Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
File: 1873Xgl6YxiGszyB9kql67wMMqA.mft (raw, json)
Hash identifier: GhtfEJf5e4tMs1nyrqqIVheSdBct9+XA+ZvqKKI5SWY=
Subject key identifier: CB:F4:FE:9A:83:BF:11:8B:18:DD:A3:9C:AE:1B:0C:51:05:98:B6:E8
Authority key identifier: D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
Certificate issuer: /CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Certificate serial: 0198D58365D177E2FD2FDD63CBA05E167CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
Manifest number: 047A
Signing time: Sat 23 Aug 2025 06:00:14 +0000
Manifest this update: Sat 23 Aug 2025 06:00:14 +0000
Manifest next update: Sun 24 Aug 2025 06:00:14 +0000
Files and hashes: 1: 1873Xgl6YxiGszyB9kql67wMMqA.crl (hash: 1wfZ/VPb7Mj7Rg4NGK4ap4/H/LO/PGEjVWI1iFMDpyU=)
2: tavXsXu7Wm_kIdKnzfVPzxktMGQ.roa (hash: PDEUyoKVmJLpE4EXJZCm2eA6jcMg8DukO+sjxPMBeZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:65:d1:77:e2:fd:2f:dd:63:cb:a0:5e:16:7c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Validity
Not Before: Aug 23 06:00:14 2025 GMT
Not After : Aug 24 06:00:14 2025 GMT
Subject: CN=cbf4fe9a83bf118b18dda39cae1b0c510598b6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:b7:e3:9b:7c:ae:25:2f:a5:a2:d2:07:48:
91:1d:b1:19:c5:48:bc:77:b0:e6:aa:3a:54:7f:b6:
6d:b1:b1:b1:a0:12:ec:b9:c0:e6:64:3a:80:50:94:
dc:88:2a:99:6b:ba:72:aa:b5:3d:07:38:69:75:f7:
50:72:12:a7:c0:61:6d:6e:83:f4:eb:50:d7:d4:f8:
22:11:b7:ef:29:77:de:39:f2:d9:6d:2b:5a:61:a3:
2a:9f:41:fd:ff:be:d9:66:bb:87:dd:e1:f1:34:8a:
9f:38:e9:ff:c8:e5:85:63:9b:c8:a2:a1:c2:e8:fc:
10:26:5f:23:c5:35:dc:b4:37:10:f8:de:a3:38:48:
75:6d:4f:d7:9d:fa:d1:6f:bd:6d:36:a3:24:b0:94:
dd:82:7a:5a:fb:6e:74:b4:89:eb:d1:fc:3b:ef:c7:
6a:24:43:c1:a7:6b:03:cb:24:cb:dd:33:d7:b9:cf:
42:bc:08:9e:7b:4f:cd:05:68:ef:a2:28:0a:22:b9:
e6:b6:ae:bc:93:6e:d4:4a:90:4b:82:98:bf:c0:f2:
14:77:1f:c8:3b:a0:11:fa:76:b9:2a:c3:2b:b7:3e:
e8:e3:f0:a9:fb:e3:88:91:5f:2f:2e:ba:4b:4c:73:
b2:a1:07:b6:88:f4:61:28:0a:98:61:fd:33:79:01:
f3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F4:FE:9A:83:BF:11:8B:18:DD:A3:9C:AE:1B:0C:51:05:98:B6:E8
X509v3 Authority Key Identifier:
keyid:D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b4:4b:00:d1:cd:84:35:c0:e9:ca:1b:85:99:ed:fe:e7:f1:
3f:ba:b0:9a:85:31:bc:61:df:aa:ea:17:95:e0:1d:d2:d8:7e:
5b:50:99:3f:2f:c8:7c:0f:75:b9:1a:db:48:cd:2b:5e:a7:dd:
05:c9:f1:63:66:7f:d8:6c:aa:0b:41:8e:e7:37:35:7c:10:c2:
e8:84:b5:fb:11:61:f4:c0:f0:8f:e3:54:92:f5:05:9d:79:6b:
55:f8:17:56:78:d0:dd:fc:6d:75:30:03:c4:4d:39:14:d2:29:
d7:56:b6:9d:1c:65:ee:e7:b9:b9:e9:08:a1:47:71:85:4b:4f:
95:c8:29:6b:d5:09:fa:68:14:2e:0a:70:5b:be:ae:09:5c:bc:
db:33:9d:2d:fb:ef:0d:26:c7:fe:73:30:bd:e7:3c:01:8b:b6:
55:fa:92:51:fb:1c:72:34:15:36:cb:4e:a1:c2:b8:07:4d:4c:
8c:c5:55:30:3f:c4:01:5a:19:90:1a:e0:a3:b3:8d:c7:ef:38:
6e:97:52:28:c9:04:7d:c0:89:30:66:3c:96:e1:ec:58:1a:38:
5d:05:2a:83:76:9b:81:00:12:de:f2:ee:a9:60:57:dc:ec:b6:
d7:3c:a9:bb:d1:9a:1f:ca:ef:83:35:c1:70:2d:d1:f7:0a:91:
16:fc:51:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:34:26 2025 by rpki-client