Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
File: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft (raw, json)
Hash identifier: ljVXOKJCQpdcl53cQowN58qhgd9xsE4X/6Yfh/BF48I=
Subject key identifier: 83:49:30:91:87:F2:00:31:92:28:B8:60:28:C4:FA:F7:EF:C1:A7:7A
Authority key identifier: D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
Certificate issuer: /CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Certificate serial: 0198D7E12D1BC1953AED7C07B7A0795DD77C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
Manifest number: 1657
Signing time: Sat 23 Aug 2025 17:01:55 +0000
Manifest this update: Sat 23 Aug 2025 17:01:55 +0000
Manifest next update: Sun 24 Aug 2025 17:01:55 +0000
Files and hashes: 1: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl (hash: J8mRNfK8poZlVQ27VTsIh/D0+2/RG0zMPGij6wLq6ww=)
2: SRL2XQIBoKefODwi32v5f2eOog8.roa (hash: Dn7L+HcQU8DFcaAaO+5zWbM9Yhm50QvkCe2vCWCUn7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:2d:1b:c1:95:3a:ed:7c:07:b7:a0:79:5d:d7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Validity
Not Before: Aug 23 17:01:55 2025 GMT
Not After : Aug 24 17:01:55 2025 GMT
Subject: CN=8349309187f200319228b86028c4faf7efc1a77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:b4:5a:1b:96:5f:48:41:6a:8b:4f:4f:cf:
09:8d:1c:4f:85:c5:58:6d:39:1d:ac:df:62:6b:cc:
5d:6e:c5:4d:5d:da:fe:a7:92:4b:e4:58:9a:29:8d:
e2:77:be:40:33:13:f7:9d:f7:c4:bd:b1:96:26:91:
32:4a:e9:8b:5d:6d:3e:75:e2:e6:38:83:91:a4:23:
60:41:68:9b:aa:31:10:ed:ac:af:a9:c4:e8:65:61:
4d:34:87:48:0f:d2:62:aa:8d:06:e2:c8:c2:65:af:
12:6e:ba:70:83:c7:68:a9:3e:d7:f2:3b:82:93:4c:
2e:5e:a4:aa:08:72:90:f9:ee:2c:55:c3:c7:86:97:
d7:18:1e:d7:3b:8d:ee:bd:3b:00:5c:c9:a3:dc:c5:
65:62:69:7e:83:65:72:c1:d0:f7:87:f2:8a:06:07:
6a:0f:87:d6:ee:ef:8f:47:94:44:15:c3:cf:b3:70:
17:93:e8:d7:89:c8:fd:dd:44:31:e9:a2:fb:e5:85:
f2:dc:57:82:fd:bf:42:a2:17:74:56:47:b3:58:1f:
52:eb:84:e0:da:3d:da:a4:ca:03:72:8a:6c:6d:e3:
e9:a6:c4:52:f9:6a:ef:ef:8a:29:5a:48:cb:1f:2b:
aa:c5:d1:d3:a6:f8:e1:cc:d7:b4:05:bd:22:a9:46:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:49:30:91:87:F2:00:31:92:28:B8:60:28:C4:FA:F7:EF:C1:A7:7A
X509v3 Authority Key Identifier:
keyid:D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:72:25:a7:04:c0:aa:5f:cd:9a:cb:6f:b0:0c:2d:8f:e0:9a:
c9:26:2f:9d:1e:ed:86:93:97:83:cc:26:6d:6e:93:a3:ab:c1:
63:e9:f6:b0:f0:19:ba:3b:91:08:6f:e9:36:5b:04:0d:77:e2:
9b:e3:d3:45:a0:06:ac:f0:94:84:b1:c7:16:11:7d:ee:25:a1:
00:2b:01:9f:72:ee:c9:bc:c1:40:46:82:ee:01:5b:6b:5d:e5:
fb:eb:57:f2:52:03:c0:0d:1d:12:09:8f:1b:e5:f9:44:f9:b7:
de:16:b9:21:7e:47:a5:96:47:37:79:d6:62:94:31:29:63:12:
e4:3f:f9:8f:8c:4c:9b:67:b7:72:fc:d7:8c:af:6d:0e:5f:39:
4a:e0:20:60:65:3b:8f:b3:b2:fd:8a:eb:1e:4c:02:05:86:3c:
a7:cf:63:1d:94:96:44:de:81:d2:05:38:85:43:1e:12:81:27:
5b:39:44:8b:4f:a0:eb:5f:e7:16:19:11:92:21:2c:34:59:fb:
8a:95:22:f8:72:20:7b:c0:49:40:38:c0:ef:4a:70:cd:c4:47:
68:d8:3f:61:dd:49:50:10:f7:4d:34:38:93:c2:f6:a9:c3:3e:
75:68:b2:3a:22:12:58:15:10:b4:1f:17:08:2e:e8:99:f8:2d:
1f:ce:1d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:06:22 2025 by rpki-client