Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
File: 1-X_eytsyYTNDh88JHQLgcTt4HTE.mft (raw, json)
Hash identifier: cE7aMKUqsA1vulgJYPRU6W8AeyrRwM2cTV2G3tBcHRs=
Subject key identifier: 63:5B:6C:CE:03:C5:AE:F2:F1:45:C2:6D:65:48:67:92:F1:AB:32:A8
Authority key identifier: F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
Certificate issuer: /CN=f97fdecadb3261334387cf091d02e0713b781d31
Certificate serial: 0198D92B84D2C1B86B6C6723CB8964B48EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 23:02:44 +0000
Manifest this update: Sat 23 Aug 2025 23:02:44 +0000
Manifest next update: Sun 24 Aug 2025 23:02:44 +0000
Files and hashes: 1: 1-X_eytsyYTNDh88JHQLgcTt4HTE.crl (hash: 8U/enRlUc9xNGm1fZ8+BGsExJc5yKOaEOLI0OI19qDs=)
2: FCnaaFMRUSsD-s93_AVnx22U1ao.roa (hash: 4tCe1gcr3PUaM9byeRkhDZQavz/cazZjqikDLI+wcCg=)
3: mAXlXNB9v-X9Wiu9xA-qkNOSmGk.roa (hash: oVGw8L/hb1uj03ZIPyJ/jrTD+46lhm6KM/O1Nxc9Los=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:2b:84:d2:c1:b8:6b:6c:67:23:cb:89:64:b4:8e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97fdecadb3261334387cf091d02e0713b781d31
Validity
Not Before: Aug 23 23:02:44 2025 GMT
Not After : Aug 24 23:02:44 2025 GMT
Subject: CN=635b6cce03c5aef2f145c26d65486792f1ab32a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:20:04:cf:a7:b2:8d:30:f4:71:37:d9:86:68:
62:c1:a3:20:f3:a5:d6:0a:96:0d:ee:f4:af:ca:61:
b2:7c:35:6e:e7:bc:ae:ca:d9:0f:92:be:a2:ef:3e:
99:7c:a0:ff:35:86:18:18:6d:83:7a:f3:e0:7a:ba:
07:5a:fa:bf:9b:82:e7:48:50:81:d4:09:e8:12:35:
22:1f:c0:4e:fb:89:e3:53:e3:5e:93:1d:17:09:a7:
ed:cd:30:21:d3:61:c9:22:23:6a:4b:36:12:1e:86:
a2:12:6b:42:b8:b3:fa:67:32:67:54:8e:b3:d6:2f:
e6:be:0d:cc:05:af:40:da:c3:ae:69:3b:11:22:08:
16:0b:8a:98:8b:12:7c:bc:55:8e:85:f9:78:ca:2f:
be:7f:6f:da:5f:83:76:1f:a6:6d:dd:98:46:0f:6d:
9c:51:1a:8d:6d:01:d3:22:e5:ab:a6:f8:d5:ea:ff:
ee:5d:6d:ee:bd:e2:3f:47:3d:03:69:a2:a7:3b:23:
88:b5:c1:1c:f9:df:cc:b8:c5:7e:24:2c:3e:6b:9e:
94:17:02:44:11:ba:12:c7:51:ad:de:7e:30:fe:d1:
2c:20:7e:7c:59:30:e0:73:e7:52:d3:22:57:49:b0:
fd:2a:b9:1e:a7:fc:35:76:d6:a8:23:43:22:a8:fe:
0d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5B:6C:CE:03:C5:AE:F2:F1:45:C2:6D:65:48:67:92:F1:AB:32:A8
X509v3 Authority Key Identifier:
keyid:F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:af:93:e0:b2:33:0e:ac:a9:46:f0:0a:9f:a9:02:c7:87:44:
b4:36:9c:e2:00:17:e3:96:89:01:d3:ff:54:2f:40:bb:96:77:
67:81:0b:cf:b7:35:9d:3a:53:88:3e:18:98:1f:09:81:e0:25:
aa:de:49:ef:68:3b:f3:5a:71:b9:cd:ad:73:b0:74:a9:4a:e1:
56:be:1b:f5:0b:86:86:64:59:bd:2a:f8:14:05:9e:4e:23:e9:
43:6b:5f:50:70:c8:5c:46:60:f2:bd:46:9d:60:c8:a5:eb:c9:
51:e4:d1:f3:5f:fd:05:e6:65:e6:b7:fc:b7:ac:93:58:1d:1e:
61:0d:4c:c3:94:f7:9c:e6:41:51:b8:08:67:f1:2c:b4:de:61:
bb:fd:19:8f:e5:7c:bb:2c:81:e6:f9:b7:f8:97:75:73:2c:fe:
68:80:5c:76:0a:89:e0:07:2c:7e:f9:ce:d2:ef:42:1e:36:fe:
c5:08:4a:80:73:5e:d3:bc:13:16:ec:9c:86:7c:29:ad:6f:bd:
29:25:00:04:85:15:b3:52:13:05:03:87:08:a1:f2:48:26:73:
a7:51:16:25:fa:f3:ac:76:cc:17:85:5f:b0:45:89:4d:35:41:
77:57:9d:2a:a5:67:b1:aa:f3:f3:b6:2a:25:a8:b4:ce:37:6e:
32:d2:57:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:39:15 2025 by rpki-client