Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json)
Hash identifier: l+YU+g5yiJVd9ElKzAwNstyddS3DkZR7pBxF1CH8qTs=
Subject key identifier: FB:26:18:69:3E:B2:D8:9A:24:BB:45:D1:EE:1A:F2:7F:05:95:38:7C
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 0198D4725B91B2091E2275FED67AE311E479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
Manifest number: 12B4
Signing time: Sat 23 Aug 2025 01:02:00 +0000
Manifest this update: Sat 23 Aug 2025 01:02:00 +0000
Manifest next update: Sun 24 Aug 2025 01:02:00 +0000
Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: 4sNyl4nNHgIArJIaNcDbPYomy2kIUyqKSk0BVtTbY58=)
2: MwEJqReLtYJIDzQC3nxs7sP0tvA.roa (hash: WyxWLsA6emUiFQU/YyUOL864IemIj/7UtRIviv8JcEw=)
3: iAzdsnC_l6rdd2kZ6hvA3HRXqCU.roa (hash: sMPWtnAj59EVmsTaMYwCg3wIrLPxpEslb0ZjPRwWR6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:5b:91:b2:09:1e:22:75:fe:d6:7a:e3:11:e4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: Aug 23 01:02:00 2025 GMT
Not After : Aug 24 01:02:00 2025 GMT
Subject: CN=fb2618693eb2d89a24bb45d1ee1af27f0595387c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:68:92:cf:ea:99:05:5c:9a:2f:a9:07:a8:dd:
5e:0c:28:0e:a4:5f:5e:d6:22:24:97:71:54:f4:ad:
fb:be:f5:4d:af:1c:8a:51:ac:91:60:0b:8a:83:9a:
5b:97:c9:7e:c5:44:cd:45:e3:25:84:46:cf:eb:7c:
3e:10:02:3b:44:d3:51:4b:f1:83:d4:1f:4e:de:3f:
57:8b:2c:41:dd:cd:2b:3e:cc:47:55:d9:20:b5:0c:
e0:72:5e:26:c3:77:f6:a4:09:ec:3b:e3:b5:c7:a5:
52:4b:16:a4:f0:c0:a6:c2:7e:b9:cd:b4:8d:bd:91:
81:bc:bc:ac:8c:bd:e9:46:0f:89:0f:78:77:4b:d9:
29:83:fc:64:07:de:f0:86:a4:19:d7:44:f4:88:d2:
dd:c1:c3:77:4a:3b:38:f2:c6:6c:d3:41:7f:84:9f:
41:6b:f0:87:02:a6:cd:c1:c5:55:b2:04:d6:d1:15:
9f:7e:c9:e3:6d:09:8a:43:18:b3:69:51:8d:5f:59:
a4:c1:e7:2a:e0:5c:41:b0:a1:47:ab:29:46:96:41:
aa:59:c9:cc:d4:58:22:9e:34:94:62:ee:a0:5d:b7:
8c:9c:05:82:c0:92:8f:16:b9:01:33:57:7d:73:68:
29:d1:17:10:5e:73:12:c9:df:1c:75:35:e2:e1:04:
eb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:26:18:69:3E:B2:D8:9A:24:BB:45:D1:EE:1A:F2:7F:05:95:38:7C
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:11:f6:f9:76:ef:22:e3:96:d8:79:40:9f:76:fb:f8:a7:92:
ff:2e:ba:7c:f1:82:a1:7f:36:12:42:0b:d9:80:3d:be:79:9c:
96:7a:65:1a:d0:78:76:9f:c5:44:67:76:8a:99:a2:6f:f6:06:
aa:6d:bc:2e:64:d5:fc:f9:b4:6b:f2:8f:d3:12:9f:43:6d:88:
a7:1c:ad:76:ea:07:d7:b4:20:bc:3c:af:30:af:df:c2:e3:9e:
c6:8c:69:fd:e3:e3:78:f7:c8:e2:b6:48:55:ee:7c:48:3f:20:
13:bf:a2:1d:c9:63:ef:8d:ba:a4:74:b6:01:ba:5d:d3:1a:73:
39:76:67:ef:24:38:46:d5:86:f7:98:ca:63:ea:6a:c2:16:cd:
9e:2f:82:a4:43:ec:37:dc:4b:5b:b8:71:6f:fd:02:02:b4:ff:
fb:f9:63:84:7d:b4:0d:ca:1f:f9:ed:40:49:07:c9:e9:d5:41:
28:db:ac:44:79:c7:0f:51:0d:12:19:5f:6a:ac:26:50:36:e4:
0e:00:80:e9:c5:30:b6:43:36:34:c5:41:6b:56:2f:5f:65:df:
3f:e1:a0:db:87:2b:6d:2a:ac:8b:a3:a8:88:31:bf:20:cd:e9:
ab:52:f0:c3:cd:0e:af:ba:bc:fb:45:d2:7b:e2:24:7a:87:7f:
1c:90:54:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:38 2025 by rpki-client