Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
File: CsFWWl9sTlTKLxnTZHWbag7WGEA.mft (raw, json)
Hash identifier: zY8ngXTtAOc1H636beFTtNks+dt8dYXz/SJl0ucOTFY=
Subject key identifier: B1:BA:56:33:9F:1A:50:DC:00:43:48:F3:56:EA:01:AF:10:72:AF:FA
Authority key identifier: 0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
Certificate issuer: /CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Certificate serial: 0198D4E09BCE3CF8492E57E5980145D9195D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:26 +0000
Manifest this update: Sat 23 Aug 2025 03:02:26 +0000
Manifest next update: Sun 24 Aug 2025 03:02:26 +0000
Files and hashes: 1: CsFWWl9sTlTKLxnTZHWbag7WGEA.crl (hash: N1Pi/sbgBjq/Rf0gww8q32jSl0prnFnGyP7BhU27ILw=)
2: QP38gNz3xco5qv5nlkhRVeJhNcc.roa (hash: iHHCmYPxx8nMI8Pl/VJqH9lchdWekUpYcRiMjWpeVhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:9b:ce:3c:f8:49:2e:57:e5:98:01:45:d9:19:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Validity
Not Before: Aug 23 03:02:26 2025 GMT
Not After : Aug 24 03:02:26 2025 GMT
Subject: CN=b1ba56339f1a50dc004348f356ea01af1072affa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9a:18:69:63:6f:05:68:51:f3:6f:32:82:c5:
db:a6:bf:e5:9d:fb:04:9a:e8:5d:bc:b4:af:5c:f5:
fa:12:6d:1a:bb:ff:ea:b8:9e:c8:ad:65:09:d3:33:
70:4a:8a:1e:6d:f9:f9:8a:e4:5b:b0:87:c0:4b:05:
e6:e3:c2:f4:d4:94:b1:be:5e:6a:f1:3e:1e:aa:de:
ff:31:44:97:77:c4:99:3f:32:93:0e:9b:bc:50:cd:
82:6b:a0:41:a4:73:a6:0d:05:19:07:77:25:8c:45:
83:85:64:15:1a:05:e7:bc:46:85:2b:39:52:c8:cf:
47:1e:31:d3:4c:ea:e7:53:e9:a0:af:5c:dd:65:ac:
15:85:72:73:41:a3:91:02:36:45:e0:15:20:59:5e:
9b:9b:51:c4:13:b3:54:63:03:da:dc:e6:e5:93:af:
fc:67:0f:13:02:52:72:1f:c4:e4:12:e9:80:4a:c4:
35:10:c8:f2:5d:e5:e7:b4:7b:7e:5b:5d:4f:00:4b:
3b:2e:7b:6a:39:51:ee:ef:1f:46:fe:a9:0b:1b:40:
87:5c:7e:30:f4:b4:f4:c7:a4:05:df:c6:7e:72:a6:
94:09:eb:f0:05:fd:6f:6f:df:16:bb:4b:e0:72:5a:
5a:ba:87:a7:ba:0b:18:54:3c:d6:db:af:52:26:d8:
f5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BA:56:33:9F:1A:50:DC:00:43:48:F3:56:EA:01:AF:10:72:AF:FA
X509v3 Authority Key Identifier:
keyid:0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:58:61:f4:09:78:e8:c6:50:46:25:44:37:2c:9b:fa:15:bc:
56:4b:5c:1f:54:73:f3:98:1d:69:63:15:18:99:2f:d2:65:e3:
2a:2c:81:02:fa:e8:d7:a8:ae:98:ac:a0:44:43:7a:bf:32:ee:
ea:10:89:68:03:2f:2a:b5:c3:06:54:39:d1:95:c9:d9:73:ca:
1a:07:f3:02:8f:22:bc:3a:1d:90:38:7a:f1:32:70:2c:f7:7b:
ed:d0:3a:f9:0e:60:4e:89:65:07:1e:fd:9e:05:14:75:e9:93:
8d:8a:1b:c5:a4:e7:0c:f0:dc:54:13:39:fa:52:b1:eb:7e:6d:
dd:59:c7:02:a9:a1:9c:81:1d:89:0a:38:5f:88:22:01:21:9d:
9d:41:91:28:b1:e7:f1:1b:65:e3:ee:7a:50:7e:1d:da:0a:8c:
26:f1:28:bb:67:13:a5:54:de:65:94:9b:6f:55:5d:0e:8f:fc:
2b:0c:f3:f2:34:4c:ce:18:03:99:e7:1e:cf:2e:50:b6:65:fe:
d4:76:60:23:95:c2:22:2d:07:06:d0:ee:55:0e:50:92:dd:08:
3c:14:ca:5b:f0:55:18:cb:ac:6a:0b:e2:aa:1c:e0:05:93:77:
73:ad:3f:5e:b6:31:6c:b0:c8:ae:ce:ab:92:7d:5a:9d:7b:a4:
94:00:af:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:17 2025 by rpki-client