Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft (raw, json)
Hash identifier: ghH1mos75ua9DqIxwniwtxUborkLig6+Y6SJY5iEcDc=
Subject key identifier: 1D:DF:F5:1D:85:7B:11:8F:01:DF:CF:C7:7F:E8:DB:C4:9D:0C:B3:11
Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
Certificate issuer: /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Certificate serial: 0198D515AF1774F40E2B4A54D283E0975C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
Manifest number: 03A1
Signing time: Sat 23 Aug 2025 04:00:24 +0000
Manifest this update: Sat 23 Aug 2025 04:00:24 +0000
Manifest next update: Sun 24 Aug 2025 04:00:24 +0000
Files and hashes: 1: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl (hash: aMA6rAobdsBhk6+2E3k1opcF+DgZWutyUSa/L0wgmhc=)
2: HexBDB0ALKRx19vAL_olvRM_0pc.roa (hash: ajSzA7jvEEstqpYQIZuBqV7eWXJVONLQH581vvaQYJc=)
3: PrcLqHgKnfIRGf3YM80gSjoYr6I.roa (hash: ZkwH8oTWm6e+gIX3jU/BvkpmjX7EH4UuYT++yIKL1DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:af:17:74:f4:0e:2b:4a:54:d2:83:e0:97:5c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Validity
Not Before: Aug 23 04:00:24 2025 GMT
Not After : Aug 24 04:00:24 2025 GMT
Subject: CN=1ddff51d857b118f01dfcfc77fe8dbc49d0cb311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:b5:fb:2d:6f:ba:de:f5:36:43:0d:d7:24:
f8:70:46:12:2e:f8:b5:80:e1:55:fa:b7:d4:2b:a3:
c7:2c:c0:ca:1e:42:43:75:96:22:44:6e:af:11:1f:
31:6e:ad:4c:c7:cc:74:d6:7a:71:71:c1:5c:7f:50:
d4:a0:ef:88:79:18:ca:2b:7b:33:88:d7:e2:24:0c:
30:e3:2a:16:0a:27:b1:ea:89:71:02:ea:73:10:48:
8f:74:5e:fa:5d:d6:7a:c4:14:e0:dd:4c:c4:f9:88:
95:64:76:d8:6c:09:30:ab:04:cd:fd:0c:b1:13:03:
84:9a:b3:76:58:5d:a9:a3:ba:88:1e:65:57:ce:85:
eb:e0:c9:3f:9e:76:1b:ab:48:5e:b7:ff:3c:d2:18:
f8:d5:1a:93:c1:d6:11:50:87:9b:99:71:ad:bc:6e:
9f:23:a3:59:04:ea:d3:93:6b:13:77:1e:36:2a:e5:
3c:98:34:8c:07:d2:db:86:56:b1:d0:a0:5e:0f:28:
53:92:0d:1f:35:3d:e7:64:ad:b8:84:a0:b5:33:16:
6f:f7:11:24:85:ed:18:9d:f5:3c:e2:ce:de:01:48:
2c:45:68:90:ae:cc:a5:7e:d2:43:de:fe:d8:d7:31:
51:dc:62:1f:21:33:17:86:e3:dc:2d:0e:96:8d:8e:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DF:F5:1D:85:7B:11:8F:01:DF:CF:C7:7F:E8:DB:C4:9D:0C:B3:11
X509v3 Authority Key Identifier:
keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:db:99:e5:6d:a8:9f:09:02:67:31:ca:a3:3e:61:a2:ec:e9:
c5:6f:e4:1c:a9:41:16:a8:43:c4:21:3e:13:36:d4:da:3e:e8:
93:eb:0c:b7:92:38:cd:7c:07:5d:37:35:3a:7b:9f:60:e0:7b:
ef:95:1e:59:c5:49:8e:42:1b:15:07:11:19:e1:03:fc:d7:6a:
1d:66:70:c7:a2:6e:cd:31:d4:29:a2:61:62:c3:f9:1b:42:6b:
b2:aa:6a:6f:ec:0b:6f:50:e2:e9:9e:d7:49:5a:0d:87:90:d2:
90:35:55:af:72:30:53:88:45:63:e7:c4:18:c6:59:0c:4c:eb:
97:45:ae:09:0b:ed:8b:ca:b3:d8:02:6f:f9:52:26:7e:1c:60:
0c:e4:8e:97:4f:0c:cd:cb:56:64:25:1b:79:96:b9:11:ea:e3:
f1:10:24:b0:65:6a:03:88:85:82:1d:33:a1:74:83:01:93:d7:
c1:b2:4e:67:04:47:bc:28:b7:00:e3:c1:9b:89:88:f2:84:ec:
3f:2d:b5:4e:13:6f:9c:23:ef:e5:c6:9a:ca:86:fd:d0:0e:f0:
f3:56:7a:d9:64:08:a1:6f:94:f0:4f:42:cb:7c:af:32:80:96:
8c:a6:d4:47:5b:7e:3e:5f:d6:8c:91:25:94:d6:f9:ec:d4:fd:
65:e6:2a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:29:07 2025 by rpki-client