Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
File: 1-rZRJK62A6DdXFzuGgq2UhOX22A.mft (raw, json)
Hash identifier: G00vZK2Znayv9jpS1mGR3+XxU+1UFmp7jkq74jNQRvM=
Subject key identifier: DB:13:78:43:E6:8A:B6:F6:1E:4F:12:F8:DF:EE:38:7F:28:DD:26:A3
Authority key identifier: FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
Certificate issuer: /CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Certificate serial: 0198D8515330B6CF4A5C2360727EBDB2BAA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
Manifest number: 09A5
Signing time: Sat 23 Aug 2025 19:04:24 +0000
Manifest this update: Sat 23 Aug 2025 19:04:24 +0000
Manifest next update: Sun 24 Aug 2025 19:04:24 +0000
Files and hashes: 1: 1-rZRJK62A6DdXFzuGgq2UhOX22A.crl (hash: 0xBo+6VD+sXofG9clgzDRg5qNM9UM6aw9B5h5AQ6ItM=)
2: p41jrQB80nM3Fi93nL78jR6iBMo.roa (hash: nJZUqGT5BG1vu4ck1mxKQBzWxDOQCEnlZy8FawGaQcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:53:30:b6:cf:4a:5c:23:60:72:7e:bd:b2:ba:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Validity
Not Before: Aug 23 19:04:24 2025 GMT
Not After : Aug 24 19:04:24 2025 GMT
Subject: CN=db137843e68ab6f61e4f12f8dfee387f28dd26a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:eb:9a:cc:8e:0d:6e:82:53:76:a5:82:40:f9:
fb:cb:cc:ba:c9:ed:a3:a3:70:9f:b3:7e:2c:52:53:
bf:2a:47:f9:09:33:ae:8a:9b:6f:ec:a4:1b:f4:d0:
2b:81:44:95:c1:0c:3d:2d:4c:2e:d8:ac:2e:43:26:
86:e3:d8:96:a1:2a:33:12:b5:c2:b2:13:6e:8c:85:
6c:87:d0:29:9d:1e:6f:3e:12:be:c3:a0:3d:56:41:
90:a9:ce:84:ac:8a:4d:0f:6c:9a:9f:90:e8:cc:38:
85:4c:86:d5:44:dc:91:14:e8:62:82:d0:85:55:4a:
b3:39:82:17:ec:eb:88:55:b4:5a:d1:db:3f:d3:94:
d5:ee:32:9e:4e:31:b0:5c:e7:6d:02:0b:57:e1:db:
87:38:32:ad:34:8f:2f:fa:5a:05:bc:fc:73:77:99:
cf:dd:18:50:6c:dd:ca:63:3c:c5:15:6b:7b:8e:d2:
ef:69:64:0a:89:07:1d:0e:5f:bb:03:d9:22:b9:3c:
2e:f6:59:74:a7:0d:70:40:c6:c5:4d:e0:6c:58:99:
4a:68:01:a1:f5:b8:13:de:f8:0a:ac:f5:4a:1c:e7:
f1:9c:79:8c:9e:4d:61:85:38:84:95:dc:9a:2b:4f:
c1:77:63:c2:e5:00:d0:9d:25:df:f2:cb:0b:95:8e:
c5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:13:78:43:E6:8A:B6:F6:1E:4F:12:F8:DF:EE:38:7F:28:DD:26:A3
X509v3 Authority Key Identifier:
keyid:FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:51:d2:e9:d0:ff:3c:ad:27:6c:61:49:80:d4:2f:18:09:56:
82:65:97:e8:54:f7:2b:0a:a7:c9:b1:c9:70:95:d0:9c:97:c3:
25:f1:12:f6:d9:dd:2d:c7:be:4c:13:7d:f7:88:7a:b5:2a:64:
fa:6b:2f:04:44:f7:81:5b:c0:0a:62:6c:3b:6a:77:1c:c0:80:
aa:c1:bd:c7:63:d9:85:98:a2:ea:19:37:cd:7b:28:bf:91:05:
cd:bd:f7:7c:b3:15:69:45:de:47:97:e2:3c:7e:37:8a:a0:0d:
d7:43:90:02:8b:41:e3:cb:f1:45:53:eb:2b:6c:1a:bb:66:06:
1b:47:c8:d2:80:41:9e:fc:26:f2:d0:16:fe:81:a3:2f:43:10:
50:16:c9:d3:d7:53:74:86:36:0c:06:dc:08:93:c7:ff:93:7d:
dc:8e:b7:6c:ad:3c:df:33:f5:dc:d9:55:c6:36:f0:5d:da:df:
86:47:e2:13:dc:18:96:3b:0f:c0:ae:bb:b8:53:df:39:e1:85:
38:7f:08:fa:27:f1:ad:bc:1f:da:6b:b7:2c:87:0a:e8:33:21:
76:3a:0b:46:9f:a8:76:97:57:81:41:05:fa:57:38:46:c5:d8:
ef:ae:82:73:0a:ce:09:9e:a9:25:35:cd:61:00:46:61:d6:06:
f1:78:6c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:07:10 2025 by rpki-client