Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
File: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft (raw, json)
Hash identifier: iRZJMqz87zXziKDDrV1m0OFBPCbAk2Hr2WvYlHIqqkQ=
Subject key identifier: D8:EC:CB:24:05:F1:2F:70:25:4A:1A:C6:3B:35:C1:A1:97:5A:CE:AE
Authority key identifier: FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
Certificate issuer: /CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Certificate serial: 0198D65EF7F992A4DCE6630867D341D5D562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
Manifest number: FF
Signing time: Sat 23 Aug 2025 10:00:04 +0000
Manifest this update: Sat 23 Aug 2025 10:00:04 +0000
Manifest next update: Sun 24 Aug 2025 10:00:04 +0000
Files and hashes: 1: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl (hash: prPzjgTMI87V1R0LEYhof+8R1F86GvYh17sw/QK9REo=)
2: aw0urpJM4p93PhWqM7da0_3Fozc.roa (hash: y+1M15neToXwBCTOLJI0dSNYHmOEXNHkxHoQ5Af6Zqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5e:f7:f9:92:a4:dc:e6:63:08:67:d3:41:d5:d5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Validity
Not Before: Aug 23 10:00:04 2025 GMT
Not After : Aug 24 10:00:04 2025 GMT
Subject: CN=d8eccb2405f12f70254a1ac63b35c1a1975aceae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:9c:91:a1:e4:da:e2:8b:74:ee:c1:c0:e9:
ca:36:f5:03:10:c9:ce:d3:8e:9d:35:0a:bf:a8:cd:
3b:fc:82:6b:81:42:28:cb:d7:95:d0:cf:43:ee:42:
85:0e:e3:a1:12:3b:21:f7:9a:de:47:f8:ba:ab:cd:
e2:34:65:71:04:b8:42:ae:d4:01:cf:d7:5f:3c:69:
25:0d:a1:39:98:ba:60:df:ef:ab:49:dd:5a:7d:8d:
61:32:f4:93:83:c5:d9:4f:ca:0a:79:38:3d:fa:39:
e8:d3:8c:7f:ab:5e:db:e0:ca:28:cc:85:73:7e:c9:
2c:9e:71:c3:bb:48:8a:d6:d7:c2:c7:35:67:c6:fe:
22:e0:cc:18:69:51:b5:61:51:87:9f:00:1b:12:42:
a5:63:32:40:dd:42:dc:0d:e2:fd:8a:ab:f1:c8:22:
a0:ca:3c:87:90:2c:3d:b0:e0:32:f5:f9:58:61:6d:
74:01:29:f1:cb:21:c9:8a:ae:26:b3:2d:fe:0f:ad:
b3:98:6d:1a:53:b8:09:8c:c8:d2:c6:46:c0:f7:e1:
d3:7a:a6:0c:81:cb:be:91:30:e2:60:5d:da:c6:e4:
fb:cf:b6:29:0b:65:37:97:c7:2e:04:47:23:bf:1d:
60:c7:fd:7c:df:3a:50:72:82:6d:90:7b:f6:03:b2:
64:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EC:CB:24:05:F1:2F:70:25:4A:1A:C6:3B:35:C1:A1:97:5A:CE:AE
X509v3 Authority Key Identifier:
keyid:FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:cb:22:4a:05:8e:fd:85:84:b6:db:34:54:ed:ac:95:65:5d:
4b:30:ab:0a:e0:3e:af:9c:40:d5:01:a0:eb:8d:fd:1a:3a:92:
a1:85:67:16:df:99:c0:d8:de:ef:0b:7e:e8:f1:71:67:a6:49:
8e:1e:d3:cc:d0:d4:40:a8:da:c1:ef:1b:06:87:01:cf:94:8e:
c3:b1:d8:2a:1d:3a:10:d9:aa:1d:e0:44:d2:0c:5f:63:a5:8a:
d8:b0:38:b7:55:4a:10:36:42:2d:1c:3a:cb:89:fb:86:15:b9:
aa:f3:7d:95:e0:45:75:00:e0:bc:0a:f4:cb:f2:f4:1e:78:59:
69:c0:ba:8e:15:51:c8:e8:16:e9:92:a0:82:19:5f:3c:fc:a4:
86:c3:0c:69:fb:60:bc:d1:65:25:c0:53:56:5d:df:b8:c6:ad:
7a:ba:a2:43:98:db:a5:b9:99:13:95:86:53:a0:aa:8d:98:7a:
4f:86:a4:6c:9c:96:93:96:a2:65:4c:f4:18:41:dc:64:d5:13:
ce:3f:cd:41:ba:16:5b:1d:01:e1:4f:d8:24:b2:d2:7b:f4:5d:
60:af:bc:ef:8b:2f:8a:de:49:f8:9d:55:70:1b:f3:a3:13:f7:
42:45:8c:f2:5d:b3:08:34:71:12:31:26:35:9a:75:1a:43:ef:
c3:ec:d0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:16 2025 by rpki-client