2:66:fc:d9:
83:b8:29:ef:11:02:47:17:83:d6:e3:fe:a4:db:11:ae:c8:71:
1d:29:c0:21:2f:21:bd:a4:d3:f0:fc:7e:53:e9:98:ec:90:e5:
c4:bd:a1:49:61:a3:12:02:73:21:b7:2d:49:a0:7a:d4:dc:50:
04:bc:1a:56:28:d8:1f:ba:d7:b3:43:04:5c:85:46:dd:76:ca:
8f:f5:94:69:fb:15:43:c3:45:23:4a:18:1d:97:45:72:33:75:
4d:26:39:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:10 2025 by rpki-client