Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
File: 1-zuztKtv_1iN20zyr-bVrEZVe7k.mft (raw, json)
Hash identifier: kUuXWVHS+j7ja6IkZjs6WQs9k3qRaCGdEHOLCrVfamI=
Subject key identifier: 89:22:E5:E1:6C:15:19:56:D4:B7:0D:64:6F:18:B2:94:4B:8E:1A:3B
Authority key identifier: FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
Certificate issuer: /CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Certificate serial: 0198D4DFD01A7CD03ABC2095BC2641FF6DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
Manifest number: 1007
Signing time: Sat 23 Aug 2025 03:01:34 +0000
Manifest this update: Sat 23 Aug 2025 03:01:34 +0000
Manifest next update: Sun 24 Aug 2025 03:01:34 +0000
Files and hashes: 1: 1-zuztKtv_1iN20zyr-bVrEZVe7k.crl (hash: vBiGI8pBRkCf+22bFtSxO4YOQLUsTnMKN/Xaj4JCS5k=)
2: pQlM2OtK0QxqZYQEu_V-X_TzrUw.roa (hash: GdjsGztAnCLXoyesv/dDZLz4ADxr8P9UdhbYUeTe7Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d0:1a:7c:d0:3a:bc:20:95:bc:26:41:ff:6d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Validity
Not Before: Aug 23 03:01:34 2025 GMT
Not After : Aug 24 03:01:34 2025 GMT
Subject: CN=8922e5e16c151956d4b70d646f18b2944b8e1a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:68:9d:93:69:d8:55:b2:b1:8f:bd:c0:0e:
53:5a:f2:1a:34:ce:af:44:62:ea:80:a2:e8:c5:bd:
78:85:90:0a:f1:bf:6a:77:f5:0f:f8:34:a8:75:2c:
53:ab:e7:cd:47:74:35:35:bc:4b:25:d6:55:5a:5d:
ab:c9:d8:34:f0:42:e5:d8:29:57:ad:23:a6:2f:77:
5c:2f:46:d3:fa:3a:b0:28:20:9c:f5:a2:d5:09:a4:
7c:08:18:19:7c:be:81:dd:82:aa:c1:4c:96:89:bf:
a4:67:70:6e:3a:48:ed:c2:c3:44:81:1b:0f:a8:d8:
99:e7:8e:08:d4:ac:77:94:20:53:e4:6e:28:53:66:
69:1c:1e:35:0a:24:2b:f3:e4:d3:8d:95:68:c9:92:
ef:97:01:3c:a3:70:60:56:52:9c:d7:df:b4:98:b6:
3e:d2:18:da:ad:86:8e:c0:8e:50:be:64:17:47:2b:
8c:58:01:c4:34:a8:38:e9:82:c8:46:69:cd:77:c7:
af:d9:33:8d:62:5b:58:56:df:43:e8:8d:f1:0f:a9:
ad:39:84:51:b2:76:e0:3c:0b:42:53:1a:24:53:87:
48:ff:71:62:88:02:cf:fc:fa:67:02:e3:e3:1b:81:
59:f5:b9:75:57:0c:3d:2c:51:67:cb:f6:24:cb:0c:
7e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:22:E5:E1:6C:15:19:56:D4:B7:0D:64:6F:18:B2:94:4B:8E:1A:3B
X509v3 Authority Key Identifier:
keyid:FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e7:78:50:0f:6d:71:0f:33:32:b0:53:b1:e8:43:91:eb:da:
80:6e:c7:55:66:24:5a:8f:d8:03:74:18:4e:e6:ff:4f:cd:35:
b5:6e:c5:f0:e0:5f:bc:64:66:fa:73:d6:0f:10:07:4e:02:15:
7e:50:5d:8b:09:23:74:38:66:8d:23:78:ce:a9:19:a2:04:86:
cc:9f:08:8e:c7:92:d2:71:49:dd:91:e3:16:39:7b:b4:b2:60:
1b:31:02:42:99:ec:32:08:94:3d:c9:2c:de:ef:74:a3:d9:42:
ac:42:ec:7c:3a:84:fb:86:59:b6:e2:46:7c:4d:b4:98:63:ca:
1a:fa:23:21:7a:22:62:09:01:15:4f:50:e5:14:eb:ed:36:aa:
42:3d:e9:64:b3:a0:3a:a4:e5:0e:e5:3f:49:bb:44:72:6f:8e:
c9:e4:f0:87:6a:a5:0e:1c:fb:aa:f7:95:2a:ed:bb:d7:f9:99:
f2:69:4c:e5:d7:b9:f3:f5:78:17:7f:fd:d7:22:85:b2:e9:f6:
65:57:86:f8:62:4b:1c:e9:54:a1:ef:fe:ac:4e:cc:af:f9:b8:
f3:72:99:ee:19:96:ab:62:df:80:ad:46:98:0f:c2:9b:0e:1c:
0e:2e:54:fc:20:b7:4a:67:ad:4c:72:39:20:a5:6f:c8:e8:36:
ed:98:1c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:57:12 2025 by rpki-client