Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
File: 1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft (raw, json)
Hash identifier: l4QbSsLYVQQ9OovIqVD07T5Gs8bAmXl7CZOykpfh9ZI=
Subject key identifier: 53:C6:00:A7:A3:18:48:53:14:31:4E:46:2E:EC:37:0A:42:69:75:21
Authority key identifier: D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD
Certificate issuer: /CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd
Certificate serial: 0198D6983073917918F7118CEE3C41698363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 11:02:34 +0000
Manifest this update: Sat 23 Aug 2025 11:02:34 +0000
Manifest next update: Sun 24 Aug 2025 11:02:34 +0000
Files and hashes: 1: 1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl (hash: h1JItlzuR/AXuJntk0BXZfmn0LYkujEaghnRYoEoY7Q=)
2: xQ0omeh3E5iF_d8mj3AQ2WbCPhs.roa (hash: sdJrwUwtet9ZCSeZ4e/k+xUzLUvSkTzP6eqgxhGOZBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:30:73:91:79:18:f7:11:8c:ee:3c:41:69:83:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd
Validity
Not Before: Aug 23 11:02:34 2025 GMT
Not After : Aug 24 11:02:34 2025 GMT
Subject: CN=53c600a7a318485314314e462eec370a42697521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:b4:52:9f:43:b9:ce:c2:7c:9c:b1:c6:4e:
ba:73:f3:d3:17:e3:92:1b:f0:d3:02:26:9d:6b:d0:
63:fb:a8:bf:f0:bb:f1:05:a4:3c:98:bf:bc:b4:51:
77:51:df:02:0e:8e:43:7c:da:84:f9:19:01:25:dd:
d2:77:61:c2:38:b5:97:2b:9a:b8:09:9e:c9:16:71:
0f:de:e9:56:11:ee:e2:b3:2b:43:18:c2:e0:a9:6d:
aa:02:c2:3b:86:0f:ff:9a:08:2d:f8:58:f7:54:87:
13:4c:c1:b9:84:f3:37:b9:8f:41:26:af:3d:f1:34:
4e:9c:0e:2b:63:94:ed:00:1a:de:06:6e:ea:d0:08:
90:34:50:be:5f:6b:01:d3:47:d1:58:55:4f:fc:9a:
8f:07:77:62:c6:6a:73:ff:b7:c7:d7:d1:ba:4c:45:
e8:17:99:ce:e6:e8:f1:41:a1:87:c4:30:a2:b8:2d:
16:81:11:eb:cb:03:46:85:13:50:04:29:4e:ca:bf:
e4:7b:36:b8:d7:d6:63:7d:f3:ea:d5:04:66:b6:39:
26:1d:50:89:54:e4:ed:69:ef:5a:bb:b3:5b:75:63:
68:a6:79:21:2c:2e:8d:cf:c6:e7:17:82:90:f8:7c:
41:a9:b2:b3:01:b5:29:8d:c9:11:39:0d:67:1f:0d:
6c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C6:00:A7:A3:18:48:53:14:31:4E:46:2E:EC:37:0A:42:69:75:21
X509v3 Authority Key Identifier:
keyid:D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:52:b5:cb:f8:dd:80:3b:c3:07:c1:fc:cb:53:8c:b4:e9:ad:
0f:e8:57:1f:3a:91:04:3a:6f:6f:7f:41:08:43:a0:7e:16:14:
5a:70:5e:e9:93:fb:60:a5:b1:7c:66:b6:7b:40:ae:77:2f:ad:
8a:6d:a2:66:86:cd:0f:50:e1:91:20:bb:1a:38:b6:7d:15:1c:
3f:31:09:9e:c7:b2:c8:b8:0c:86:ce:59:5e:13:2f:b1:6c:20:
64:1d:d3:e9:7c:c6:ef:af:ea:a3:39:35:ad:31:59:53:ad:7f:
da:95:93:49:43:bc:22:5d:6f:f8:00:e7:e0:f9:f8:d7:ee:52:
3a:e1:c6:12:cc:48:84:da:72:66:03:52:a9:ab:ce:45:86:0d:
8e:f2:5a:35:60:ea:e9:f3:c6:56:41:a0:bf:bb:dc:5f:47:90:
4c:5f:65:5c:30:be:07:40:cb:82:cf:9d:63:d7:f5:b8:8e:55:
a0:60:b2:93:50:46:82:00:6f:5a:0d:f4:1d:d4:76:5a:d3:05:
48:bb:ae:62:3d:1f:be:a2:b1:fd:89:4c:f7:8b:80:b4:1e:22:
f2:ce:39:0f:4d:9b:c6:e9:f7:97:24:f8:d2:9e:a7:4d:c2:0a:
19:c4:5e:44:e6:6f:5e:a0:fb:6e:c1:f3:e1:45:45:33:81:10:
74:a2:25:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:17 2025 by rpki-client