Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
File: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft (raw, json)
Hash identifier: u9VbzPktU2Uf6xCtpgBT9j5KE6eMndMXdQYYg2/nasw=
Subject key identifier: A8:6A:78:5B:E0:D4:F3:EB:1D:51:C3:DE:23:CD:A1:22:D1:4F:FC:19
Authority key identifier: FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
Certificate issuer: /CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Certificate serial: 0198D6CD8100EECA22206A7FA521434FCAD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
Manifest number: 14B9
Signing time: Sat 23 Aug 2025 12:00:48 +0000
Manifest this update: Sat 23 Aug 2025 12:00:48 +0000
Manifest next update: Sun 24 Aug 2025 12:00:48 +0000
Files and hashes: 1: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl (hash: AEfaMF10cXm5aVk4Fly1GoP2pCQzR3a7xF8+WhPwPK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:81:00:ee:ca:22:20:6a:7f:a5:21:43:4f:ca:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Validity
Not Before: Aug 23 12:00:48 2025 GMT
Not After : Aug 24 12:00:48 2025 GMT
Subject: CN=a86a785be0d4f3eb1d51c3de23cda122d14ffc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:aa:0f:2d:f3:b2:e2:f0:8c:be:4a:62:01:1a:
45:64:2a:15:06:75:a5:b7:db:09:34:f3:c4:f6:38:
b6:27:af:2f:0d:4d:8f:a2:e9:64:e5:e2:fd:0a:bc:
85:51:89:3a:6d:a0:b0:ca:15:4b:d0:f0:d3:5f:83:
ec:30:ec:1e:f8:37:93:16:d9:f5:e3:0c:65:6f:01:
4f:98:89:7b:16:8d:bd:13:16:48:c7:c0:53:e3:6a:
d5:e6:15:86:99:9b:2e:39:24:7c:59:1d:9a:cd:bb:
46:89:ee:ea:e8:b8:b6:b0:b5:8c:92:f5:43:ff:b9:
1f:11:15:68:ee:d3:23:78:92:db:8b:8a:a2:de:a4:
b2:8c:54:3f:e4:f9:e8:e4:c2:28:68:16:48:c3:19:
ed:1a:4f:2b:35:17:08:a9:86:a8:bc:99:0b:0a:d1:
62:0f:78:53:82:a3:8a:7c:69:62:2c:30:3d:68:6d:
51:88:3d:1f:da:6b:55:41:81:50:d5:05:94:ac:8a:
fb:cc:64:fa:63:9c:b6:d1:3f:1a:39:f3:98:25:58:
a2:80:49:9d:71:54:6f:6a:3f:bc:9c:36:76:f6:83:
0a:68:58:02:e4:d6:19:88:89:8e:18:b9:1c:ab:ed:
b3:1d:ca:d4:6b:3a:be:70:da:10:ac:4e:22:5f:a1:
4a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6A:78:5B:E0:D4:F3:EB:1D:51:C3:DE:23:CD:A1:22:D1:4F:FC:19
X509v3 Authority Key Identifier:
keyid:FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:73:4e:51:31:43:8f:08:0c:b5:0b:6e:81:9b:25:fa:38:7a:
93:6b:1e:f7:d7:51:9c:ec:0f:f2:c9:d5:b5:d1:94:f9:93:7a:
d4:cd:41:7c:ef:cb:6d:34:d8:c0:c2:7b:ca:05:16:b5:4e:d4:
7f:b4:56:3d:db:92:bc:ae:76:a1:a7:7e:61:44:09:29:e3:8f:
d8:dc:bd:29:2d:da:bd:c9:a4:f3:4d:bb:40:2c:ed:93:bf:58:
3b:50:bb:e5:65:0d:a4:9a:71:c5:53:71:54:1b:a9:ad:e3:1e:
97:99:85:6e:5b:a3:a0:26:6e:80:cb:8b:f2:58:59:72:c7:a3:
19:86:a3:b1:d7:e3:35:b3:79:9c:87:f7:1f:6e:07:0f:74:1d:
71:1e:8e:ab:49:fc:3e:1c:b6:a1:dc:0e:2f:9a:4d:e6:ea:02:
1c:09:8c:fb:c8:51:53:9a:9a:5c:1f:51:33:fa:b2:4d:f4:2a:
1d:a5:45:9a:3d:24:b7:10:7b:59:ac:19:8d:99:87:8f:20:67:
64:cc:71:82:db:8e:17:5e:97:90:60:a4:83:93:94:5d:56:45:
4d:96:2f:7b:a7:43:fd:2a:e6:9f:e2:2f:df:a9:12:08:b2:0a:
b2:32:23:5b:2d:37:ae:24:95:d8:74:44:72:7d:4d:b9:16:22:
db:22:ad:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:37:24 2025 by rpki-client